Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: H76SPpQ7nMYRvd23gcxBJlHGztEhaAQbNaUg4tQTvAQ=
Subject key identifier: 39:31:E6:F6:10:A3:37:80:74:8F:D0:B0:45:CB:FB:65:B9:FC:B8:DA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2C57A2A55BC66536BB9491E2F7A1045E365C9603
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:03 +0000
ROA not before: Mon 26 Sep 2022 06:55:03 +0000
ROA not after: Mon 25 Sep 2023 07:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:57:a2:a5:5b:c6:65:36:bb:94:91:e2:f7:a1:04:5e:36:5c:96:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:03 2022 GMT
Not After : Sep 25 07:00:03 2023 GMT
Subject: CN=3931E6F610A33780748FD0B045CBFB65B9FCB8DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e7:d2:dd:75:98:91:9e:81:d6:cf:77:ed:68:
23:97:b1:2d:76:52:71:b9:09:fa:fe:74:b8:1f:4c:
a8:50:97:bf:98:3f:07:51:9c:af:a8:3f:51:57:f0:
56:fd:33:37:db:cd:aa:0e:67:8d:27:c0:ca:9d:a5:
79:fe:e5:e3:ee:95:de:cd:af:0a:12:1e:d8:0e:89:
23:9a:96:c1:27:53:70:d9:97:6c:e0:6c:70:fd:51:
d6:ed:22:93:c7:7c:fb:f4:51:11:f4:18:62:3f:35:
4d:5d:8a:ea:e7:ff:65:c8:d7:7b:dc:39:f9:35:38:
1b:b4:33:32:8b:40:cf:06:0e:99:e7:e9:f0:40:90:
46:0c:f9:36:35:8d:b2:b6:fc:91:19:ec:00:3a:75:
0a:7b:17:86:f9:0f:3f:58:0c:cf:d1:54:c1:82:6a:
22:b7:57:dc:8f:70:45:ab:d8:63:28:63:eb:01:f6:
78:12:56:ee:b2:3e:d7:af:a4:a1:59:2f:8c:3b:e1:
49:76:cd:6a:09:2a:89:41:bf:d3:0b:c1:00:6c:07:
9f:e4:bd:1f:c1:b1:43:5d:89:74:72:fe:a1:c7:3d:
1b:43:1c:15:b1:33:9a:b6:7f:97:1a:0e:0d:60:57:
c8:94:6e:f3:4d:fc:cb:6d:ce:77:1c:1b:92:4e:4c:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:31:E6:F6:10:A3:37:80:74:8F:D0:B0:45:CB:FB:65:B9:FC:B8:DA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:6::/48
Signature Algorithm: sha256WithRSAEncryption
0c:1c:06:0c:a8:b1:2e:70:3c:e9:d2:1f:28:ee:67:7c:9f:b2:
9e:88:e5:c4:18:a5:8a:74:b9:65:70:fb:bd:22:8e:9d:80:50:
de:b9:17:f2:cd:0e:4a:82:30:c8:08:49:2e:4a:8b:cb:ff:e3:
f7:d7:af:ba:85:18:be:56:f8:eb:e7:f1:e9:68:49:ae:6e:95:
63:47:34:e7:5f:b6:57:7d:aa:e3:de:46:6b:c5:a9:e5:17:a3:
09:d7:32:4d:d8:6e:3c:30:51:b0:80:f8:3e:ea:86:2f:bc:25:
d0:83:03:01:cf:75:92:f8:6e:0c:fb:b9:38:ee:5f:12:3d:04:
74:ef:4a:f8:eb:48:66:f7:dd:b7:88:11:cc:33:35:5d:f5:02:
ea:5d:6b:92:7c:0e:eb:c7:e0:34:ad:5b:15:44:5a:2d:33:37:
4b:bd:34:50:ad:a3:35:e3:bb:da:88:b0:72:20:95:a5:3b:fe:
43:59:d4:28:6c:bb:0d:63:3b:49:18:30:1f:c7:50:71:3d:79:
cc:32:1f:94:42:f6:f1:b9:bf:f6:fd:79:3b:28:94:a4:ea:b6:
6b:e5:db:63:99:55:e6:5f:ff:5c:9b:4a:ce:2c:54:5f:44:73:
b5:28:ba:37:c6:83:ff:ff:59:18:7b:04:1d:60:1e:80:dd:70:
16:3b:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org