Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 5FmthwTmvZlxzg7FN8r1Vh+YmSpwY0zthYQu5H6sHbw=
Subject key identifier: 64:92:95:6E:F4:C8:B6:3A:C8:DE:A5:37:7B:BB:2F:7A:52:1C:BF:8D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7DAE2B6CEA6AF116E08D8B9086922AB3DDD15D82
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:34 +0000
ROA not before: Mon 26 Sep 2022 07:56:34 +0000
ROA not after: Mon 25 Sep 2023 08:01:34 +0000
asID: 59282
IP address blocks: 2400:d680:f0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ae:2b:6c:ea:6a:f1:16:e0:8d:8b:90:86:92:2a:b3:dd:d1:5d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:34 2022 GMT
Not After : Sep 25 08:01:34 2023 GMT
Subject: CN=6492956EF4C8B63AC8DEA5377BBB2F7A521CBF8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:cc:b3:d4:45:7d:c7:5d:24:68:1c:59:ba:
c2:2d:cb:18:ba:1a:74:61:23:0a:eb:98:ff:18:99:
0b:95:55:e5:c1:35:e7:7f:78:7e:4a:d5:26:ff:93:
88:17:85:a8:f0:cd:0f:c6:f6:94:f2:e5:b4:bc:1d:
34:74:c4:65:8a:de:3a:da:0f:0c:d8:7f:5d:64:c5:
db:8e:9e:d4:e7:c0:a7:7d:72:3b:76:86:6a:e7:72:
0a:66:4b:8f:b0:59:88:ed:4d:4b:61:c4:a6:8d:ea:
ec:b8:c9:4c:2b:d3:cb:e5:7c:5e:bf:84:bd:e8:14:
03:86:22:65:33:76:21:81:a4:6d:db:a2:15:9a:1a:
d0:1e:76:21:72:cf:ed:8f:2c:71:5e:67:96:ed:30:
f4:fd:c5:e3:0a:13:ac:b3:3f:0d:31:94:36:c0:22:
92:d9:da:ff:ab:1e:71:8d:17:02:fd:75:07:73:04:
0f:0e:f0:92:22:65:72:47:c3:d0:cd:8c:7b:0a:68:
69:3b:22:dd:4a:e7:43:57:18:bd:ab:77:67:f7:1b:
3b:1c:7e:fe:00:6d:a7:bc:09:54:36:f2:c2:fd:3d:
b5:e0:26:8a:af:40:8e:98:74:a3:50:f4:de:9d:ea:
19:dc:cd:0e:cb:86:0f:4c:f2:78:70:89:d8:02:1a:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:92:95:6E:F4:C8:B6:3A:C8:DE:A5:37:7B:BB:2F:7A:52:1C:BF:8D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:f0::/48
Signature Algorithm: sha256WithRSAEncryption
d2:5a:c7:1f:cf:ea:6b:82:85:9f:16:6e:01:49:d1:52:f2:0f:
f3:31:b3:7d:7f:3c:a9:c3:1e:61:22:aa:23:fe:aa:e2:4d:46:
a9:21:a8:b2:55:82:fc:83:b0:8d:29:b3:7f:09:33:6c:3c:6f:
67:3f:03:74:25:f6:38:67:b6:4a:c0:8c:f1:47:c3:a4:f9:72:
d4:ca:c8:f1:85:e8:17:9d:52:20:78:b3:53:a0:92:41:73:88:
e3:ec:c1:4d:9d:d6:53:7f:51:03:c3:37:d2:13:ac:50:3f:aa:
74:19:49:de:70:2b:e5:5e:92:49:36:6e:21:e5:86:e1:65:12:
56:2b:ae:fe:3e:be:f9:99:ff:44:bd:0c:10:61:a9:44:d9:92:
be:37:7f:ed:ac:cb:e5:4b:63:98:06:64:06:e3:bd:5d:45:2a:
5a:38:72:c4:8a:6b:ad:07:2a:d7:6d:e5:bc:b3:fe:97:a7:db:
5b:c3:08:25:d3:af:19:75:71:b5:a6:c4:95:4d:d2:6c:27:2c:
e7:3d:a8:48:b6:36:75:18:bb:24:c5:39:8a:e7:2b:b6:aa:0c:
ac:94:fd:8b:5b:f6:ad:b5:08:60:49:6f:db:77:81:09:a1:c3:
bd:dd:2e:60:7f:17:bb:ae:c3:dc:9c:d3:21:a7:b2:c6:1f:f6:
a8:ba:1e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org