Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a37613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 8LtxBtaLoBqayiFdo0zt7mf2Inxr/WPkAZl+F2RhREc=
Subject key identifier: A3:A3:97:07:D6:4E:21:9F:C4:3D:E4:6C:07:EA:93:7D:BD:F6:04:9A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 37D745332D9C2AD06509E4692AAC4DB4961B6F19
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:38 +0000
ROA not before: Mon 26 Sep 2022 07:56:38 +0000
ROA not after: Mon 25 Sep 2023 08:01:38 +0000
asID: 59282
IP address blocks: 2400:d680:7a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:d7:45:33:2d:9c:2a:d0:65:09:e4:69:2a:ac:4d:b4:96:1b:6f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:38 2022 GMT
Not After : Sep 25 08:01:38 2023 GMT
Subject: CN=A3A39707D64E219FC43DE46C07EA937DBDF6049A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:fc:17:58:9d:8d:94:bd:41:5e:c3:eb:b4:
49:67:b4:a9:fa:ff:0e:3d:94:f5:d5:92:b1:68:8f:
e2:6e:0f:b6:14:1f:79:b9:39:b6:2a:73:2c:e9:56:
14:cf:1b:fb:7b:e1:54:93:0a:58:c0:c9:7d:89:3f:
f2:65:53:a0:82:04:81:47:45:2c:4f:97:33:08:a9:
87:6b:4f:e5:e3:9f:4a:d0:78:85:fb:b6:5c:19:fa:
7f:b5:1f:ab:41:19:01:5c:da:66:b5:c2:c4:25:43:
8e:62:36:94:36:a0:44:f7:9e:19:e1:85:14:0b:28:
6f:70:07:19:7f:cf:30:99:e6:b4:96:51:8a:10:b1:
ea:aa:99:94:3c:92:5e:f0:b5:63:ed:92:72:fd:eb:
9d:71:5c:be:59:6b:12:a5:3c:b6:e4:f9:31:69:7d:
a1:40:4d:b1:a7:07:38:80:c9:5a:e0:5d:f8:97:74:
07:5e:ca:3a:18:c2:f2:6c:bb:de:31:c0:8e:8b:d4:
c8:06:a5:9f:6a:9c:fd:b6:58:b9:3c:ed:73:07:22:
2a:9b:56:d7:5d:7a:bb:aa:22:d3:c3:3a:bc:45:d2:
e4:66:4e:28:7d:75:b8:53:2a:77:78:d2:28:ca:0c:
e2:ba:94:01:12:c4:a6:7d:41:70:6a:fb:4e:65:74:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:97:07:D6:4E:21:9F:C4:3D:E4:6C:07:EA:93:7D:BD:F6:04:9A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a37613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:7a::/48
Signature Algorithm: sha256WithRSAEncryption
5c:12:76:bb:fb:a8:fd:b1:89:c9:a0:1f:cf:2d:ce:b7:0a:1f:
3e:c1:32:c3:77:fd:6e:dc:08:84:70:e3:52:1c:d0:d6:c4:a3:
15:2b:59:45:c2:bc:3c:30:7e:96:05:2d:ad:97:8a:13:f1:80:
4f:70:cb:90:3c:e8:15:66:70:cc:07:ba:6f:55:47:15:01:6f:
93:72:dd:95:f9:7e:ef:d4:aa:91:d3:72:05:7b:75:ca:f4:72:
d3:a7:6e:7f:00:cd:b0:99:bd:09:d2:51:17:30:0f:b7:4d:82:
61:d4:0a:81:47:da:85:44:d4:c7:88:bd:ea:68:eb:c1:62:85:
8d:f0:61:c3:43:62:c9:b8:57:d5:ed:2d:55:81:c2:d3:d2:9b:
1c:b0:a2:1c:f8:98:87:4d:38:4e:d3:3f:06:a2:9c:5c:4d:70:
f1:0b:82:a6:9f:ba:62:fb:4d:8d:03:4e:cf:e9:be:9e:02:95:
da:06:60:44:ba:2e:83:32:47:30:c5:d1:b3:1d:f7:b1:fc:90:
b5:86:74:72:a9:7c:8b:fa:f4:32:19:9b:13:f2:83:93:54:1f:
91:10:4b:91:b9:e8:e8:9f:8a:b2:cd:87:f0:c7:10:3b:f3:ca:
39:9d:40:eb:f3:8f:ae:80:66:71:7f:d7:f2:4f:53:06:ef:37:
55:87:5a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org