Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a38373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Z/7/UTBMGUG9AFNUAzlRCo9Qwr7mGIT7ISTectvPrrM=
Subject key identifier: 87:79:85:70:E2:C1:B5:92:C5:E5:4B:61:F5:4F:E9:5B:D7:79:89:56
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 276DE140EEE832BC7CCC8EB4BEB893398AA5AC3F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:11 +0000
ROA not before: Mon 26 Sep 2022 07:57:11 +0000
ROA not after: Mon 25 Sep 2023 08:02:11 +0000
asID: 59282
IP address blocks: 2400:d680:87::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:6d:e1:40:ee:e8:32:bc:7c:cc:8e:b4:be:b8:93:39:8a:a5:ac:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:11 2022 GMT
Not After : Sep 25 08:02:11 2023 GMT
Subject: CN=87798570E2C1B592C5E54B61F54FE95BD7798956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:03:f9:4e:58:5d:46:96:ce:bf:51:7e:f9:71:
92:75:c0:61:04:85:08:3e:21:1a:29:b2:41:b6:4a:
c6:01:4b:d8:7a:e2:36:d0:53:73:f0:06:f9:7e:04:
30:b2:3b:5b:79:1a:2d:88:31:1d:3e:0c:c6:15:aa:
2f:58:38:72:f2:5f:ee:aa:6e:4a:cc:74:51:f0:ce:
84:8e:5b:f3:37:97:c2:51:0c:97:9a:a6:a6:36:01:
22:9a:48:fb:04:9b:ab:31:7c:06:d1:ba:2f:14:e1:
29:26:f1:e7:a2:45:14:0c:4c:df:f3:d0:0e:2e:8e:
61:07:cc:4e:1e:8c:fc:7f:8c:f7:67:c2:1a:47:7f:
7e:d1:48:8b:71:d7:8d:b5:d3:8f:b7:53:98:d7:fb:
98:3b:1c:eb:e3:c3:f2:62:5a:d6:1c:02:11:0d:09:
98:32:4d:16:f1:ba:b0:24:55:e7:88:57:07:5d:d0:
8f:1a:56:ef:95:0c:d1:7b:3d:c8:c5:42:fe:61:7a:
b6:ad:d0:0f:b3:2b:c7:2f:80:c0:fa:99:e7:13:6a:
b8:3d:ba:55:3c:7d:ab:c7:5b:ce:cd:c7:31:f9:0b:
7b:07:9f:85:71:6c:f6:31:71:f3:8a:87:a6:c0:3d:
b7:91:77:1b:13:5e:5a:73:0b:81:be:b9:cf:b5:d7:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:79:85:70:E2:C1:B5:92:C5:E5:4B:61:F5:4F:E9:5B:D7:79:89:56
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a38373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:87::/48
Signature Algorithm: sha256WithRSAEncryption
67:02:8e:be:5a:e8:d4:48:9f:ce:3e:a3:58:86:e0:06:36:1e:
af:77:b5:23:ed:f7:5f:38:f2:64:0e:82:21:20:c8:1c:fa:63:
1c:c3:1a:79:a2:bd:46:c5:34:e8:ac:57:99:9c:54:24:72:26:
1f:91:39:59:03:18:12:9d:15:15:9c:40:15:3d:22:24:42:a4:
90:ff:3f:9b:5a:f7:89:f3:d4:ff:36:19:b4:47:af:50:27:91:
fb:ef:82:55:99:62:0e:85:b3:c7:d9:0d:c7:94:cf:f7:d1:92:
23:b3:2e:a7:ff:46:0d:39:47:4f:59:72:73:38:88:f4:c6:24:
31:73:f1:a7:1b:00:6d:f5:5b:00:40:94:24:74:e2:45:d8:69:
be:de:76:ef:96:6c:c3:65:10:79:2a:9b:e1:34:8a:41:49:53:
2b:67:84:c9:95:40:8d:f8:e2:cb:3f:cc:0d:be:14:ec:b4:b4:
eb:9b:03:6b:b7:7a:51:f7:3c:0f:04:da:e8:53:ef:e6:8f:1f:
a5:a1:77:57:04:4b:f0:1f:5d:b3:4e:02:37:ea:d3:79:d1:b0:
e6:14:4f:f9:13:0f:54:25:4a:63:0e:38:57:5a:69:59:da:2b:
0b:39:6b:4f:5b:00:fe:3c:cf:44:2b:a9:ef:49:bd:5b:d2:8b:
10:3d:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org