Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a61663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: pvgmoJOYLrp4vpHN7sGOysR7KrwvRsxp6D4VDa9DR+s=
Subject key identifier: BF:22:51:5A:8B:5B:86:64:B9:43:B1:CD:10:B3:16:05:B1:EA:74:7E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4DC394F9D44CC211509CD1C3C5BC74F988DB0E1A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:13 +0000
ROA not before: Mon 26 Sep 2022 07:57:13 +0000
ROA not after: Mon 25 Sep 2023 08:02:13 +0000
asID: 59282
IP address blocks: 2400:d680:af::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c3:94:f9:d4:4c:c2:11:50:9c:d1:c3:c5:bc:74:f9:88:db:0e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:13 2022 GMT
Not After : Sep 25 08:02:13 2023 GMT
Subject: CN=BF22515A8B5B8664B943B1CD10B31605B1EA747E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:14:1e:cb:65:6d:3c:2f:a4:31:ec:d5:e5:
0e:e8:71:be:75:8f:99:9f:5d:d4:ed:35:3f:28:57:
e0:0d:73:ea:6d:ba:5d:c7:9f:39:ff:e5:18:69:26:
d5:60:c8:f2:60:1c:1b:8e:26:61:2a:a8:b3:2a:fc:
a3:fa:8f:1b:99:06:99:01:a1:a0:61:b1:f4:aa:60:
46:7b:95:05:1c:ac:9e:3d:aa:8d:fb:38:85:8d:a1:
92:5a:8f:0d:e0:6a:c9:a2:88:9c:d3:f4:de:53:27:
40:0b:1c:0b:b6:f6:46:48:62:61:ce:3d:5c:dc:4f:
b5:c4:7c:5e:4c:88:01:4a:63:6c:e3:58:e4:20:cd:
cc:a1:6d:b3:1f:1b:ab:6c:f8:67:99:da:6f:ab:ac:
13:68:65:00:71:e2:bb:0b:fd:12:4a:d0:e3:f1:c2:
75:78:4b:a8:4e:3b:67:38:71:0f:7e:75:f0:97:61:
56:0c:52:1f:0a:f4:03:56:e8:d3:15:df:d3:97:66:
40:93:1c:f9:ad:9e:86:03:de:6d:72:27:52:5d:0a:
fe:3c:c0:02:16:e5:96:46:8c:50:64:1b:fa:f6:b3:
a7:96:7a:ad:1e:e9:bb:dd:1b:a9:28:ed:87:58:ed:
e9:69:a6:b1:ba:02:f1:4a:e3:5d:91:16:e7:80:f6:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:22:51:5A:8B:5B:86:64:B9:43:B1:CD:10:B3:16:05:B1:EA:74:7E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:af::/48
Signature Algorithm: sha256WithRSAEncryption
76:ea:e4:be:cd:4d:cc:5e:79:9e:dc:be:aa:b5:70:dd:a3:9e:
15:40:c1:e2:89:b0:ce:50:80:bb:c0:bf:bf:a4:9d:02:09:9e:
b7:d0:07:85:30:86:a4:13:e4:ea:69:d0:11:d2:f4:70:a7:c4:
62:04:f9:78:f1:ff:af:ae:21:43:e2:a9:46:eb:0b:aa:84:a4:
9a:99:1c:ab:d1:2c:7d:74:d3:48:66:67:98:f6:81:8d:0f:2b:
2d:b8:1c:e6:d7:bf:82:67:c5:93:e5:88:11:b1:20:d5:12:ab:
27:40:59:7e:07:8e:54:77:8f:cf:d7:f2:85:39:02:cb:91:c3:
7b:fa:fe:8d:8a:8f:d7:e1:aa:ce:49:3f:27:e2:1f:db:7f:d2:
d8:92:b8:51:46:eb:bd:a3:54:5c:b1:97:8e:aa:ec:8f:2b:de:
f7:57:de:48:f2:67:e0:10:56:74:da:50:40:48:87:8c:0f:a8:
8c:2c:2f:d0:11:ab:0a:d4:14:4b:23:da:52:ff:3a:7e:18:f2:
a5:2e:cb:13:02:4e:27:83:c6:15:cb:cb:82:e7:93:b2:de:17:
28:e3:9c:b6:b8:75:5b:8c:d6:7a:e3:50:40:1f:9c:6b:20:f3:
1f:6b:d1:86:45:10:22:cf:f5:10:1b:c7:29:08:5f:5c:fe:a7:
94:16:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org