Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a65393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: EmqRabThipmVDvjgtnhUY6f5oIPhM3qMnpsfFCNfjSk=
Subject key identifier: AE:D4:60:3C:38:A1:4F:A1:84:07:CB:3E:9C:36:3A:90:3C:05:2C:34
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3B362B4BDC5D3D68710F49BFAFD6039EBB33DC05
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:44 +0000
ROA not before: Mon 26 Sep 2022 07:56:44 +0000
ROA not after: Mon 25 Sep 2023 08:01:44 +0000
asID: 59282
IP address blocks: 2400:d680:e9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:36:2b:4b:dc:5d:3d:68:71:0f:49:bf:af:d6:03:9e:bb:33:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:44 2022 GMT
Not After : Sep 25 08:01:44 2023 GMT
Subject: CN=AED4603C38A14FA18407CB3E9C363A903C052C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:41:04:55:97:b1:a6:9d:0a:fa:de:0a:e4:
0d:47:13:e3:60:00:ab:99:23:08:b5:db:73:3d:34:
8c:8c:24:da:f3:9b:84:b4:94:c6:b0:7e:d2:15:bc:
85:00:9e:fc:b7:94:ef:c2:90:93:73:32:a1:22:a2:
dd:0b:80:26:38:e0:ed:27:70:e6:e0:8e:d8:dc:e0:
8f:29:20:94:2b:fa:aa:57:21:80:f5:d6:90:bd:4d:
46:2a:1c:86:15:87:1d:f7:2e:7d:50:7e:b4:d8:74:
5f:de:e2:63:e7:95:7b:1f:b5:b3:00:b9:50:c0:f7:
2b:44:75:52:d3:34:a7:8f:90:a5:67:2e:f1:16:9e:
d8:71:52:8f:d0:e2:2d:33:25:73:78:96:d6:b9:5e:
18:9b:1e:08:6b:0d:93:3c:ad:d8:a5:cb:13:5b:c4:
03:dc:e8:1b:9f:73:32:39:95:47:c3:ea:88:23:30:
04:5c:a1:e3:59:8e:03:01:6b:52:c8:93:dd:00:3b:
8a:11:15:24:3c:60:5a:a7:61:9a:b8:7a:cf:7c:91:
eb:83:7a:39:fd:eb:77:98:bb:0e:52:bc:32:d3:a6:
cc:2b:91:f4:61:0d:1d:73:78:3b:07:bd:01:b0:f4:
0d:22:47:8a:69:f9:c4:5b:dd:7b:bb:99:f3:7a:86:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:60:3C:38:A1:4F:A1:84:07:CB:3E:9C:36:3A:90:3C:05:2C:34
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:e9::/48
Signature Algorithm: sha256WithRSAEncryption
bf:04:70:b7:d1:36:1c:59:b2:ca:3b:31:cb:a3:3b:e0:82:7d:
e9:c6:0f:d4:91:53:63:2d:e1:52:53:b7:bd:70:2f:f6:be:16:
22:03:b3:bc:40:81:6a:fc:11:72:e4:57:a7:64:87:cc:22:08:
97:22:c0:8b:d0:6e:8a:42:10:60:a6:71:e3:90:f8:7d:56:69:
0f:9f:6b:09:ef:0d:58:9c:6c:0e:db:c2:08:e7:fb:5a:61:5e:
27:a7:76:ad:8e:03:ca:30:b2:55:52:90:e3:b0:b1:78:68:80:
a0:92:cc:63:65:8b:d8:4e:2a:68:5d:56:a4:e4:1b:7e:59:4c:
24:54:a4:a2:14:72:ce:31:61:14:3e:4c:47:3a:e3:69:12:b6:
fa:74:bf:be:0c:5a:26:d9:7c:38:14:e4:e6:0e:50:36:bd:44:
cd:e1:ed:1a:1e:6b:4f:c5:8e:2b:bc:db:b6:21:68:bb:c3:4c:
d8:9c:ff:92:0a:ad:f5:0d:d3:ff:26:02:c7:e6:90:c7:d1:df:
f6:0e:2d:39:94:2b:fb:0d:87:01:32:57:4c:c9:19:44:fc:0a:
aa:9a:82:36:00:2c:58:ab:d6:7b:69:b3:17:75:1d:3e:60:15:
ee:f7:8f:ac:89:0b:3e:ec:a0:94:83:1d:3f:ae:75:72:98:2b:
1b:da:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org