Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 3ba7kIG/aPGvmAFoBQks5HVs2iU1UF4aZSHrPtHBGuc=
Subject key identifier: 20:EF:7D:1B:D4:76:CA:80:D5:8B:78:D1:C9:16:4D:EF:09:13:00:3C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4E6198D051BD46E284D18CC0A95CC0E6672986BF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:04 +0000
ROA not before: Mon 26 Sep 2022 06:55:04 +0000
ROA not after: Mon 25 Sep 2023 07:00:04 +0000
asID: 59282
IP address blocks: 2400:d680:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:61:98:d0:51:bd:46:e2:84:d1:8c:c0:a9:5c:c0:e6:67:29:86:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:04 2022 GMT
Not After : Sep 25 07:00:04 2023 GMT
Subject: CN=20EF7D1BD476CA80D58B78D1C9164DEF0913003C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:21:f1:90:3b:54:76:d8:c2:9b:b2:11:8c:82:
b3:f6:26:79:bf:73:aa:ae:db:10:5d:65:73:3e:a1:
5a:a6:64:8f:9e:ab:b5:a2:3a:43:61:49:c2:f8:ae:
d9:c4:5d:b7:a0:2d:24:2b:35:7e:66:db:89:ed:e3:
13:38:ec:a2:aa:e2:ce:d9:3a:cd:b7:9f:bd:8e:08:
bb:45:1c:30:3b:4c:e6:12:ee:24:ea:91:6a:e8:61:
95:ce:16:5f:c1:41:35:c3:e3:97:fd:75:8a:2a:f7:
f4:4a:a9:9a:bc:73:6b:85:ba:07:aa:fe:f3:51:16:
dc:83:bb:db:1c:e0:c0:03:04:36:a0:c6:b3:4c:47:
36:74:96:a0:5f:4c:89:5a:39:c5:41:ab:8f:93:1c:
6f:1b:2c:d0:1b:db:30:be:96:d4:6d:d2:8c:f5:9e:
19:3b:4e:ac:19:b0:04:be:32:d5:d3:48:db:19:35:
aa:75:66:f9:2b:20:1b:20:28:92:5f:f2:cc:ef:00:
ae:5d:bb:4f:67:7f:11:e2:ee:48:16:59:9a:e3:e8:
da:1d:58:00:f8:23:df:8d:5e:7c:26:94:c8:7a:75:
9d:92:df:ed:20:b3:25:96:42:d2:8a:23:d2:92:b3:
d5:0a:0b:5e:91:53:e2:cf:9f:0a:74:fd:63:18:2f:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EF:7D:1B:D4:76:CA:80:D5:8B:78:D1:C9:16:4D:EF:09:13:00:3C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:9::/48
Signature Algorithm: sha256WithRSAEncryption
00:ec:da:67:20:83:3b:5c:81:ba:55:ec:2c:3d:2b:92:5e:08:
59:ce:81:f0:e5:82:96:85:1d:91:1f:b6:d6:7b:88:99:8f:62:
f1:c7:11:8e:76:b1:ca:8d:65:53:af:a9:59:a3:57:47:3e:d5:
3d:c9:6c:af:c4:3d:19:4c:a8:45:af:a1:78:e4:c9:16:42:11:
48:37:a4:1a:72:b6:82:98:9d:30:7b:f0:62:bf:f3:f4:92:5e:
48:ff:ce:51:c7:b4:45:89:46:95:f9:7a:b6:55:58:6f:93:b4:
b0:0a:a5:ac:cb:f7:41:cc:14:a8:67:fa:f7:6f:3d:b2:d1:fd:
4d:f6:e0:51:e4:5d:55:de:e5:7d:f4:44:03:58:ec:4e:fd:71:
f9:dc:6c:de:c2:e8:7a:6f:a8:19:1a:56:57:91:72:28:4c:6b:
26:a9:b7:b4:43:3c:d3:86:b9:9d:d2:2d:2b:df:28:ec:f0:0a:
46:da:23:87:55:3f:19:14:d3:2f:ce:fb:7d:ba:d9:a0:19:af:
94:c6:a3:b8:50:2f:c8:e4:eb:fb:6c:6b:81:4d:8e:e2:8b:79:
1c:38:7b:3b:1c:48:a1:d9:d5:de:6a:eb:e3:73:ed:45:95:16:
78:ca:d6:74:c1:b2:72:df:d4:cc:38:2f:02:2b:20:48:6e:42:
77:73:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org