Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a64333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: ZZ+Au/BWwSZrtYxrgg1ppO5JpWRHDccqN1opZeeYFkI=
Subject key identifier: 5F:93:35:E6:1B:31:89:DA:47:08:56:A4:86:7C:4E:B2:FD:70:D2:5E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 776739D4EB517F8E1A4C7201CF35D30CDC2E3A5E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:27 +0000
ROA not before: Mon 26 Sep 2022 07:56:27 +0000
ROA not after: Mon 25 Sep 2023 08:01:27 +0000
asID: 59282
IP address blocks: 2400:d680:d3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:67:39:d4:eb:51:7f:8e:1a:4c:72:01:cf:35:d3:0c:dc:2e:3a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:27 2022 GMT
Not After : Sep 25 08:01:27 2023 GMT
Subject: CN=5F9335E61B3189DA470856A4867C4EB2FD70D25E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:82:0d:57:4c:ab:88:c1:86:16:88:ad:5a:
5b:5c:32:f8:63:c6:0b:2f:47:6c:1e:2b:43:81:d8:
0c:44:53:97:ab:89:e0:26:a7:74:d0:e6:f5:d1:92:
c6:7c:70:f2:2c:db:a1:b9:8c:5a:29:eb:20:7d:3d:
66:73:39:bf:18:ee:c0:94:73:b6:21:d6:47:c9:0c:
df:ed:48:69:c6:65:ff:d1:ae:49:46:dd:e0:6a:6e:
b6:35:e5:25:61:d7:9a:99:ec:4d:55:31:ae:af:39:
c4:e8:5c:5f:8e:1b:6c:83:56:01:dc:73:db:46:8c:
34:27:df:93:4c:9b:19:7d:f9:04:dd:e0:33:a2:54:
f8:1b:42:08:4e:7e:d6:6d:ad:2e:df:c1:47:73:32:
77:f8:ae:5b:78:85:fb:5a:47:0a:1c:d3:47:7f:20:
5b:45:d5:5b:7b:24:cf:a6:56:23:7f:f6:b6:65:93:
ee:e8:56:c5:8b:10:ce:47:8f:d9:0a:62:f4:41:e1:
e7:ec:76:98:19:9a:88:4d:88:79:1d:8c:9a:32:d5:
71:31:ea:d2:b9:3c:65:26:66:73:9d:d3:0d:13:42:
6e:d6:8a:d4:27:10:36:62:80:4c:0d:17:c4:7f:5e:
90:d0:c1:e2:70:0c:2d:9c:75:31:e6:6a:4e:88:94:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:93:35:E6:1B:31:89:DA:47:08:56:A4:86:7C:4E:B2:FD:70:D2:5E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:d3::/48
Signature Algorithm: sha256WithRSAEncryption
a0:1a:33:2c:20:7e:d6:6d:3d:29:df:cf:f9:a4:7c:34:17:33:
47:b6:6c:22:79:91:54:7c:72:c9:ca:07:b6:a6:36:c6:85:4a:
76:cd:8d:9f:b9:b5:77:49:e7:4b:f9:65:5d:e6:24:06:8e:d5:
67:cc:95:d4:d0:ee:8c:be:7d:c9:bf:06:a3:1f:07:5c:80:8c:
f9:09:87:f4:ea:c3:dc:5f:1b:30:ca:48:70:db:52:a7:15:10:
69:ac:f4:85:db:9c:5d:22:d0:6c:09:f4:23:dd:52:72:40:be:
28:3d:dc:3d:2d:34:61:56:96:bf:54:04:ff:d1:a8:3c:52:65:
ee:18:a0:cd:c5:9e:29:3e:a2:0b:75:08:f1:1f:75:4d:14:56:
36:64:db:20:c5:bb:ac:9e:64:61:ac:3d:16:c8:b7:27:92:f8:
2e:98:17:e5:8f:5d:6e:93:84:ab:ed:d8:68:89:80:73:d0:9a:
72:a1:f3:12:e7:f7:32:c4:f3:46:51:43:ff:09:19:f5:92:3d:
73:e4:86:a9:e7:32:17:ba:6f:61:1b:b1:49:13:c1:63:1e:77:
9e:3a:23:30:68:25:dc:49:ff:23:fa:02:f6:e5:59:29:87:48:
bc:a9:e3:4e:42:ba:68:b0:5d:86:6f:63:fb:2c:ca:4d:f6:60:
c9:8e:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org