Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a65623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: BynOMm3My9RtGXADA8d/6zd1m9K4UgVdoXVTZtfFhXs=
Subject key identifier: 96:4F:1F:0E:AE:63:ED:69:40:02:22:42:04:F4:D4:A2:47:BD:57:E6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6BECEAAF5F38FF620A220AEE55BC8789772D0D42
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:46 +0000
ROA not before: Mon 26 Sep 2022 07:56:46 +0000
ROA not after: Mon 25 Sep 2023 08:01:46 +0000
asID: 59282
IP address blocks: 2400:d680:eb::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ec:ea:af:5f:38:ff:62:0a:22:0a:ee:55:bc:87:89:77:2d:0d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:46 2022 GMT
Not After : Sep 25 08:01:46 2023 GMT
Subject: CN=964F1F0EAE63ED694002224204F4D4A247BD57E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:02:e5:23:cd:04:1c:1d:9c:fb:6f:b5:fb:
a2:9a:21:90:50:fc:12:88:bd:be:57:c8:60:9d:c6:
44:bf:e2:dd:58:db:99:26:8f:00:6e:c5:09:72:80:
56:ae:d8:b4:e0:05:23:ab:7f:97:e3:e2:ac:bd:da:
4a:59:4b:b8:7f:a6:7c:66:aa:9a:ea:6d:c6:dd:41:
13:be:76:bc:be:cd:d1:70:8a:0a:e8:e3:df:db:5f:
66:f5:31:cc:00:9c:b1:bc:db:85:20:19:b0:13:fc:
3f:83:16:34:9a:93:8f:8e:9b:57:e7:b3:92:29:65:
54:41:eb:23:6f:fd:9e:e6:c7:75:dc:e0:92:e2:47:
db:93:d2:4d:60:79:f6:cc:ba:9e:f6:a5:e0:2e:7b:
45:2e:ba:d4:9b:f8:ed:75:ed:c5:53:7b:7b:a0:c8:
ce:cf:b2:1c:df:95:0f:22:9b:1c:02:11:43:59:46:
96:23:16:a7:c6:c2:1a:35:36:f3:72:0a:a8:35:51:
09:09:58:9e:21:66:7a:f0:f8:a3:7b:fb:47:d7:c1:
dd:a4:13:fe:16:19:55:d9:7d:00:a1:ca:bd:3c:3c:
fc:8d:8e:d6:17:47:3e:0d:7e:14:72:e9:1d:94:89:
09:cd:d3:0e:7f:e9:d5:bf:99:5e:93:4d:3d:f4:c0:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4F:1F:0E:AE:63:ED:69:40:02:22:42:04:F4:D4:A2:47:BD:57:E6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:eb::/48
Signature Algorithm: sha256WithRSAEncryption
23:b6:01:ad:3e:aa:f3:a1:01:52:a9:fc:c4:06:a2:4e:83:0b:
c1:0c:6a:d3:9a:de:b2:73:f3:b3:cc:96:77:a4:db:73:01:db:
79:af:46:62:15:1b:16:9d:b7:81:21:c2:05:89:23:a1:9f:39:
e3:55:9b:1b:fb:a8:3f:b0:ee:7f:19:54:82:a8:16:f0:4a:0c:
96:6f:e1:cd:ce:2c:ce:0a:06:d5:5c:5e:d5:0d:bd:75:23:9b:
17:b6:4c:71:d8:05:e7:a0:33:61:ca:e6:61:b9:2c:4c:ba:69:
a6:35:05:dd:1b:57:ba:e4:dd:d5:4c:32:86:47:b9:81:b0:18:
1c:90:f9:c9:42:e2:1f:d9:33:3f:c7:5d:45:42:26:e0:11:d7:
d2:68:26:c4:8b:83:ad:45:19:ed:72:65:45:6c:bf:41:1c:36:
85:f7:30:3e:9c:72:d1:5b:1e:37:90:98:38:8d:ba:7e:32:63:
97:b6:41:17:0a:22:3f:35:65:cb:e8:85:44:8b:15:1d:67:7e:
05:46:4e:97:8e:48:43:24:6a:fe:30:59:ef:15:4b:d2:9b:b3:
ca:b1:95:37:2f:b1:46:ed:9d:a8:c1:53:c7:ac:75:44:29:01:
29:a0:29:10:fa:15:e6:05:c4:5e:fe:e6:ac:0f:73:4f:32:0d:
bb:39:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org