Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a61343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Vzb86bOORZ5cqmWpOjV+NIdxPfl5NH8I4JpDZSPbwc0=
Subject key identifier: FD:A9:11:E9:53:A7:4D:81:0F:12:E8:38:3C:14:E9:65:AB:26:0D:30
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7F76AE4308C6026EFFCB784FC63D99931619101F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:30 +0000
ROA not before: Mon 26 Sep 2022 07:56:30 +0000
ROA not after: Mon 25 Sep 2023 08:01:30 +0000
asID: 59282
IP address blocks: 2400:d680:a4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:76:ae:43:08:c6:02:6e:ff:cb:78:4f:c6:3d:99:93:16:19:10:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:30 2022 GMT
Not After : Sep 25 08:01:30 2023 GMT
Subject: CN=FDA911E953A74D810F12E8383C14E965AB260D30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:76:a0:11:56:e9:21:ff:47:81:d0:c4:96:
fc:57:31:b3:6d:ae:58:08:97:6e:48:fc:80:58:4b:
b5:0b:e6:de:03:75:12:e5:9c:96:fe:95:a6:69:e6:
a4:48:56:c2:1a:59:45:e0:b8:27:96:45:69:42:69:
e5:00:66:fa:b3:8f:f5:98:ee:1a:e5:f4:d6:26:d2:
f0:a6:5c:83:39:e5:7b:31:d2:a2:e8:99:a8:38:aa:
80:84:4c:ff:b1:95:05:c4:39:29:da:74:e3:90:61:
05:68:e8:8c:fc:45:8b:08:b5:5b:24:5c:d8:4a:3f:
fa:75:00:9c:be:d4:25:7c:4d:32:87:b6:6d:46:b8:
ef:85:94:9f:96:6a:7b:8e:f4:af:47:54:61:3a:91:
0d:34:34:dd:ec:68:7a:4f:30:93:be:2a:47:91:1e:
fc:6f:fe:01:75:75:86:7c:d6:df:72:15:31:d3:99:
2f:22:45:cf:d3:f3:a7:ee:30:64:aa:ad:c8:a7:39:
c4:45:d0:f8:52:5d:0c:f5:db:40:a5:f0:42:22:7a:
36:6f:1f:24:ba:b3:de:a1:04:95:59:a3:c1:d4:ea:
17:26:42:2a:b4:3a:03:18:36:aa:ed:66:f4:94:f7:
80:14:49:ce:21:08:46:20:e3:14:5a:0e:cc:29:91:
fc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A9:11:E9:53:A7:4D:81:0F:12:E8:38:3C:14:E9:65:AB:26:0D:30
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:a4::/48
Signature Algorithm: sha256WithRSAEncryption
39:b9:6a:ab:5d:4e:f9:b6:22:29:5b:df:42:0f:40:c6:09:ea:
fd:e6:61:15:0c:16:32:47:fe:77:34:06:48:cc:8f:af:1d:7d:
68:11:38:96:f4:2d:58:3a:c8:36:58:46:31:d5:85:8d:72:83:
74:aa:38:21:05:0e:45:78:cd:59:54:71:c4:94:45:90:01:5b:
35:e1:41:ba:ba:44:cc:3b:12:72:4f:16:84:60:ba:2f:c1:f2:
5a:fa:43:d4:1b:85:6e:fd:f3:0e:d0:32:22:d1:c6:34:e7:19:
29:b7:69:8c:ba:e5:33:86:df:98:f4:16:28:68:36:bd:6f:8b:
83:a8:02:79:fd:62:ad:9f:6d:e3:12:58:4e:15:10:eb:0f:4e:
e4:f7:ab:2e:f8:36:5d:a0:26:67:b5:ac:b2:75:38:ef:dc:57:
dc:0b:1e:b3:a5:56:fc:5d:17:7c:7e:8b:15:7c:72:21:bc:36:
44:10:9a:98:7b:45:f6:e8:f2:a4:1e:06:5c:65:2b:7d:53:31:
e7:4f:44:96:f7:4b:2f:28:62:c5:aa:13:1d:96:5c:16:05:18:
d2:e5:06:6f:8c:be:29:a8:d6:68:f1:63:38:38:6d:36:e7:4e:
00:8a:c9:4a:f7:09:6c:4d:6a:81:26:54:98:98:a4:f9:93:59:
ee:8d:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org