Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a62613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Q7wJ81C4ApGS1yGXJqe9Kds/tP0NMK5BsyghLyFKZKs=
Subject key identifier: 48:9E:9D:1F:8F:13:55:D0:BF:87:72:38:90:30:0F:80:61:61:9A:A0
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3F19F5FDA62F8765EE6579696781544F4D378F08
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:23 +0000
ROA not before: Mon 26 Sep 2022 07:57:23 +0000
ROA not after: Mon 25 Sep 2023 08:02:23 +0000
asID: 59282
IP address blocks: 2400:d680:ba::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:19:f5:fd:a6:2f:87:65:ee:65:79:69:67:81:54:4f:4d:37:8f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:23 2022 GMT
Not After : Sep 25 08:02:23 2023 GMT
Subject: CN=489E9D1F8F1355D0BF87723890300F8061619AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:e8:e1:f3:5c:c5:3a:09:81:e5:3d:4f:dc:
8e:b1:5d:3a:45:1a:57:58:08:de:2e:da:9b:e1:e5:
ef:e2:bf:96:3a:35:c8:4e:d9:e6:88:ad:d4:c9:23:
ec:7b:30:c1:f5:22:b8:c5:36:08:14:a4:e8:22:cb:
ee:26:b4:90:8f:f4:87:ed:6b:b6:7a:ed:23:cb:a5:
f6:46:df:ba:59:29:37:cf:63:2a:d6:cf:3c:c1:cb:
e3:b4:d7:29:75:c1:28:e7:62:b0:83:29:79:01:75:
48:de:86:35:77:12:c3:da:35:56:b9:f1:d3:c6:34:
28:f0:8c:7e:38:58:2d:3b:61:79:74:3e:66:98:eb:
91:98:d9:78:71:98:59:55:b4:a7:f9:ec:55:48:40:
12:58:d2:b3:60:55:e7:3e:6e:17:5b:37:bf:dd:0d:
8e:e1:e2:9d:32:26:24:b4:1a:fe:ee:99:e4:57:b0:
4b:48:83:60:34:17:09:fe:44:93:bf:34:20:ab:17:
d4:3e:1a:2b:e1:0f:a4:6e:c4:a1:7a:e3:76:d1:1d:
17:61:9f:1c:57:c8:33:56:93:e6:1e:59:7a:61:79:
9b:17:08:b7:6d:94:17:46:59:ef:0c:5d:af:d4:8b:
64:4a:b3:58:5e:ce:b4:e1:50:ca:af:5d:93:8a:6e:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9E:9D:1F:8F:13:55:D0:BF:87:72:38:90:30:0F:80:61:61:9A:A0
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:ba::/48
Signature Algorithm: sha256WithRSAEncryption
1d:59:6a:cd:30:e3:4d:ee:de:44:e0:e0:a3:e4:dc:fc:33:2d:
82:10:6d:95:59:86:41:11:25:e3:51:67:58:18:51:b8:ab:4a:
f4:16:87:1a:7f:5a:98:6d:d7:90:df:e8:75:20:e1:e4:4a:6b:
1c:72:41:9a:c2:dd:68:66:3d:85:84:2f:b9:10:e2:1c:e9:a3:
df:da:70:e5:65:49:64:41:5c:ee:c2:e5:5c:6b:2d:47:eb:73:
df:6a:ce:3e:c2:de:15:1b:9f:5e:f0:92:97:19:09:bc:3c:c3:
8a:9a:c8:79:2c:06:7a:07:0f:99:25:aa:9c:33:a8:95:37:3e:
cf:bc:40:dd:8d:88:6e:a2:0c:64:f9:08:c6:d4:64:04:e5:a0:
0f:2a:5a:27:f0:a9:db:cb:8e:01:2f:88:81:28:23:52:03:3b:
af:f1:62:bf:cd:ea:a6:e9:76:df:4a:5b:4c:2e:43:eb:c2:f2:
76:0c:00:47:d2:46:8f:56:ec:a2:98:0d:27:43:0e:a5:c7:a3:
c9:bc:c7:c8:ba:31:a5:67:09:ea:48:53:24:f7:9b:78:0a:00:
1a:5d:b4:63:26:b7:01:92:d3:c4:f6:22:0e:c2:e4:60:c7:d1:
18:2d:a5:18:16:8f:4a:55:12:63:0c:62:a9:96:bc:3d:80:47:
0a:b0:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org