Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a39353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 8VwXcsF69MUfCY0KBbn+RvsRAFjfeT860x1+s4b4nj8=
Subject key identifier: A8:D1:17:62:84:08:1A:D7:38:6A:DF:29:0F:92:B3:AF:8D:C9:C8:8E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7D624D278A2196A7AB2901133B66A4D821CF85A3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:54 +0000
ROA not before: Mon 26 Sep 2022 07:56:54 +0000
ROA not after: Mon 25 Sep 2023 08:01:54 +0000
asID: 59282
IP address blocks: 2400:d680:95::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:62:4d:27:8a:21:96:a7:ab:29:01:13:3b:66:a4:d8:21:cf:85:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:54 2022 GMT
Not After : Sep 25 08:01:54 2023 GMT
Subject: CN=A8D1176284081AD7386ADF290F92B3AF8DC9C88E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:95:a1:01:be:2f:6a:27:2a:90:91:76:88:
74:4a:ad:46:1d:0d:0e:68:1a:84:4f:d5:eb:01:00:
e4:64:2a:95:a4:e1:d4:20:0f:71:94:0c:15:ff:bd:
d2:36:6c:cb:53:0c:15:5d:6c:6c:d8:c0:05:a9:92:
69:a7:46:d2:d4:6b:41:20:33:1d:07:87:11:93:2d:
6c:e1:9c:b0:53:6e:d4:21:18:a6:5e:ab:7f:f5:8b:
65:fa:22:36:1d:db:8a:8c:17:7b:fb:47:04:90:59:
fd:31:0b:33:30:1b:ef:3b:49:a2:4a:69:b3:56:62:
3f:17:13:22:cd:10:3f:4a:a9:74:a3:6a:25:c8:2a:
09:33:73:95:5b:d6:7f:b1:82:dc:55:21:06:f2:8f:
bc:d5:0d:b2:bc:48:75:b0:9e:98:c4:5b:04:12:49:
63:fa:d7:ce:de:4d:d5:08:c5:11:fd:13:d3:10:31:
d1:6c:dc:cb:e5:80:6e:50:9f:99:e5:d3:d2:e6:c2:
e1:a2:60:f8:01:fd:6b:ef:34:5a:3d:90:f0:50:f3:
28:9f:19:74:5c:75:b2:0e:37:23:55:58:af:ba:4a:
12:9f:34:7a:6f:6e:48:98:fd:9c:c0:5c:80:63:07:
be:bf:3d:3a:89:8a:64:a6:f9:cf:7d:10:a6:f9:ee:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D1:17:62:84:08:1A:D7:38:6A:DF:29:0F:92:B3:AF:8D:C9:C8:8E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:95::/48
Signature Algorithm: sha256WithRSAEncryption
ce:cd:cb:b4:d4:4b:26:04:19:ef:19:be:24:df:b9:d5:79:77:
ee:ef:60:58:49:20:d6:cf:b8:3d:f8:7f:80:5a:b5:4c:0f:21:
81:c5:b8:e9:e6:c5:e5:5b:41:fb:fb:70:29:fd:09:48:c6:bb:
02:66:2b:2e:0f:e5:bc:40:8a:b0:cc:bd:55:f7:61:b0:0d:40:
8c:a2:0a:b0:9f:d1:73:ba:5a:80:ba:62:a7:8b:54:3b:0b:c5:
ca:7c:1d:19:e4:fa:0e:17:97:23:1e:d2:a0:c5:6e:96:5d:e0:
dd:bb:28:cb:15:a5:c8:c1:af:a6:68:b0:8e:f5:0a:ca:c8:7c:
43:f6:96:66:bb:c6:0e:ae:32:1a:14:e6:a1:5d:e4:44:05:bd:
95:30:29:41:47:88:4c:10:d8:94:d2:10:e5:05:b2:1c:1a:0b:
de:8b:fa:cc:3d:5e:83:62:bc:73:d2:6c:52:70:fd:33:bd:10:
09:f8:b6:2f:ed:f2:6e:d6:0c:6e:19:26:25:4c:a8:d0:7e:26:
58:34:7a:dc:28:b1:a0:fb:5a:f2:70:f5:9b:ad:d8:74:bd:d6:
9a:a5:50:22:d2:2e:61:52:b4:a6:6f:0c:aa:46:70:7f:6c:24:
3e:5b:e6:ae:be:31:e7:8c:ad:df:4b:44:2c:54:de:36:0d:22:
8d:20:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org