Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3132343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: jLAxh9cfTzVkf+I8g7u70eiaf6hmTMGfQzsR/qFr4EE=
Subject key identifier: B8:94:7B:C5:9B:73:07:FC:45:24:D4:2F:A0:F1:61:DF:E3:6E:14:BA
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 29523F0BD06AC8A42AF6CFE134403C4F77F05E79
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:27 +0000
ROA not before: Mon 26 Sep 2022 07:56:27 +0000
ROA not after: Mon 25 Sep 2023 08:01:27 +0000
asID: 59282
IP address blocks: 2400:d680:124::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:52:3f:0b:d0:6a:c8:a4:2a:f6:cf:e1:34:40:3c:4f:77:f0:5e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:27 2022 GMT
Not After : Sep 25 08:01:27 2023 GMT
Subject: CN=B8947BC59B7307FC4524D42FA0F161DFE36E14BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:4e:0a:9b:30:fd:48:47:e7:ab:a8:4c:16:
ac:f0:05:a5:2b:21:cc:e5:cb:b5:0a:22:96:de:77:
c3:a2:7e:32:c1:75:18:46:43:bd:1e:98:76:f4:ea:
15:1c:01:fa:63:69:97:b1:5c:71:e7:ed:60:8a:d5:
3b:b5:94:3a:07:f3:6f:fb:4a:dc:34:96:45:7d:3c:
30:fb:ec:0e:f5:fd:5d:65:a9:ad:07:4d:60:54:55:
36:3c:93:a6:6d:30:48:cc:75:ed:45:de:8a:71:89:
15:d3:c0:b6:95:b8:1e:56:f4:56:c6:92:bd:bf:89:
00:10:55:aa:03:bc:49:0e:45:c2:d0:c3:28:00:1b:
c7:cf:4c:31:a4:39:5b:6d:52:15:23:e1:59:24:29:
d4:ad:20:01:e9:96:e7:b6:fe:4c:2a:84:0a:ed:c3:
47:ee:c7:84:c7:1c:d1:fc:98:07:7b:93:de:38:54:
db:ed:7c:65:b9:44:a5:f5:32:53:c3:2c:92:83:7a:
a4:e2:a2:2c:e3:e0:75:37:87:87:5d:1a:7d:c8:b9:
6e:c7:69:12:38:ab:fe:1b:4e:b9:97:66:9f:97:41:
48:f1:4b:c6:18:4d:03:3e:a5:4c:fd:18:89:af:37:
00:14:c2:6d:f5:02:1b:2b:42:ab:8e:d0:99:a0:ba:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:94:7B:C5:9B:73:07:FC:45:24:D4:2F:A0:F1:61:DF:E3:6E:14:BA
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3132343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:124::/48
Signature Algorithm: sha256WithRSAEncryption
4f:5c:7f:02:96:92:a2:8e:5b:f0:49:ce:fd:80:ca:7a:1d:60:
11:04:05:47:8a:e1:87:62:d3:b5:9f:10:90:c6:bf:7c:ff:b1:
d9:df:a9:31:a8:e6:13:4b:bd:7a:f8:e2:01:5a:cc:3c:fc:08:
8c:5a:8b:6e:93:8f:b6:60:05:1b:16:32:3b:10:b9:28:ae:4d:
f2:20:f4:8a:49:ad:cc:05:af:91:7a:74:20:2a:17:a5:d0:15:
ee:22:6f:e4:de:02:7e:66:4d:e5:40:70:7c:26:f4:c1:5b:48:
ad:8f:8b:2a:e0:e9:5f:8f:9c:e8:fc:0e:cb:2c:62:93:be:02:
7a:6e:de:51:d1:5c:2b:41:70:f2:1e:9f:d5:52:06:75:5c:fe:
79:ef:d2:57:17:03:8c:2b:f1:45:fe:fd:4b:91:fe:9e:aa:da:
2e:87:c7:80:91:62:ca:c2:09:2d:66:44:b5:e3:bc:c1:5a:05:
96:b6:35:3f:87:ec:1a:ae:df:c1:cb:4b:9f:d2:3b:d5:2d:84:
0a:ab:76:f4:c7:88:77:be:9b:6c:cd:20:0b:9d:b6:33:34:fe:
d6:5d:50:7c:ca:91:1c:c9:67:e6:cf:ea:66:f8:17:73:e9:e7:
37:30:30:32:a3:41:ec:4b:a8:56:eb:88:90:3c:68:f2:17:34:
00:88:2c:91
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUKVI/C9BqyKQq9s/hNEA8T3fwXnkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2MjdaFw0yMzA5MjUwODAxMjdaMDMxMTAvBgNV
BAMTKEI4OTQ3QkM1OUI3MzA3RkM0NTI0RDQyRkEwRjE2MURGRTM2RTE0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmhk4KmzD9SEfnq6hMFqzwBaUr
Iczly7UKIpbed8OifjLBdRhGQ70emHb06hUcAfpjaZexXHHn7WCK1Tu1lDoH82/7
Stw0lkV9PDD77A71/V1lqa0HTWBUVTY8k6ZtMEjMde1F3opxiRXTwLaVuB5W9FbG
kr2/iQAQVaoDvEkORcLQwygAG8fPTDGkOVttUhUj4VkkKdStIAHplue2/kwqhArt
w0fux4THHNH8mAd7k944VNvtfGW5RKX1MlPDLJKDeqTioizj4HU3h4ddGn3IuW7H
aRI4q/4bTrmXZp+XQUjxS8YYTQM+pUz9GImvNwAUwm31AhsrQquO0JmgusB7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUuJR7xZtzB/xFJNQvoPFh3+NuFLowHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzMjM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
JDANBgkqhkiG9w0BAQsFAAOCAQEAT1x/ApaSoo5b8EnO/YDKeh1gEQQFR4rhh2LT
tZ8QkMa/fP+x2d+pMajmE0u9evjiAVrMPPwIjFqLbpOPtmAFGxYyOxC5KK5N8iD0
ikmtzAWvkXp0ICoXpdAV7iJv5N4CfmZN5UBwfCb0wVtIrY+LKuDpX4+c6PwOyyxi
k74Cem7eUdFcK0Fw8h6f1VIGdVz+ee/SVxcDjCvxRf79S5H+nqraLofHgJFiysIJ
LWZEteO8wVoFlrY1P4fsGq7fwctLn9I71S2ECqt29MeId76bbM0gC522MzT+1l1Q
fMqRHMln5s/qZvgXc+nnNzAwMqNB7EuoVuuIkDxo8hc0AIgskQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org