Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a65613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 6VIiN/e+amYXr3zgedewbSEgKjHQXGMW8hh3geQPQa0=
Subject key identifier: 01:3C:CB:3E:ED:80:16:87:8B:7C:B8:57:4D:33:CA:BF:D8:D5:22:FB
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 28EE60D0DAEB4605F7AA7760D74102B3F5211150
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:00 +0000
ROA not before: Mon 26 Sep 2022 07:57:00 +0000
ROA not after: Mon 25 Sep 2023 08:02:00 +0000
asID: 59282
IP address blocks: 2400:d680:ea::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ee:60:d0:da:eb:46:05:f7:aa:77:60:d7:41:02:b3:f5:21:11:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:00 2022 GMT
Not After : Sep 25 08:02:00 2023 GMT
Subject: CN=013CCB3EED8016878B7CB8574D33CABFD8D522FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:66:93:e3:20:cf:56:24:6a:08:76:15:1f:
1e:ff:d7:98:11:b0:b2:4b:01:24:71:d4:78:97:1f:
e2:c4:5d:e4:17:b9:52:e2:c4:e5:e3:a2:8d:bc:97:
ca:2e:fc:53:65:4b:69:24:34:70:e6:12:a8:14:88:
7f:e8:2b:0a:3f:a1:b4:98:ee:36:9c:98:f3:a3:27:
d3:f7:23:52:b7:33:59:1c:a4:ef:38:64:20:41:e7:
5c:53:0e:4b:14:e1:d6:da:29:d4:a0:c4:0a:a1:68:
01:a3:f5:08:b6:ed:9a:b8:e6:50:07:49:fb:61:7c:
60:6d:bc:de:5c:d9:8f:97:44:24:b2:a1:80:bd:0c:
2f:20:55:61:9d:7d:9f:93:59:1b:93:c6:ad:af:dd:
ca:9a:d8:b8:3b:d7:8e:ca:18:ae:a4:2c:f1:d1:35:
58:41:6c:08:7a:7c:b8:ba:c8:25:15:f4:66:59:d3:
04:94:f1:98:c0:cc:43:87:18:b4:20:6b:dc:21:92:
6d:0a:50:04:26:32:4c:e9:a6:82:6f:54:13:15:0d:
ab:a8:a9:04:ac:5a:65:db:33:a0:a5:90:a3:39:58:
86:42:63:bf:7e:3a:b4:6f:8c:a7:9f:5e:db:da:50:
40:e1:5e:ed:3f:f3:36:df:69:14:a9:db:ab:fb:d4:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3C:CB:3E:ED:80:16:87:8B:7C:B8:57:4D:33:CA:BF:D8:D5:22:FB
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:ea::/48
Signature Algorithm: sha256WithRSAEncryption
56:25:1b:bc:d0:e3:6d:01:7e:56:27:ec:a3:8f:a6:34:5d:12:
5e:18:de:b6:40:32:f1:d0:5f:7e:63:fe:cf:19:64:bd:50:31:
9f:c2:72:4b:a3:37:f7:43:e3:a1:ad:0f:52:9c:8f:a9:bc:2b:
3c:4d:7a:da:78:5b:6d:da:20:e6:f1:e8:c0:48:ea:32:ff:4d:
8a:41:e3:0b:aa:2f:7c:e2:51:74:9e:0c:4e:16:7d:06:ee:7e:
7e:28:96:2f:3c:22:e7:d4:f0:f2:37:31:01:e5:35:0d:2f:bd:
d5:a9:a7:00:44:7a:8f:02:da:80:57:97:8d:af:b3:e4:be:14:
a2:12:09:a3:3e:7b:11:d4:eb:43:be:02:3a:40:7d:84:f8:29:
57:e6:28:0c:40:b5:fc:4f:c5:45:14:cd:29:7a:fa:2d:ec:1f:
e3:52:d8:f8:eb:03:a5:8d:e3:5c:b4:e4:e8:5b:14:11:8f:b4:
48:f4:a0:b7:42:62:cd:a4:7d:48:b0:11:15:e1:7f:63:25:d0:
1b:84:85:24:76:d3:ac:c5:38:94:15:8b:d6:9d:ba:6a:fd:67:
bb:4f:84:29:d8:e1:c2:3b:aa:ca:7d:77:c1:6c:69:62:26:37:
af:fd:99:e7:d6:67:e9:0b:c1:b9:74:78:db:98:cb:d8:a4:2a:
80:4c:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org