Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a65363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: hWb+GfgVhPEYWS0LCabT5WGxK6MKac2baw1Q2XGq+14=
Subject key identifier: 04:CD:0A:2B:27:3F:F0:91:5C:6D:AE:F5:BA:60:4E:96:CF:2F:11:0B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 27FF945FBADF9D12B4373F283BD47AEBDE9CFB83
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:38 +0000
ROA not before: Mon 26 Sep 2022 07:56:38 +0000
ROA not after: Mon 25 Sep 2023 08:01:38 +0000
asID: 59282
IP address blocks: 2400:d680:e6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ff:94:5f:ba:df:9d:12:b4:37:3f:28:3b:d4:7a:eb:de:9c:fb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:38 2022 GMT
Not After : Sep 25 08:01:38 2023 GMT
Subject: CN=04CD0A2B273FF0915C6DAEF5BA604E96CF2F110B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:30:4a:b6:5b:b1:a5:69:69:ba:e1:13:0b:
f4:4d:1c:b6:e5:71:bb:c7:72:64:6a:3b:47:35:63:
b3:05:77:c3:e9:b2:c5:a6:cf:12:65:cc:bd:1b:09:
c2:19:33:62:8a:05:42:6f:03:70:6b:84:80:8e:0f:
23:4c:ae:0a:cb:90:bd:40:df:19:d7:bb:2f:09:d4:
f8:68:41:db:2d:8d:2e:d6:f7:53:0d:33:4c:d0:9c:
2b:91:ee:e4:40:f9:10:e1:59:d5:7f:56:34:ae:12:
ad:aa:06:bc:4f:18:39:c7:41:69:9a:82:7a:8e:1d:
b5:25:04:9d:be:63:ea:5d:0a:32:f3:31:e7:84:ad:
cb:4d:ac:9a:13:d7:a7:ca:1e:4c:7b:05:c8:f9:77:
c3:03:7b:ac:c5:66:00:b6:b1:a3:24:9f:7b:c0:2a:
52:7d:80:9d:bc:eb:57:34:e9:13:13:62:88:4d:5c:
68:8d:05:fe:18:66:d9:5a:bf:7e:eb:96:e0:d5:b3:
69:f4:16:12:ee:f6:1c:aa:bc:2c:1e:f7:61:02:ec:
cd:b3:ef:87:85:5b:53:bd:41:63:0f:00:9e:2f:1b:
72:f3:75:41:2e:9c:2e:9e:3d:f2:33:bb:69:2f:24:
b8:cd:d6:94:97:61:60:c5:ca:19:81:c4:ba:34:ba:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CD:0A:2B:27:3F:F0:91:5C:6D:AE:F5:BA:60:4E:96:CF:2F:11:0B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:e6::/48
Signature Algorithm: sha256WithRSAEncryption
be:75:0e:47:11:a6:77:8d:53:9d:6d:03:52:4a:cb:e9:f9:9d:
cf:e1:54:0d:c7:c4:8a:ca:ea:38:3d:d4:e2:9b:5b:2f:71:d6:
38:93:b5:e4:de:76:8e:67:ea:f5:e2:0d:7a:db:24:41:f2:b6:
b0:90:01:1e:5f:c2:3d:41:86:7d:20:c5:14:ed:8c:1e:6d:27:
3e:dc:1c:5e:58:47:9c:c1:e5:b0:c9:c0:d4:5e:2d:5a:7a:aa:
f1:dd:8d:7e:57:e5:6a:a4:da:31:ce:45:97:b8:38:dd:f1:59:
5e:3b:7a:e4:06:d9:81:33:1b:60:a0:ea:6c:ca:56:08:de:f0:
77:87:16:18:69:fb:3f:30:89:ef:79:8a:16:64:05:98:1d:b0:
ea:d3:77:00:3c:23:e4:46:32:a4:20:ab:6d:ba:a7:de:3c:b7:
9d:8e:57:3f:7c:28:6d:41:53:49:f6:d3:fe:2c:31:7a:42:f6:
ac:78:a0:1c:ed:1d:1e:5c:fc:70:b1:5a:e5:73:53:e9:9c:a6:
06:e7:a9:e8:49:2b:45:36:8c:47:67:00:7b:89:b4:a4:20:78:
90:70:31:55:b0:c8:52:c2:bf:76:58:1a:ec:bd:29:e8:54:67:
44:b9:04:94:99:6b:55:46:b4:5b:02:b7:82:45:07:39:0b:c3:
c2:28:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org