Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66393a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: BipDcHJSg+Djzxlt1yrkLCwXpry7OLspPe5+RQ0Aogg=
Subject key identifier: F7:B8:38:30:77:AA:28:F0:EE:BE:D2:08:FF:EC:7D:53:FB:A0:DA:25
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 68224C2C507C6768191D538F3E4C68520D9F8A7D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66393a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:20 +0000
ROA not before: Mon 26 Sep 2022 07:56:20 +0000
ROA not after: Mon 25 Sep 2023 08:01:20 +0000
asID: 59282
IP address blocks: 2400:d680:f9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:22:4c:2c:50:7c:67:68:19:1d:53:8f:3e:4c:68:52:0d:9f:8a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:20 2022 GMT
Not After : Sep 25 08:01:20 2023 GMT
Subject: CN=F7B8383077AA28F0EEBED208FFEC7D53FBA0DA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:e5:c4:fe:d0:6c:34:88:7c:5a:5a:67:4e:
d1:5c:77:55:48:9d:0f:e8:7a:87:a5:71:d5:87:5a:
08:e2:ff:2c:94:06:30:80:b4:fd:6b:d0:0a:cb:e0:
89:2a:45:03:f0:15:8d:5b:b9:86:94:a6:5c:34:82:
56:18:b4:cc:d0:b8:ad:65:bd:9f:ed:13:12:30:07:
8d:d9:6f:ba:8e:12:46:31:03:d4:2e:d9:0a:b7:53:
97:96:2d:be:ea:4a:24:56:05:dd:22:06:85:eb:0b:
02:90:d9:3b:a4:c3:e5:27:db:46:6e:99:6a:2f:85:
92:31:d9:b1:6f:21:f5:68:54:99:9e:bb:52:17:d6:
95:a0:85:f3:b2:92:94:50:d7:ae:fe:0f:9a:4d:d5:
5f:ca:0b:51:fb:37:25:e6:7a:1f:b8:64:28:86:39:
16:1e:14:ed:fe:aa:d8:76:9e:a7:84:51:f8:70:06:
64:78:ca:41:a9:0d:26:fc:46:94:15:d8:1e:64:42:
42:a5:24:a6:f8:35:38:23:bf:3f:d4:57:08:4f:33:
e2:07:62:5a:01:37:a8:5b:b9:af:09:97:4b:f7:86:
fe:1a:6d:ec:bc:ba:02:4b:7c:3b:3a:8d:4a:7e:a7:
e5:a5:cd:31:2c:d2:f8:8c:ce:3c:92:ab:59:ac:a2:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B8:38:30:77:AA:28:F0:EE:BE:D2:08:FF:EC:7D:53:FB:A0:DA:25
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66393a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:f9::/48
Signature Algorithm: sha256WithRSAEncryption
95:82:43:c6:d2:c7:11:ad:75:87:7b:cc:d6:43:a0:15:a9:81:
10:d1:ee:3a:2a:5b:d9:51:3f:5a:f4:f2:93:6d:d1:8f:f3:81:
b8:a9:e5:82:0e:b6:54:e6:9c:56:33:61:0c:60:80:c8:7d:7b:
4a:e5:c8:0f:c5:9f:11:2a:c4:3e:4a:04:d2:11:f0:71:80:bc:
6f:08:0d:18:e8:ab:87:e8:ef:21:a8:af:4e:27:1c:69:5e:8c:
f8:41:77:9d:2c:b7:56:ba:13:2d:cf:32:9c:69:62:9c:c4:8a:
bd:94:bb:19:28:58:40:bc:f6:d0:d3:e9:84:56:01:f7:f7:b3:
93:a6:9b:c8:19:c0:f1:2b:f2:7a:b1:8a:f5:42:bd:58:b8:86:
0f:92:b0:3e:3a:36:0f:e7:6f:7f:47:4c:36:52:62:75:11:e7:
f7:0e:0c:b3:0b:19:3d:0a:7d:11:7d:c9:41:df:46:39:f2:86:
2b:57:a3:e8:c0:3b:09:34:3a:34:fa:2c:92:cb:3c:a9:bc:4a:
9c:84:06:33:c5:a3:32:9b:a5:1c:5b:35:e7:aa:1d:b4:5b:6f:
75:06:c1:cb:e4:d9:a1:b9:58:61:f2:66:65:8e:a0:56:6e:1d:
4a:09:43:78:6b:5c:41:ef:1b:ee:8b:47:56:0f:e7:65:fa:c4:
c7:6f:cb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org