Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3131383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: DGZ2g6VCiPpHsiFYhJIffMEUvjVlAwefSmNxXwsnoro=
Subject key identifier: A9:7D:0C:2F:11:6E:92:D2:ED:17:18:55:70:35:CA:59:AA:A7:58:45
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 33467E4A25395DB2B72CB1604BCF9499E7BA0F9D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:36 +0000
ROA not before: Mon 26 Sep 2022 07:56:36 +0000
ROA not after: Mon 25 Sep 2023 08:01:36 +0000
asID: 59282
IP address blocks: 2400:d680:118::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:46:7e:4a:25:39:5d:b2:b7:2c:b1:60:4b:cf:94:99:e7:ba:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:36 2022 GMT
Not After : Sep 25 08:01:36 2023 GMT
Subject: CN=A97D0C2F116E92D2ED1718557035CA59AAA75845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:7a:f3:3f:d2:82:51:f7:46:d2:4b:03:fe:
82:c7:c1:53:2a:4b:02:7b:4e:39:98:c5:b1:85:de:
2c:bb:85:3d:55:02:dc:dc:a1:1c:ad:6f:af:3e:a9:
9c:f3:f1:cd:48:93:33:af:1e:29:20:cc:23:9d:c8:
2a:14:7c:b0:f6:c7:b9:83:cf:7c:f3:12:12:ae:6b:
ae:ab:e0:65:2c:7c:39:70:05:3f:70:b8:74:73:8f:
04:62:a1:07:59:1b:6e:07:9d:56:0d:82:4b:24:59:
8a:43:68:a3:ce:e9:86:fb:d0:24:bb:fa:8d:42:17:
1d:31:b3:a4:7e:aa:82:c2:94:13:79:14:d8:78:91:
aa:e7:cf:da:34:de:65:7f:5b:d1:db:d8:e3:eb:d7:
b4:bd:86:bc:f9:61:95:f4:3b:b4:4d:42:46:7b:ba:
00:b3:68:29:90:11:37:13:da:2b:d8:3e:80:df:a2:
84:ae:48:6b:f4:53:20:99:9a:8f:84:1e:82:dd:56:
5e:85:cb:7f:88:ce:df:e1:3a:b0:65:da:dd:dc:e8:
c3:79:fa:11:6c:1d:81:37:cf:99:70:ce:7a:48:43:
8f:88:b5:76:94:8f:40:3c:74:f1:ca:23:0f:3b:21:
04:84:1c:8e:34:60:d8:ed:69:57:12:2e:46:3b:ae:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7D:0C:2F:11:6E:92:D2:ED:17:18:55:70:35:CA:59:AA:A7:58:45
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3131383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:118::/48
Signature Algorithm: sha256WithRSAEncryption
be:43:e2:0b:58:bd:38:9e:25:62:e7:91:43:97:34:a0:35:74:
51:22:e5:20:26:81:6b:c7:ca:d3:46:00:c9:c2:3c:26:12:44:
ab:60:4c:8c:d9:91:1e:3b:a4:4d:7d:19:d0:cb:41:44:59:d0:
1e:44:da:ff:17:8e:ca:43:bf:f1:8f:fa:32:95:cc:e9:d8:d6:
22:a7:a9:23:a9:c7:0d:6c:e4:5a:d7:3c:c6:a9:40:d2:ec:e8:
84:d2:5a:b1:b0:2d:82:5f:ba:a6:c2:29:e1:a4:1e:fb:2f:a0:
27:e6:f1:b3:33:35:63:34:e2:9b:d2:21:bb:87:83:ff:29:51:
b3:d9:9d:f8:78:e3:df:b1:6e:05:4e:2e:df:41:72:0d:ae:1d:
c4:05:fa:aa:31:f7:c6:8f:02:89:81:77:c3:82:47:9a:a8:16:
40:ed:4b:d6:28:59:dc:bd:e4:eb:9d:db:f7:d0:87:85:7b:1b:
b4:77:bd:b9:4f:92:8e:ab:01:fe:19:6a:c6:46:4f:b9:a7:65:
aa:aa:ae:ae:3c:50:7d:9d:bb:83:eb:e2:18:dc:fb:e2:2f:70:
a3:b2:7f:94:92:55:38:6e:0c:45:3b:98:7d:ab:81:23:6d:27:
47:5f:98:77:b6:f4:a8:6b:67:4a:a4:09:e5:72:9e:7a:fe:16:
c2:f1:62:22
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUM0Z+SiU5XbK3LLFgS8+Umee6D50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2MzZaFw0yMzA5MjUwODAxMzZaMDMxMTAvBgNV
BAMTKEE5N0QwQzJGMTE2RTkyRDJFRDE3MTg1NTcwMzVDQTU5QUFBNzU4NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4s3rzP9KCUfdG0ksD/oLHwVMq
SwJ7TjmYxbGF3iy7hT1VAtzcoRytb68+qZzz8c1IkzOvHikgzCOdyCoUfLD2x7mD
z3zzEhKua66r4GUsfDlwBT9wuHRzjwRioQdZG24HnVYNgkskWYpDaKPO6Yb70CS7
+o1CFx0xs6R+qoLClBN5FNh4karnz9o03mV/W9Hb2OPr17S9hrz5YZX0O7RNQkZ7
ugCzaCmQETcT2ivYPoDfooSuSGv0UyCZmo+EHoLdVl6Fy3+Izt/hOrBl2t3c6MN5
+hFsHYE3z5lwznpIQ4+ItXaUj0A8dPHKIw87IQSEHI40YNjtaVcSLkY7roEDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUqX0MLxFuktLtFxhVcDXKWaqnWEUwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzMTM4M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
GDANBgkqhkiG9w0BAQsFAAOCAQEAvkPiC1i9OJ4lYueRQ5c0oDV0USLlICaBa8fK
00YAycI8JhJEq2BMjNmRHjukTX0Z0MtBRFnQHkTa/xeOykO/8Y/6MpXM6djWIqep
I6nHDWzkWtc8xqlA0uzohNJasbAtgl+6psIp4aQe+y+gJ+bxszM1YzTim9Ihu4eD
/ylRs9md+Hjj37FuBU4u30FyDa4dxAX6qjH3xo8CiYF3w4JHmqgWQO1L1ihZ3L3k
653b99CHhXsbtHe9uU+SjqsB/hlqxkZPuadlqqqurjxQfZ27g+viGNz74i9wo7J/
lJJVOG4MRTuYfauBI20nR1+Yd7b0qGtnSqQJ5XKeev4WwvFiIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org