Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a62653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: YM8Bvh6qTgWgMhwqJlVhcdrt7E0FHj+iVvvbi4jjtBo=
Subject key identifier: CD:B8:CC:06:0D:6F:57:78:8F:1D:11:3E:45:C2:BD:96:54:57:3C:C1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 050C313769532E0507D0AA6000C332B646D4DA14
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:28 +0000
ROA not before: Mon 26 Sep 2022 07:56:28 +0000
ROA not after: Mon 25 Sep 2023 08:01:28 +0000
asID: 59282
IP address blocks: 2400:d680:be::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:0c:31:37:69:53:2e:05:07:d0:aa:60:00:c3:32:b6:46:d4:da:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:28 2022 GMT
Not After : Sep 25 08:01:28 2023 GMT
Subject: CN=CDB8CC060D6F57788F1D113E45C2BD9654573CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:fc:bc:58:12:55:a9:7d:c0:44:a5:1a:21:
7f:a3:20:20:91:59:9d:cd:35:27:5d:ff:3e:02:17:
03:22:da:0d:87:16:6e:46:fd:78:2e:c8:f1:a3:41:
9e:b3:97:19:10:84:28:93:68:ef:f6:f3:ae:a6:d2:
10:b8:7a:96:81:4a:40:ab:06:1d:f8:ee:73:3e:69:
2a:51:04:85:5a:75:7f:8f:02:75:f6:5a:0f:32:27:
e9:67:83:cc:68:0f:32:4a:0a:60:bc:a8:23:6e:cf:
f8:63:0c:db:eb:89:72:2f:3a:a0:9f:3a:ff:a6:57:
a0:9b:0f:6b:b4:93:42:81:22:ae:48:ab:5f:eb:eb:
3a:99:19:28:c8:ed:c7:3f:4a:e1:37:99:89:c6:a6:
cd:ae:71:4d:94:65:0b:a6:64:aa:ec:df:ac:71:e7:
8d:cf:de:21:ee:5c:e6:58:72:c3:3c:3f:b9:9a:ff:
4d:31:36:05:46:f1:d4:a3:5e:f5:c1:b8:5f:26:6d:
c7:4f:a2:80:9e:7a:e1:3e:ef:f8:38:a1:e7:5f:67:
4f:da:59:b1:fb:b1:48:da:27:47:60:d2:39:4f:f2:
16:ca:12:51:83:f0:72:62:1f:3a:92:e0:34:2f:ca:
c7:46:46:15:4b:6a:e4:16:1c:e3:5a:9f:fc:f8:1a:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:CC:06:0D:6F:57:78:8F:1D:11:3E:45:C2:BD:96:54:57:3C:C1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:be::/48
Signature Algorithm: sha256WithRSAEncryption
2f:00:c1:c0:df:0b:20:a5:a1:16:1c:db:49:63:aa:f5:d3:5a:
a2:1c:0b:f6:c1:c8:2d:27:60:60:d2:28:d1:1c:a4:2b:d8:00:
4b:04:99:e6:b6:5b:bc:ba:9a:9e:f7:b2:c4:a5:e4:f3:af:ff:
8a:68:0e:18:ba:fd:44:4a:d2:fb:1b:4d:84:5f:36:69:9d:f1:
b3:20:d0:10:ee:ab:43:9a:aa:a1:bc:71:61:ed:94:bc:0b:4c:
72:e6:66:a0:18:01:81:58:3c:51:4d:7c:80:cb:45:7f:6a:d0:
eb:61:5e:56:1f:18:eb:0a:f3:a0:3c:59:27:86:c4:47:1b:a3:
1d:44:1b:1d:48:aa:1c:90:3f:43:f9:e5:49:39:67:d5:b4:bf:
2a:09:a6:68:17:5a:02:a4:ea:13:54:a7:0f:e1:4f:d5:5e:ea:
12:62:d7:26:98:8a:50:da:82:34:82:0a:c1:94:dd:e5:bf:72:
9a:56:76:77:47:e9:1a:8c:70:f7:93:c7:1a:38:45:8f:13:9b:
c4:e4:98:67:dd:4e:91:bd:3f:11:61:44:20:bd:db:f2:a8:4f:
ba:e9:4a:0a:13:88:45:85:dc:08:49:4c:2f:07:1d:c9:e5:1a:
6f:f0:1a:f7:86:65:32:5e:31:c0:3f:2f:cb:00:d6:f3:cc:09:
86:18:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org