Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: /oKihejEg9tpNOFrzBxPA4OYrBAs2V8aL2J4v7cHqtg=
Subject key identifier: 38:FA:C0:62:EB:93:5F:2B:21:30:7D:68:F3:06:99:E4:86:0E:44:A1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 06C27A0EDDFDD4EF6A5A2F704AF24F3BB31C193A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:26 +0000
ROA not before: Mon 26 Sep 2022 07:56:26 +0000
ROA not after: Mon 25 Sep 2023 08:01:26 +0000
asID: 59282
IP address blocks: 2400:d680:fa::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c2:7a:0e:dd:fd:d4:ef:6a:5a:2f:70:4a:f2:4f:3b:b3:1c:19:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:26 2022 GMT
Not After : Sep 25 08:01:26 2023 GMT
Subject: CN=38FAC062EB935F2B21307D68F30699E4860E44A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:95:34:6d:d4:7b:d9:91:94:23:c8:4f:49:
50:fa:ca:c6:80:6a:5e:80:ac:ed:16:de:ee:49:da:
9a:cb:7b:49:c2:59:f5:ee:31:92:10:53:fc:53:de:
c8:e4:73:c6:5c:60:41:a3:69:4a:6e:63:d3:b6:71:
ba:da:b1:0c:c1:92:d9:87:c3:79:e4:89:d8:d1:4d:
d1:86:af:77:d3:2c:d5:ea:53:55:17:37:d6:0d:56:
e1:9d:36:ce:11:93:f5:ac:81:c3:e8:bf:17:a2:fb:
1d:84:fa:da:1c:fe:76:b7:d5:fc:62:34:4f:2a:d2:
de:5f:3d:e9:ec:95:17:10:55:07:2c:07:53:cf:c6:
c6:4c:0f:e1:fd:a5:4e:7a:42:e5:cf:1a:dd:71:8d:
e8:9e:a8:d9:62:b0:72:46:b1:5c:80:9b:38:c0:bc:
a2:ad:b4:76:fc:af:b6:be:69:15:f8:2d:21:73:cc:
be:f4:42:cd:52:23:b7:a7:71:3e:f8:7d:b8:83:f4:
f1:f9:52:4e:b2:46:c4:8c:b4:c7:ae:81:69:d5:a9:
a3:89:ac:ce:5b:19:f5:32:fd:4f:fc:50:f3:09:7c:
4b:83:9f:5a:d4:5e:8b:72:7f:61:9f:ed:49:0a:7d:
4d:50:4e:aa:44:6b:b8:c8:c5:9b:73:62:72:37:1e:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:C0:62:EB:93:5F:2B:21:30:7D:68:F3:06:99:E4:86:0E:44:A1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:fa::/48
Signature Algorithm: sha256WithRSAEncryption
54:07:a9:db:fa:dc:bf:6b:7b:39:45:f8:b1:8e:7f:a4:34:cc:
6e:e0:87:00:61:87:73:3f:1f:f7:b5:f9:b7:a2:79:db:91:77:
a1:e9:b6:ce:7f:f6:79:57:34:c3:f3:69:4d:9b:da:b4:84:9f:
cc:59:07:e5:fd:04:3c:02:20:2a:b6:75:c0:77:c5:89:b0:af:
31:5a:06:ec:70:16:5c:85:94:63:d1:e2:53:0b:42:34:17:bd:
13:8e:7f:2f:91:b9:7e:2f:63:3b:56:1d:97:ab:c6:1d:23:8f:
d5:70:21:dc:ec:fc:5a:b9:56:b8:3d:16:47:c3:d5:26:c9:84:
b3:17:0e:c9:a7:81:2a:5e:e0:09:97:73:40:7c:4d:48:30:6d:
5b:80:a3:43:6e:b7:d9:e5:92:86:d0:60:3f:c2:2d:8e:d9:c2:
98:1a:08:85:f6:b1:2d:dd:bf:aa:4d:4d:a6:d7:84:e0:5f:03:
82:75:78:f0:f2:94:91:d6:91:b0:13:59:c2:81:64:a4:42:31:
ac:16:fc:8d:48:69:62:16:3f:53:06:9d:9b:a2:50:78:60:5d:
59:11:da:bf:05:3b:6a:28:b3:c6:91:ce:5d:64:bb:61:df:0c:
ca:f4:ab:6b:eb:6a:4c:a6:f7:45:26:f2:3e:db:3c:3a:07:3a:
27:1c:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org