Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33352d3335203d3e20313430343233.roa
File: 323430363a323063303a3a2f33352d3335203d3e20313430343233.roa (raw, json)
Hash identifier: Dx9hRM0oks3Lbhg1Y9/WKuwSA2SQAuVY6mySYKFqhWM=
Subject key identifier: 6D:A4:32:C6:76:39:E8:24:0F:E2:CD:26:A7:5C:7B:83:41:08:79:6C
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 59C6C59AF044525B6E90BBE55DB010209CD27AE5
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33352d3335203d3e20313430343233.roa
Signing time: Thu 08 Sep 2022 04:27:39 +0000
ROA not before: Thu 08 Sep 2022 04:22:39 +0000
ROA not after: Thu 07 Sep 2023 04:27:39 +0000
asID: 140423
IP address blocks: 2406:20c0::/35 maxlen: 35
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c6:c5:9a:f0:44:52:5b:6e:90:bb:e5:5d:b0:10:20:9c:d2:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Sep 8 04:22:39 2022 GMT
Not After : Sep 7 04:27:39 2023 GMT
Subject: CN=6DA432C67639E8240FE2CD26A75C7B834108796C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:db:bc:85:82:bd:ca:93:c0:8a:d4:7c:d6:
8b:02:5a:38:d2:40:91:d2:25:6f:98:a3:a9:6a:52:
d0:92:db:fe:f5:fd:95:4b:e1:19:ad:f1:94:26:e0:
93:6b:80:e9:96:4d:c2:fc:35:88:af:a7:dd:63:9a:
23:fe:6c:de:36:a6:e4:5b:46:48:bc:cc:1f:d4:00:
92:2a:08:38:98:ec:94:70:d1:39:a4:c1:7b:a4:32:
49:eb:09:36:2c:e3:3f:01:67:ca:93:96:85:4e:21:
0b:75:f6:31:0d:bd:2c:05:90:b1:ac:76:d6:1c:70:
83:de:21:1d:7c:c3:ce:40:16:ec:8b:c2:4b:ef:af:
56:40:4d:6a:03:68:9e:53:73:75:d9:50:33:48:9f:
e2:c3:b1:3d:fc:07:d9:a8:7b:df:e1:71:fd:d5:f6:
f1:cb:be:bc:2b:6e:c2:b5:ba:36:e7:49:8e:c5:29:
ba:54:74:08:6e:b7:eb:7b:c6:3b:cd:fd:f9:f1:26:
05:c6:99:ff:b4:f1:d2:a5:f9:d0:97:08:bc:ce:1a:
41:35:05:a5:f5:58:c6:38:90:c4:47:73:d7:cf:f7:
6b:c9:c9:51:ba:b8:1c:42:83:d5:99:b5:14:cf:89:
7e:d0:b7:2d:d9:57:84:3d:d7:c8:6b:09:05:0d:05:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A4:32:C6:76:39:E8:24:0F:E2:CD:26:A7:5C:7B:83:41:08:79:6C
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33352d3335203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0::/35
Signature Algorithm: sha256WithRSAEncryption
58:7d:a2:7a:35:bc:80:1b:bc:27:48:e5:5a:5d:31:02:48:3d:
73:8d:8b:f3:5b:fc:b4:a8:53:97:ef:b8:7c:15:7f:a9:e6:d1:
74:82:b8:c3:97:2a:36:9a:bf:c1:b9:d5:f1:f0:65:c7:64:37:
92:4e:ce:d1:be:cf:a4:a8:c8:17:63:bc:87:6c:94:73:af:f5:
ce:ef:ca:e3:30:3e:15:a9:8a:2a:de:89:24:85:8c:d4:3f:f4:
95:e2:48:b6:fa:50:28:79:47:e5:a4:01:e2:2a:23:db:a2:ed:
e0:9b:1d:11:9d:7f:8e:68:57:ac:56:8b:c1:bf:20:ed:ea:e1:
6f:94:60:4c:ff:ec:98:5f:9b:c9:c3:fc:da:e8:ab:da:35:33:
46:e0:ce:24:d1:f5:11:21:bc:8e:ae:dd:36:9e:b8:c7:b8:35:
64:b3:69:46:8a:18:88:b9:d5:83:d3:a4:97:d7:bf:c6:b9:62:
35:22:e5:da:6f:37:89:c2:15:65:c6:e8:12:56:fa:c5:79:a6:
2b:9e:94:3a:f6:c4:42:b7:c8:4e:e5:ad:d1:47:af:4a:01:38:
f1:e3:a8:a5:9b:90:f6:6b:4c:6c:51:97:be:09:d6:56:3c:c0:
3d:5e:80:cb:d5:88:76:88:88:94:fb:61:5d:66:31:a4:1e:4e:
7d:20:18:69
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWcbFmvBEUltukLvlXbAQIJzSeuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz
NTJDQjg3NDAeFw0yMjA5MDgwNDIyMzlaFw0yMzA5MDcwNDI3MzlaMDMxMTAvBgNV
BAMTKDZEQTQzMkM2NzYzOUU4MjQwRkUyQ0QyNkE3NUM3QjgzNDEwODc5NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuNu8hYK9ypPAitR81osCWjjS
QJHSJW+Yo6lqUtCS2/71/ZVL4Rmt8ZQm4JNrgOmWTcL8NYivp91jmiP+bN42puRb
Rki8zB/UAJIqCDiY7JRw0TmkwXukMknrCTYs4z8BZ8qTloVOIQt19jENvSwFkLGs
dtYccIPeIR18w85AFuyLwkvvr1ZATWoDaJ5Tc3XZUDNIn+LDsT38B9moe9/hcf3V
9vHLvrwrbsK1ujbnSY7FKbpUdAhut+t7xjvN/fnxJgXGmf+08dKl+dCXCLzOGkE1
BaX1WMY4kMRHc9fP92vJyVG6uBxCg9WZtRTPiX7Qty3ZV4Q918hrCQUNBVNVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbaQyxnY56CQP4s0mp1x7g0EIeWwwHwYDVR0j
BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF
MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD
Qjg3NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhM2EyZjMzMzUy
ZDMzMzUyMDNkM2UyMDMxMzQzMDM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBSQGIMAAMA0GCSqG
SIb3DQEBCwUAA4IBAQBYfaJ6NbyAG7wnSOVaXTECSD1zjYvzW/y0qFOX77h8FX+p
5tF0grjDlyo2mr/BudXx8GXHZDeSTs7Rvs+kqMgXY7yHbJRzr/XO78rjMD4VqYoq
3okkhYzUP/SV4ki2+lAoeUflpAHiKiPbou3gmx0RnX+OaFesVovBvyDt6uFvlGBM
/+yYX5vJw/za6KvaNTNG4M4k0fURIbyOrt02nrjHuDVks2lGihiIudWD06SX17/G
uWI1IuXabzeJwhVlxugSVvrFeaYrnpQ69sRCt8hO5a3RR69KATjx46ilm5D2a0xs
UZe+CdZWPMA9XoDL1Yh2iIiU+2FdZjGkHk59IBhp
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org