Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a37343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 7ti/Ww+f8siJLmR2f1/7vhLOscor4+2Ha7LPQS9ySPQ=
Subject key identifier: 90:09:81:3F:5F:12:38:72:CC:AB:CA:A7:D6:5B:EF:0D:26:0A:CF:53
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 21438EEC43871E375ADE8531CCCA53DAF9F79978
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:00 +0000
ROA not before: Mon 26 Sep 2022 07:57:00 +0000
ROA not after: Mon 25 Sep 2023 08:02:00 +0000
asID: 59282
IP address blocks: 2400:d680:74::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:43:8e:ec:43:87:1e:37:5a:de:85:31:cc:ca:53:da:f9:f7:99:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:00 2022 GMT
Not After : Sep 25 08:02:00 2023 GMT
Subject: CN=9009813F5F123872CCABCAA7D65BEF0D260ACF53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:aa:3a:ba:43:aa:b5:9f:b6:86:fb:90:eb:
ad:d9:41:46:03:a3:d3:28:ac:62:4e:00:df:b2:11:
56:06:29:0f:dd:34:99:e6:64:3d:4a:b9:76:61:c2:
03:bf:1b:51:ad:67:0d:09:32:5d:c1:22:2f:d8:b6:
8a:5c:ee:f2:fd:02:3f:af:3f:8a:b7:06:16:75:fb:
3a:99:9f:82:79:29:ff:c2:0d:aa:f6:e2:4d:93:09:
87:cb:6c:fc:fe:c6:9d:e1:3a:52:23:c6:c4:3b:ad:
45:fd:41:ef:b0:98:05:8d:9e:36:c0:63:a3:e2:5b:
16:3f:23:bc:10:eb:56:21:ad:77:cd:d2:c4:be:a3:
de:c6:9f:56:19:62:c1:75:27:13:59:65:67:8b:b3:
49:fd:eb:ba:6c:3e:36:80:f3:66:28:22:eb:d4:cc:
6c:47:26:c1:c7:2f:bd:56:06:c0:68:70:b9:7c:9f:
ce:df:1e:8f:72:7c:ab:a6:50:d4:26:47:fe:a6:f5:
65:a1:f2:92:a8:f0:0a:03:0d:35:de:88:d7:88:59:
4a:8d:61:94:98:02:b6:a2:a5:d0:c0:e7:1a:f7:db:
2b:3a:f7:48:eb:4f:fe:25:13:cd:58:db:91:c0:52:
d4:a1:22:79:fe:d4:fd:d2:b5:89:b3:f9:fe:11:8a:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:81:3F:5F:12:38:72:CC:AB:CA:A7:D6:5B:EF:0D:26:0A:CF:53
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:74::/48
Signature Algorithm: sha256WithRSAEncryption
86:24:30:a6:17:86:3a:d3:c6:26:d7:2b:be:c4:b3:b5:3b:75:
06:fb:e1:65:77:2a:e7:29:12:4c:7d:90:07:c4:31:48:72:f8:
9d:13:ef:14:e4:6c:57:9a:e2:b4:ed:97:eb:ba:f8:c2:62:00:
58:d7:6c:b1:fd:35:ee:f2:ad:8f:a9:0c:5f:55:d9:1f:74:c3:
c7:d5:48:5a:31:20:cc:72:02:3d:fa:ad:19:5d:63:8a:cf:8d:
ad:84:03:8a:0c:09:e3:f5:69:cc:70:d5:67:2f:47:f4:98:ac:
65:72:3b:21:41:09:fb:bc:93:9a:27:73:8c:b7:86:63:02:e0:
ed:47:f0:94:48:72:db:56:28:6e:96:9c:b1:84:0c:54:27:c4:
2c:8b:57:4b:a4:23:92:48:e7:c8:70:a6:c5:f7:74:e8:a2:c2:
42:1c:f4:5f:fd:94:80:63:67:74:fc:c1:26:6c:6f:73:af:8a:
6f:02:91:ee:1a:35:f4:c1:2c:ea:9e:8e:62:46:51:35:7a:0a:
43:a3:f9:ca:1d:b1:3a:6d:d2:0d:dc:46:7f:71:ee:29:cf:b0:
79:2c:bb:db:a9:a3:21:f5:54:37:09:f5:e5:db:0b:ac:4b:2e:
f0:90:da:a5:ef:c4:fb:db:f5:ec:97:d1:48:9e:8e:3c:f6:51:
db:0b:87:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org