Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a62663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: dKyDlBkxlVNDWbQcMX9BhVBCqT9Gcw2bur1TwdgO8Z4=
Subject key identifier: F9:A6:EE:46:0D:DC:49:57:A7:5B:67:FC:3E:37:54:F1:E5:5B:17:54
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 477248F21B9D29FABE7326468E83C55EEDB94BE4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:35 +0000
ROA not before: Mon 26 Sep 2022 07:56:35 +0000
ROA not after: Mon 25 Sep 2023 08:01:35 +0000
asID: 59282
IP address blocks: 2400:d680:bf::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:72:48:f2:1b:9d:29:fa:be:73:26:46:8e:83:c5:5e:ed:b9:4b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:35 2022 GMT
Not After : Sep 25 08:01:35 2023 GMT
Subject: CN=F9A6EE460DDC4957A75B67FC3E3754F1E55B1754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:94:9e:50:15:55:f5:61:ac:86:cc:8d:79:
20:79:78:31:43:ad:9f:0f:97:24:6f:88:7d:ff:cf:
d1:f5:76:94:86:2f:f8:0f:7b:6b:64:fe:15:41:1a:
5a:69:2c:04:1e:93:20:f4:2e:e3:89:66:a8:00:03:
b0:16:2e:37:be:d2:75:9c:f8:1c:a1:82:4c:e2:39:
63:e2:7e:ee:3a:75:4b:0a:0f:46:2f:81:3c:7a:2a:
f3:6d:7a:b5:7e:04:2e:3b:16:d3:5f:7a:25:fe:7e:
76:b0:73:56:c1:5d:a0:be:66:9b:3f:26:8a:5f:f8:
93:bb:74:88:aa:1f:57:f1:12:e7:2f:bc:88:9f:f7:
fa:78:f6:3e:ef:fa:52:83:dc:69:85:77:c1:e3:c2:
f9:03:f2:6a:19:30:ab:68:1a:4e:20:7a:45:9d:ad:
9d:ed:1c:cb:41:7a:3f:91:e1:7d:ad:07:31:80:26:
6f:8f:ef:89:eb:ab:50:72:da:3d:f0:94:f5:be:c7:
66:58:2a:05:d4:3f:b9:45:fd:8e:37:28:07:48:95:
83:09:53:81:24:f8:d3:08:6a:4a:f0:49:fb:98:fc:
f4:71:ec:5b:be:77:33:29:22:84:55:52:cb:78:35:
13:da:be:d9:66:04:73:0f:18:9c:bb:7a:d6:11:9a:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A6:EE:46:0D:DC:49:57:A7:5B:67:FC:3E:37:54:F1:E5:5B:17:54
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:bf::/48
Signature Algorithm: sha256WithRSAEncryption
28:9b:33:b7:50:5a:a7:13:d0:57:4e:ef:32:1a:06:21:44:5d:
59:01:b7:bd:59:83:56:4d:37:f8:88:fc:c3:97:14:0f:f1:2d:
e4:f0:50:4f:e2:cd:0b:1d:68:66:d7:ab:b1:36:6a:5f:22:e5:
d3:41:b4:7d:b3:07:7c:5a:37:29:ba:ea:10:cb:fd:8b:e9:05:
b3:91:a4:e0:70:cc:0e:c1:ac:60:92:4f:df:07:a3:ba:dc:9a:
a6:11:90:1d:8d:c1:53:5d:4a:8c:28:eb:99:50:3b:9b:4d:8c:
83:4a:7f:1b:d0:f6:44:12:bb:77:d8:f7:ca:58:df:fc:8d:24:
0f:01:2c:9e:6f:7d:9b:5f:49:36:38:44:cd:3d:c6:ce:95:8c:
c5:85:5f:08:e1:ef:f8:18:42:fe:da:f3:f8:1c:0f:9d:bb:8c:
1b:02:63:a0:c4:6b:db:54:00:c4:d0:e5:27:ae:43:79:b0:52:
fa:da:74:da:3a:ea:35:23:22:68:5d:9a:d6:38:e2:2a:39:32:
3d:5a:49:c7:b2:e6:f1:bd:9e:16:6c:3c:84:33:bd:5b:d3:41:
d1:c6:5c:85:56:fa:9a:e9:31:64:6e:50:66:9c:1b:cb:27:e9:
8c:c9:1d:db:fc:ea:e7:d4:56:4e:08:c8:eb:61:fb:38:2b:f1:
1c:f3:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org