Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a38323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Lz7GpeKxXLJj/y3A0S6v2E98f+iNCsAa4daZijTUZK4=
Subject key identifier: 78:4F:D6:E1:19:51:B8:2F:96:C1:59:1A:CE:FE:F2:E5:10:38:82:FE
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0DD2AD7CED92FF6045298A88F4B8874AAE1AE551
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:01 +0000
ROA not before: Mon 26 Sep 2022 07:57:01 +0000
ROA not after: Mon 25 Sep 2023 08:02:01 +0000
asID: 59282
IP address blocks: 2400:d680:82::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d2:ad:7c:ed:92:ff:60:45:29:8a:88:f4:b8:87:4a:ae:1a:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:01 2022 GMT
Not After : Sep 25 08:02:01 2023 GMT
Subject: CN=784FD6E11951B82F96C1591ACEFEF2E5103882FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:6c:57:bb:41:3a:1d:75:0d:41:52:65:2a:
35:2a:b1:cc:0b:6d:bb:d9:41:78:1e:c5:a4:06:ba:
44:b9:35:f4:b6:3f:15:53:e9:57:8a:b0:97:0d:48:
90:98:d8:d7:35:50:51:e4:10:49:d3:5a:66:91:73:
fb:89:b0:95:c6:b6:f4:22:88:cb:b4:2f:e5:5d:26:
7c:3a:2f:e6:10:34:61:39:dc:7b:29:f6:28:52:6a:
f9:3a:e4:80:b5:81:9b:79:de:e7:c7:a2:9f:f9:df:
cb:57:94:d9:d1:b7:1b:1e:2e:2e:90:53:91:98:fe:
ea:f8:e1:17:a3:84:49:98:89:ad:ce:d0:f8:4a:12:
1b:29:06:ce:2d:c6:6c:c4:a9:4c:cb:ea:14:2b:e4:
59:ff:7c:81:c7:f1:cf:8b:3e:f4:9f:c4:86:e4:88:
cb:2f:6a:63:42:73:6c:33:89:44:58:2e:03:1a:73:
f2:e8:7e:d7:1d:b3:01:f6:0b:51:75:ca:4e:96:2c:
09:88:84:60:d2:d9:13:a4:0c:63:5d:6e:ea:d2:d4:
c2:f3:eb:88:3f:f1:95:5b:78:98:6b:12:44:59:4e:
fa:1c:7a:01:7e:05:c6:9e:c8:ef:8a:6d:52:60:eb:
9a:52:69:43:9f:fb:d2:02:61:bc:68:54:c4:d4:14:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4F:D6:E1:19:51:B8:2F:96:C1:59:1A:CE:FE:F2:E5:10:38:82:FE
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:82::/48
Signature Algorithm: sha256WithRSAEncryption
c4:f0:45:c4:ec:a7:41:c5:c4:f5:52:16:5f:e4:9c:05:e1:ec:
53:ff:fa:a4:46:76:06:32:f0:5f:7d:29:62:f7:84:3d:ee:0f:
f3:ed:18:98:ed:76:e1:15:e9:d4:3b:53:75:f5:5e:c2:ff:c3:
79:09:9b:9a:ad:d7:0b:da:c7:5e:98:77:4b:91:9b:86:17:47:
0f:b4:17:e5:9f:7b:35:2e:71:e1:2c:4f:e2:28:b7:ea:cd:ee:
70:75:19:4f:92:71:72:23:09:83:46:b3:9e:29:83:fd:31:6f:
d4:cb:bb:49:b1:15:aa:3c:70:29:e2:23:6f:ce:92:d0:61:b8:
73:57:e4:76:0b:bd:ff:26:23:62:8d:77:8b:fd:7e:c5:47:d5:
1e:1c:b6:09:f3:18:9c:08:17:6e:49:1b:ff:8e:a8:08:d3:2a:
02:cd:53:d4:88:e9:48:2b:6c:89:f6:e5:57:63:eb:fc:79:7c:
da:58:14:99:98:65:4b:89:21:92:ab:f7:d5:40:9f:8f:a4:0a:
1b:c1:ed:b9:a9:1a:04:91:67:6a:8f:90:15:77:7c:2b:eb:91:
2f:a0:00:a5:62:ed:e4:d4:b9:6a:04:a8:a6:23:a2:07:74:87:
d3:3e:49:e5:b8:5f:f0:1f:94:6c:71:66:53:cb:ea:02:9b:f9:
ea:96:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org