Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a38363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: MPCc+jyug3i/1DWF4ZVa7bE0Em2c81wUaoRMC9ICHBE=
Subject key identifier: 19:93:3A:23:B6:57:91:58:09:E1:A6:92:93:9D:5B:EA:A3:17:C4:15
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7E9892CC5976F5919042DA7CB5B52FCAEED6E931
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:17 +0000
ROA not before: Mon 26 Sep 2022 07:56:17 +0000
ROA not after: Mon 25 Sep 2023 08:01:17 +0000
asID: 59282
IP address blocks: 2400:d680:86::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:98:92:cc:59:76:f5:91:90:42:da:7c:b5:b5:2f:ca:ee:d6:e9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:17 2022 GMT
Not After : Sep 25 08:01:17 2023 GMT
Subject: CN=19933A23B657915809E1A692939D5BEAA317C415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:1c:4d:16:b1:32:01:5a:96:82:3f:a5:9e:
fb:cf:25:96:ef:c8:1f:30:74:89:a7:d7:ef:92:e1:
cd:51:ae:ec:62:91:9b:b2:9a:8e:39:a5:db:ce:da:
84:a5:54:b6:00:03:2d:0f:5e:ec:99:3e:26:ba:ab:
a1:5e:bb:f2:cd:0f:c8:50:0c:09:68:bf:b0:73:a1:
cf:1b:b4:35:d4:6d:cf:6c:e0:fe:d3:0e:5c:96:57:
5f:2e:ad:46:41:b5:21:c1:79:9b:07:24:30:fe:0b:
a8:f4:32:a4:b9:54:ef:b1:40:a5:c2:a9:39:95:4e:
f1:e0:88:46:c6:a4:7e:6b:ab:0a:f2:79:e9:52:71:
9c:10:9e:05:e6:63:2e:36:2b:f1:6b:f7:2b:e4:b4:
12:2f:b3:be:f2:ee:d1:c9:b6:3c:52:d9:37:fc:13:
0f:3b:09:11:22:89:c8:9e:01:81:74:b9:9e:84:24:
7c:1a:8e:f9:0c:89:71:9e:be:89:69:6c:7a:f5:01:
fd:b0:c7:51:81:d4:5b:89:76:70:0e:42:6b:a5:f1:
87:85:5f:63:b4:63:a8:52:45:4d:d7:96:41:1d:1c:
29:2a:50:2f:ae:f4:9e:61:54:12:8b:3b:8c:a1:7b:
82:3c:eb:f0:6d:6f:1b:46:fa:4b:c4:31:6b:31:42:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:93:3A:23:B6:57:91:58:09:E1:A6:92:93:9D:5B:EA:A3:17:C4:15
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:86::/48
Signature Algorithm: sha256WithRSAEncryption
0a:e5:6e:bc:92:96:bc:66:d5:85:cd:05:9c:5f:37:ba:55:12:
14:33:82:e8:c9:90:4f:84:a1:aa:bc:5a:b1:55:e8:4e:91:d2:
4a:cd:1f:a1:c7:04:aa:7f:17:8c:5c:6a:72:a9:f0:32:87:ce:
f1:4b:c2:a1:e4:1a:a9:4a:e4:a0:73:10:88:03:3e:df:37:a7:
a1:ec:57:8d:f9:cd:c9:b6:82:23:0f:62:7c:a5:52:c8:65:bc:
78:ea:65:b4:64:73:1b:04:30:e4:24:a7:e5:e9:05:6a:40:20:
45:13:0c:a9:3c:7a:ff:ee:af:54:84:64:f4:ef:f5:6f:79:cd:
7e:1c:cb:12:ed:40:61:94:f3:d3:1b:06:7c:5c:94:8d:e8:5c:
6a:12:4e:8e:1b:4f:d8:45:05:30:58:d8:b9:90:c5:c0:32:27:
79:e3:e9:bf:63:d0:56:3e:bd:65:ee:36:89:7e:67:d5:26:28:
b7:9e:7c:0d:b6:b3:11:62:6f:35:bd:12:5b:08:29:2c:eb:b0:
dd:76:f6:e7:6f:b9:13:7b:2e:f7:16:66:c2:7d:6f:8f:df:4a:
5d:bf:be:d7:fc:fe:2d:b2:47:2a:6c:8c:c5:c9:09:16:10:7b:
7e:97:4a:e1:8f:3f:30:dd:ed:e1:50:59:25:9d:63:84:ae:ef:
35:dc:51:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org