Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a61633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: lO60/lKTbTQDoZPV1i6WM3oZLQ2RJ4SkXwQ0n8YsBTU=
Subject key identifier: 0B:CC:4A:2F:1B:E2:5C:40:0C:8F:90:D7:92:41:24:57:26:5D:E4:83
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4C9B73859B74B6235AC591B421C4C26060CD0144
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:25 +0000
ROA not before: Mon 26 Sep 2022 07:56:25 +0000
ROA not after: Mon 25 Sep 2023 08:01:25 +0000
asID: 59282
IP address blocks: 2400:d680:ac::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:9b:73:85:9b:74:b6:23:5a:c5:91:b4:21:c4:c2:60:60:cd:01:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:25 2022 GMT
Not After : Sep 25 08:01:25 2023 GMT
Subject: CN=0BCC4A2F1BE25C400C8F90D792412457265DE483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c2:a6:f3:b2:b9:91:12:23:d4:a0:44:3a:0c:
d9:62:ab:90:86:08:a2:86:71:cd:07:9a:aa:54:a0:
26:8d:5e:95:e8:3f:8e:8f:4b:91:05:d3:6c:ed:99:
24:f6:05:9a:c9:84:a2:8a:40:47:97:e0:40:96:94:
eb:79:2f:01:b5:ca:91:ff:23:3b:6d:5d:26:d7:36:
c0:7c:a3:11:50:4c:3d:c0:65:3d:79:7f:83:67:09:
19:3a:2e:df:1d:89:90:ed:97:f8:02:bf:02:06:c2:
d2:d5:b0:5c:3d:0f:6b:22:01:dd:43:82:20:c5:ad:
96:e7:1e:d1:97:ca:39:75:99:30:04:06:57:d0:7f:
0b:83:0b:7a:8c:72:2b:8a:dd:cd:05:90:3c:6c:2a:
ba:f2:aa:de:47:91:8c:0a:3b:cd:8b:07:01:33:45:
28:e1:62:1b:11:28:22:2c:81:54:99:12:29:60:b2:
8f:66:3f:6f:e4:23:98:11:db:70:9a:83:e4:57:8c:
3a:ca:9b:35:c8:8b:21:8e:33:a3:c0:5b:ea:60:45:
ec:01:3a:ef:98:dd:27:26:ad:63:97:68:50:fd:bf:
b7:07:41:a0:cd:44:a1:dd:8f:4f:45:3c:f9:1e:c7:
93:1e:0c:ae:00:f3:ab:10:56:1c:42:1d:ae:28:db:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:4A:2F:1B:E2:5C:40:0C:8F:90:D7:92:41:24:57:26:5D:E4:83
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:ac::/48
Signature Algorithm: sha256WithRSAEncryption
c5:da:7a:49:01:12:3c:cc:f2:20:e7:25:44:dd:ad:34:24:78:
fb:11:4f:33:7b:1a:8f:a2:fa:45:c8:13:47:c6:95:62:64:e8:
7b:92:85:28:de:66:43:29:ca:3c:e6:ec:52:8a:b5:1d:b2:a8:
4b:de:d4:60:43:c5:9e:2a:31:a2:f8:fb:b8:7a:99:a8:68:0f:
79:20:db:78:9d:d2:ef:b9:ee:09:9a:5b:b2:ec:32:e0:55:0c:
8b:e0:54:54:e4:60:3d:3c:ef:4e:1e:d9:7c:dc:48:bd:76:28:
35:9a:a7:c1:91:29:20:22:8a:29:2e:10:ec:c2:7d:0c:bb:7e:
97:4e:40:bc:27:bc:99:0e:db:a0:7f:2c:ec:ef:be:33:05:26:
eb:03:70:36:f6:84:a3:4e:a7:15:9f:89:40:db:57:41:f3:8c:
56:ba:1d:51:b6:ba:4b:a3:8a:45:fa:13:61:53:6f:11:9a:63:
c1:94:b2:dd:a4:d5:d6:3d:31:73:3e:4e:2a:fb:82:fe:b0:b5:
a9:dd:9e:e5:23:5d:52:53:76:b8:ea:a5:5e:d3:fa:29:91:67:
7c:be:10:0e:85:30:00:55:b2:d6:4a:6a:47:24:00:1f:f7:bf:
90:ca:e2:57:09:b3:ad:75:d7:50:3a:70:d3:70:d2:f0:ad:25:
c8:43:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org