Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a64343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: O6dE1V2WH52s3SPGBeof1RIs5p1fvNqbq4eArVDbHFo=
Subject key identifier: 72:D3:54:6C:A5:87:5A:C5:8B:D8:9A:EF:AD:E4:B6:C9:21:C8:EF:51
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 48DF053A433D77D0768C8BCFE08FBF9017B17398
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:38 +0000
ROA not before: Mon 26 Sep 2022 07:56:38 +0000
ROA not after: Mon 25 Sep 2023 08:01:38 +0000
asID: 59282
IP address blocks: 2400:d680:d4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:df:05:3a:43:3d:77:d0:76:8c:8b:cf:e0:8f:bf:90:17:b1:73:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:38 2022 GMT
Not After : Sep 25 08:01:38 2023 GMT
Subject: CN=72D3546CA5875AC58BD89AEFADE4B6C921C8EF51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:ee:d1:ba:3a:56:2a:2d:05:d7:ca:75:4c:
36:3f:05:f2:01:6a:7d:8f:63:b2:f0:4a:7b:d2:fa:
f3:1a:bc:07:0d:7d:7d:3d:cf:14:b3:d1:44:98:54:
cd:46:a0:58:b0:8a:09:92:06:3c:57:97:24:9b:69:
de:88:06:99:32:2e:c9:79:2f:9b:bd:60:1e:b9:1a:
b4:24:23:2a:38:d4:3e:30:3b:ab:4f:a5:71:e3:31:
71:9e:73:df:86:86:33:33:d9:83:73:7d:a3:bc:83:
08:8b:ec:0e:13:2d:f0:d8:93:b2:68:94:90:18:18:
21:ba:a1:67:b5:10:0a:3e:60:fc:54:97:5a:5a:c2:
ee:17:1f:b9:33:d3:06:6e:3c:84:d2:84:3b:f2:b6:
d0:03:dc:1c:93:e7:13:64:d2:f2:9d:b8:76:6e:0a:
35:e8:46:d3:ca:18:90:77:73:de:10:7e:18:2b:a8:
b2:c0:d2:77:01:5f:dd:31:c4:33:78:5c:38:82:cf:
4f:32:56:c3:da:4b:0c:9b:9a:dc:63:f8:97:95:19:
16:2d:79:40:5e:46:a9:90:89:ea:b1:38:5f:42:4e:
eb:2b:e6:a7:df:c2:42:c2:4f:6e:a1:e3:df:cd:3e:
aa:2e:c3:e2:7d:81:95:56:9f:b8:6f:3f:98:9f:61:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:54:6C:A5:87:5A:C5:8B:D8:9A:EF:AD:E4:B6:C9:21:C8:EF:51
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:d4::/48
Signature Algorithm: sha256WithRSAEncryption
62:65:1a:e9:47:b1:d4:61:a4:cb:4b:7a:b5:88:f7:72:33:a4:
89:62:1b:1b:44:4f:f6:fa:45:61:92:4c:eb:9c:a7:68:cf:17:
64:c3:4c:cb:02:1a:da:e6:13:16:c2:04:41:1c:31:37:e3:5b:
47:ca:f1:d3:b0:c4:b0:e5:c7:65:92:ea:05:aa:a2:35:1b:bb:
10:f7:01:84:b6:68:c5:07:3c:7b:b1:8d:16:cd:a3:87:ef:a7:
7b:3f:11:b2:7b:42:fd:30:bd:c5:62:c7:17:d8:70:d9:f6:af:
2e:bc:24:dc:5f:bc:45:ec:07:db:a2:76:a9:60:0e:d9:49:0f:
d6:db:82:b8:d1:bb:2d:ba:e2:97:cb:71:8a:85:bf:72:e2:48:
0f:56:e9:78:03:e8:66:9a:9e:cd:1e:41:f3:e4:ec:36:5e:09:
96:61:e8:84:50:26:74:8d:70:a3:54:e7:3f:ba:7b:00:4f:57:
d3:de:dd:e0:26:0b:89:cc:f3:93:91:da:fc:81:45:e4:c7:a0:
ba:78:bc:1e:a8:84:45:cf:0c:dd:ad:d7:fd:9b:ce:18:f3:cd:
12:76:c2:7d:23:cb:71:ae:24:03:01:f9:55:ec:f5:98:67:6c:
c7:ca:42:ac:9f:f5:93:f7:53:76:ca:52:f3:5e:fd:77:fc:fe:
4a:2f:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org