Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a65633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: USGeRSGUiD/V/bf3IzaNgNOt+g24V4ZktjJwtm30tCU=
Subject key identifier: AD:BF:6A:D1:87:3C:9E:D3:BE:D7:AD:FA:DA:B8:63:C8:B5:11:85:FE
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 34B440AE221D771D616DA0793DAC15C376547FC5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:01 +0000
ROA not before: Mon 26 Sep 2022 07:57:01 +0000
ROA not after: Mon 25 Sep 2023 08:02:01 +0000
asID: 59282
IP address blocks: 2400:d680:ec::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b4:40:ae:22:1d:77:1d:61:6d:a0:79:3d:ac:15:c3:76:54:7f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:01 2022 GMT
Not After : Sep 25 08:02:01 2023 GMT
Subject: CN=ADBF6AD1873C9ED3BED7ADFADAB863C8B51185FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:ef:99:a0:ab:73:06:51:f9:ba:fb:1a:27:
a6:5b:99:ef:dd:11:17:9b:bf:a4:52:0f:4b:bf:58:
0a:47:32:ee:67:81:78:68:6d:9c:b6:11:d6:e9:2a:
f9:44:22:bf:97:35:b9:77:9b:93:f6:7c:43:37:7c:
27:6b:eb:9f:a6:a9:ce:97:d6:57:d0:3f:1a:53:21:
91:37:26:98:3b:aa:bb:0f:ab:e4:4b:91:ad:0d:26:
ec:c4:95:7e:b6:2b:6b:27:9b:12:b9:73:2c:50:bb:
3c:7e:87:8e:d7:a7:59:b9:5c:e3:63:89:c1:c6:df:
c6:7d:2f:ac:d9:f3:9b:26:c7:63:a3:bd:4f:34:b0:
27:5f:5b:19:b9:86:7e:25:1d:9f:5f:e7:bb:59:71:
ce:a9:7b:05:f0:b5:41:02:8d:13:74:10:7a:73:4d:
dc:ed:98:eb:b7:53:e9:3e:36:37:79:76:c4:c8:3e:
15:72:9d:0b:3a:36:29:be:62:ca:a5:dd:bb:7e:34:
ea:5d:f1:07:43:7c:49:0b:3c:7b:e4:ae:f2:73:b2:
e5:de:45:c2:cb:4d:e3:30:14:ce:80:60:f9:36:88:
a4:ff:65:b3:5c:8d:f0:de:f0:1a:9c:6a:bb:e9:a5:
4a:12:0f:e3:2d:22:95:59:19:e3:8b:b1:ec:48:b1:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BF:6A:D1:87:3C:9E:D3:BE:D7:AD:FA:DA:B8:63:C8:B5:11:85:FE
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:ec::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e6:32:04:12:c8:03:d8:cd:b8:0e:a4:7a:08:82:29:f2:cf:
0b:a4:e3:f8:60:e5:1c:21:1b:12:2f:84:ea:12:3b:37:8a:a8:
77:aa:1e:97:74:ce:01:e2:d6:87:6c:15:4e:dc:0a:df:9a:8a:
d6:26:cd:2e:85:00:2e:11:12:ae:c6:87:5f:96:66:0c:53:40:
8d:56:c8:7d:8b:8c:cc:29:03:0a:73:5c:bf:5e:bc:b7:25:8b:
8b:79:c3:c5:f5:f5:a2:07:3c:78:58:b8:38:6e:d8:45:d4:d1:
da:d9:be:d1:72:88:26:b3:fc:d4:e3:d8:f2:c7:b1:05:0d:08:
33:05:af:53:e4:9e:46:3b:7b:9a:e2:f2:bb:e6:d6:9c:fa:ff:
f9:8f:46:2e:d9:4c:45:20:6b:ab:58:7b:df:e3:b5:75:2a:e5:
ff:68:4e:3c:b6:2a:27:fe:98:f2:84:13:47:c9:89:cf:0c:20:
a1:e0:f4:99:3a:07:5f:3e:1a:70:9e:d8:9d:84:cf:4c:8a:23:
42:d2:c7:24:a7:b3:ba:6d:75:6c:14:52:f8:c2:1a:a7:1c:a4:
77:67:b2:5d:3b:bf:0a:b0:8b:4f:d7:f7:94:14:ae:2b:5d:4f:
36:61:b4:3d:23:a6:ce:44:71:35:b7:13:45:27:67:1a:d9:87:
0e:ca:90:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org