Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: HOlx0UbCUWtKVUxp3HzRSGsuq1DXXqQtxAJ6CzhKuW0=
Subject key identifier: CE:83:83:2A:B7:8A:69:F5:76:42:89:40:8D:A0:FB:DC:37:04:74:B9
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6517141D03089FB89C4A324854DF2AAA921E6877
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:05 +0000
ROA not before: Mon 26 Sep 2022 06:55:05 +0000
ROA not after: Mon 25 Sep 2023 07:00:05 +0000
asID: 59282
IP address blocks: 2400:d680:7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:17:14:1d:03:08:9f:b8:9c:4a:32:48:54:df:2a:aa:92:1e:68:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:05 2022 GMT
Not After : Sep 25 07:00:05 2023 GMT
Subject: CN=CE83832AB78A69F5764289408DA0FBDC370474B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:b2:a7:04:14:ed:8b:3d:c1:b5:02:1e:3b:
35:6c:b4:69:44:66:04:eb:a8:36:4a:0e:a7:6b:d2:
99:53:0c:5e:d9:21:4b:f7:4b:0a:44:68:a5:a5:dd:
a1:32:fa:24:67:6f:55:c6:ec:6d:a7:a9:be:ea:46:
af:12:e4:25:12:d0:79:e5:97:2e:52:64:9f:b5:ef:
82:91:ca:a9:37:fc:cc:c1:8d:80:7b:42:3d:68:ab:
47:6d:d5:8c:24:1e:06:1b:a3:b4:12:70:94:98:17:
72:0a:ed:0d:13:ca:b0:b9:8b:e8:34:4d:64:86:a7:
92:09:5f:38:2d:fd:56:f1:86:dc:39:d3:e7:e5:58:
44:78:73:cc:93:ae:8b:96:6c:9b:92:b0:8d:95:0b:
97:16:be:48:8a:05:64:f7:e4:a6:ad:13:a0:b1:48:
ea:64:c7:b1:99:36:24:aa:a3:a5:ac:9e:82:eb:c0:
d2:cf:10:bb:89:75:f7:84:e8:a7:91:8e:07:06:23:
f7:18:6d:25:56:bf:34:f3:fb:ca:29:c3:8e:92:b3:
e4:bb:82:1d:d3:09:ac:42:2d:83:df:6a:ea:cd:6f:
74:4f:20:42:ff:5f:85:68:1b:34:84:96:18:12:3a:
e6:da:a8:38:5e:00:31:78:9e:43:f0:43:dc:46:b1:
16:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:83:2A:B7:8A:69:F5:76:42:89:40:8D:A0:FB:DC:37:04:74:B9
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:7::/48
Signature Algorithm: sha256WithRSAEncryption
5b:31:b2:a7:d0:d9:c6:1c:4d:c8:8c:66:22:0b:45:79:f2:67:
22:bb:da:da:00:48:c9:fe:85:e1:c4:fe:bc:cd:03:66:cb:12:
77:b7:0d:d3:06:9c:0a:79:b8:e7:0c:7d:5f:aa:f9:19:1a:db:
fc:2c:4f:70:61:e2:97:2b:57:06:67:3f:76:db:a6:50:e5:e9:
24:d7:47:47:e5:a6:ae:e4:ab:76:c7:df:38:07:9b:d0:16:33:
ee:d2:34:b6:3a:cc:a5:27:5e:3d:a8:9f:c5:59:90:16:6e:57:
37:20:04:ba:bc:e6:d2:54:80:88:35:6e:ac:45:e8:ce:36:df:
62:9c:83:3e:fd:17:25:8b:de:b8:54:8e:90:8c:ee:24:97:e9:
ee:e2:d9:e6:5b:f3:04:86:48:62:1f:07:55:9c:ae:9e:df:c6:
9b:52:68:43:34:b9:5e:92:5e:5e:5b:9e:e8:18:b7:10:08:33:
0e:33:b3:69:b1:b9:f6:e6:3e:e3:34:e3:89:43:99:aa:47:ae:
e6:c2:ba:99:1f:09:1c:d2:f7:79:2d:16:07:e8:ad:b3:fa:ef:
d5:04:3a:16:15:46:08:a7:6e:62:e7:79:be:18:4d:eb:e7:a4:
7f:9c:7c:e4:8b:e3:d7:81:db:08:ea:f0:47:00:d1:9b:0f:26:
74:32:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org