Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a37383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 3IVYAhDv0mn3WX9Wt9EfYoXczZ0HG9e5ZaYYSSGDgMM=
Subject key identifier: C9:BA:15:C4:C5:99:6A:B7:A8:9E:12:B9:9E:B2:9F:B8:6A:8D:61:85
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0B5EBF4010238464A264ED68AF7E9B209CE673A2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:18 +0000
ROA not before: Mon 26 Sep 2022 07:57:18 +0000
ROA not after: Mon 25 Sep 2023 08:02:18 +0000
asID: 59282
IP address blocks: 2400:d680:78::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5e:bf:40:10:23:84:64:a2:64:ed:68:af:7e:9b:20:9c:e6:73:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:18 2022 GMT
Not After : Sep 25 08:02:18 2023 GMT
Subject: CN=C9BA15C4C5996AB7A89E12B99EB29FB86A8D6185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:93:b3:b5:4a:47:e8:37:c6:df:94:e1:ea:
84:11:26:12:9b:81:06:9a:20:23:d6:b5:e2:82:1e:
1d:b6:46:30:d2:80:37:a5:88:62:37:9f:97:b9:1f:
f0:84:6f:e0:ae:3f:bb:0d:00:59:70:6e:8c:4a:b0:
9b:bc:89:99:08:89:a2:af:3c:82:5e:a5:e6:ff:bf:
8e:d8:61:5b:e1:48:04:87:48:ce:c4:57:6a:08:cd:
58:37:9f:3e:9e:d3:4f:6c:f5:88:bb:e1:95:fb:0a:
79:a4:b2:eb:41:59:a2:8e:7a:a7:2b:46:b3:cf:20:
a0:15:02:f3:66:64:a7:32:c5:1f:83:cb:94:c4:da:
cc:c9:6f:c2:0a:01:d7:d8:e0:4e:03:d3:fa:16:77:
c2:fa:af:a4:03:87:fd:20:5c:23:e9:89:b2:e4:e5:
d7:1d:62:6f:04:62:98:c2:e7:81:6d:f8:f5:56:b6:
2c:23:e4:48:ae:07:08:e3:cb:ac:57:ae:b7:30:51:
81:55:df:39:fa:c4:f3:0b:27:1a:2c:c0:52:b4:24:
db:1b:db:0e:38:6d:e8:93:13:ce:92:43:b1:03:a7:
b3:e1:5d:bb:79:1c:1c:d7:ef:17:fe:00:32:b5:05:
63:95:bd:29:6b:3c:02:99:06:b8:ec:f7:a6:62:f4:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:15:C4:C5:99:6A:B7:A8:9E:12:B9:9E:B2:9F:B8:6A:8D:61:85
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:78::/48
Signature Algorithm: sha256WithRSAEncryption
72:e7:7d:37:71:d3:1b:84:c0:57:a6:32:de:2a:68:01:f3:aa:
8a:0b:73:13:9d:70:ae:7c:d5:c5:c2:bf:b9:ce:11:4b:2e:fa:
fc:3d:e3:2d:9d:b8:a9:85:38:1b:76:80:11:32:75:03:9f:45:
8a:e5:80:58:d3:84:d2:25:5a:d9:76:2e:8e:11:40:c1:64:6a:
0e:1f:b8:77:18:c4:ca:ec:79:39:ac:a5:35:12:d7:0b:6d:72:
1f:5f:46:25:71:4f:dd:d5:d1:91:7f:6a:ea:a0:40:c3:da:8d:
2d:39:72:07:41:5a:c3:0c:c5:88:5b:55:ce:ad:77:d4:41:58:
e3:cc:fa:09:8f:7d:8d:a9:2d:62:0e:d8:33:1a:d0:a4:c1:63:
1c:63:1b:9e:0b:8c:70:57:a0:d9:bd:a5:c5:d1:19:1d:2a:ea:
f3:9f:b2:f9:a7:af:28:92:7f:fd:0f:22:af:59:e3:75:ff:e6:
fc:a2:5c:f4:b2:e8:f8:8b:cb:43:ef:55:ce:10:a0:63:5f:34:
22:73:e1:d2:80:84:5b:0f:0b:5b:ee:94:f5:dd:f8:bd:9d:c1:
dd:3e:6d:42:84:ce:85:5f:0b:9d:ab:2b:78:f1:8e:25:f5:36:
ff:00:41:76:f2:af:e6:29:11:cc:50:59:91:1c:c6:a4:b1:e7:
2d:5a:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org