Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a65373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: fSxGbLl0C1hNYRnF2FMtQUDXfxCgplHq/12pWtO00O0=
Subject key identifier: 3E:E8:10:4F:F2:A9:70:0E:12:74:23:92:F4:F4:E7:7C:70:51:32:02
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1057AF5D6EE95BEE96413318BC45BF829D36992C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:23 +0000
ROA not before: Mon 26 Sep 2022 07:57:23 +0000
ROA not after: Mon 25 Sep 2023 08:02:23 +0000
asID: 59282
IP address blocks: 2400:d680:e7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:57:af:5d:6e:e9:5b:ee:96:41:33:18:bc:45:bf:82:9d:36:99:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:23 2022 GMT
Not After : Sep 25 08:02:23 2023 GMT
Subject: CN=3EE8104FF2A9700E12742392F4F4E77C70513202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:5e:46:da:15:a1:54:f3:82:b4:37:c0:fd:
2d:16:86:2a:61:f6:7a:ae:bc:4f:37:b3:d3:db:50:
81:dd:e6:ff:4a:5b:49:02:bd:e6:26:84:6b:5e:4e:
f6:00:ec:5a:ac:5e:2f:80:c1:4e:97:0a:c8:40:fe:
91:32:a0:96:80:05:ee:47:02:8f:a9:7b:85:b3:54:
1a:90:77:85:e6:5f:54:90:26:1e:ab:07:2e:d4:b6:
d2:8f:df:ee:8d:f8:5d:b9:2b:e7:67:ba:86:48:83:
4e:ed:d9:3d:ee:7e:40:65:9b:66:4a:4b:4d:f8:30:
04:52:8f:59:04:dc:15:94:f4:44:3d:fb:2c:ea:c4:
ff:d3:81:24:4b:eb:d7:66:15:09:20:a3:e6:e1:e8:
10:ec:89:24:a8:eb:c3:f1:10:32:28:31:9a:06:50:
7f:a9:bc:2d:c3:0d:fd:bc:28:d2:16:13:e1:eb:a5:
b2:55:53:88:1d:af:07:34:da:fc:1d:00:41:74:42:
d2:7e:ee:27:b8:93:78:ff:4a:42:8f:aa:0e:56:fb:
b0:2b:b0:2d:6b:9f:3e:d1:18:03:73:0c:e3:bc:3c:
61:0a:e2:36:53:17:d1:d8:eb:53:fc:99:58:a1:f3:
25:a0:bb:02:f5:f5:de:51:09:5a:0e:df:ee:46:ab:
3a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E8:10:4F:F2:A9:70:0E:12:74:23:92:F4:F4:E7:7C:70:51:32:02
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:e7::/48
Signature Algorithm: sha256WithRSAEncryption
05:1a:55:59:4f:2e:8d:ea:61:68:93:f4:a0:3f:1a:f2:55:3f:
d6:94:dc:ec:48:ca:b6:38:c4:23:65:49:e5:2a:76:1a:84:7a:
7d:eb:75:e0:f4:99:be:61:79:bc:d8:34:74:e4:1f:c2:14:90:
16:e8:03:b8:5c:f3:42:80:ee:67:83:20:21:e0:ee:58:04:cc:
5d:d4:40:57:aa:96:09:af:43:1c:d3:1b:2e:77:f0:ba:6c:e5:
ba:42:28:51:ca:02:be:3c:9c:3a:80:a0:b9:29:3f:23:93:e7:
9e:ba:d3:cc:a8:96:bb:14:1f:49:a6:58:86:74:11:4b:55:5f:
c6:d4:e3:45:73:4c:4f:ef:39:3a:74:e9:ca:16:c1:c4:e6:5d:
ac:00:e7:dc:a2:fa:51:de:1e:d8:f4:bc:33:67:99:e2:c7:48:
a0:50:a9:46:b1:53:4e:57:c9:f8:99:f6:72:a2:89:8b:a4:2d:
36:75:4e:96:68:a6:71:e9:9d:43:c7:56:8e:d9:5f:bd:fb:35:
14:7e:48:61:9b:11:6c:a8:ac:1e:c8:e1:06:2f:2c:b2:91:c0:
15:ed:00:c8:5e:23:6a:9f:a1:83:2d:f8:85:ae:8e:a6:90:17:
2e:50:b8:61:e4:09:3c:9d:31:26:d2:38:e4:29:59:c3:48:6b:
76:d8:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org