Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: OKyP3lQI8nNi4xNpK/NwHk7mY8iF2zt5tSWBxzIjja4=
Subject key identifier: A5:B9:00:80:53:CA:2C:EB:7F:40:7F:67:75:E5:B3:D4:26:7D:DA:CA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 260583A269659E600E8FE9AD86153D02E9F3B705
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:01 +0000
ROA not before: Mon 26 Sep 2022 06:55:01 +0000
ROA not after: Mon 25 Sep 2023 07:00:01 +0000
asID: 59282
IP address blocks: 2400:d680:f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:05:83:a2:69:65:9e:60:0e:8f:e9:ad:86:15:3d:02:e9:f3:b7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:01 2022 GMT
Not After : Sep 25 07:00:01 2023 GMT
Subject: CN=A5B9008053CA2CEB7F407F6775E5B3D4267DDACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:8e:c2:76:9a:74:51:76:e6:e3:94:d7:06:
10:30:b6:87:08:d3:4a:d0:ef:84:81:93:e4:9b:c0:
05:17:5c:9e:d2:0f:2d:af:2d:9b:2a:10:8e:e3:41:
85:fa:25:9f:15:9c:8b:f2:45:6b:c8:a3:cd:92:24:
72:4c:b4:c3:4f:80:1d:52:62:77:62:ff:fe:76:56:
a3:af:7f:6b:a2:b2:b2:5f:f1:e8:9a:08:4a:bb:1f:
9b:f9:a7:41:e1:cf:05:13:be:6e:f5:a2:ab:5a:f4:
5a:16:87:07:a2:e4:84:78:ae:18:7f:dc:6b:80:30:
fa:22:57:7a:30:0b:57:5b:14:c3:c5:fd:aa:60:fc:
d7:3a:95:85:78:46:1a:07:40:e1:0b:d2:11:1c:fd:
9a:89:6c:a9:13:bf:ea:93:99:02:72:c8:f4:56:bd:
15:06:81:94:8a:d9:cf:ba:db:40:42:b1:b1:52:32:
80:8d:40:92:e3:d1:6c:02:3b:df:bc:7b:47:05:38:
11:cb:87:19:76:7c:0e:45:f0:6e:b3:e9:29:7d:3c:
1b:5d:a5:c9:bc:7b:5f:fd:7c:5e:e2:fd:f7:80:33:
9e:6f:e4:a2:7b:e7:2e:85:6f:3a:57:89:23:94:15:
70:a3:d8:e4:de:c8:ff:05:c0:aa:47:52:92:f8:c8:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B9:00:80:53:CA:2C:EB:7F:40:7F:67:75:E5:B3:D4:26:7D:DA:CA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:f::/48
Signature Algorithm: sha256WithRSAEncryption
17:59:b7:cd:a0:64:d3:80:2b:9c:3a:fe:0b:61:e7:04:91:69:
71:99:68:e0:c2:d4:ce:96:a3:8b:30:40:a0:4c:60:46:70:5d:
a2:17:cf:fa:f5:10:b1:9a:4c:4a:91:d1:c4:37:fb:76:6e:4b:
62:df:95:69:ed:23:71:0f:cc:42:27:c9:7a:8a:fe:3f:26:e9:
c1:29:0c:06:ef:89:1b:dc:39:d4:82:d5:82:a3:92:be:66:14:
23:f3:3b:61:bf:4d:2d:d7:8f:54:19:4f:ad:b0:87:77:a6:eb:
ba:8e:b2:ee:73:e1:03:78:46:26:2a:35:5d:8c:9d:4c:cc:3c:
8f:fc:2b:d8:7a:c1:d0:4c:76:ad:d6:09:21:e1:7e:19:c1:ca:
6c:d3:01:87:7e:e1:32:4e:3a:cc:2d:52:41:ad:ed:b8:b9:10:
e5:20:29:ad:6e:1c:35:f2:e4:13:a8:2a:61:07:b9:a4:59:33:
3c:14:15:d8:41:31:68:a1:95:76:33:ea:06:c8:c7:e8:d0:42:
d3:7c:0a:c4:b3:4c:29:57:a1:c3:79:4d:ec:d4:3b:c7:56:07:
c8:27:f2:72:4c:2c:d1:76:ea:b8:c3:e9:ce:d4:60:56:01:cb:
68:62:7c:fe:0f:57:59:8b:53:42:82:cc:fd:04:34:01:c9:a6:
1c:92:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org