Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3133373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: NfqXGevYIQeE/YaFDg4fZ7ER7BL9jHlPJ1A60bd1Yug=
Subject key identifier: 35:41:E0:F9:65:C2:48:6C:A7:CF:5C:4F:1B:A0:9E:B7:B8:BA:4E:2B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7A50324E52F6C88A7165702D4D64C044C0FF7477
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:01 +0000
ROA not before: Mon 26 Sep 2022 07:57:01 +0000
ROA not after: Mon 25 Sep 2023 08:02:01 +0000
asID: 59282
IP address blocks: 2400:d680:137::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:50:32:4e:52:f6:c8:8a:71:65:70:2d:4d:64:c0:44:c0:ff:74:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:01 2022 GMT
Not After : Sep 25 08:02:01 2023 GMT
Subject: CN=3541E0F965C2486CA7CF5C4F1BA09EB7B8BA4E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:16:18:6b:45:d9:b4:37:62:7b:86:36:34:
20:07:22:39:7d:5d:7a:dd:9c:23:f6:25:21:6b:77:
8f:d9:33:da:5e:dc:71:7c:62:f1:b0:0c:8a:c5:84:
c2:a6:72:03:4b:50:00:d1:82:dc:e3:cd:b3:68:c1:
e6:9e:3d:8d:45:00:40:60:f6:4c:b2:b8:18:d5:f5:
64:99:e1:c7:11:d7:24:90:f1:6c:ef:1f:0f:da:e1:
fd:75:8a:79:0d:b5:24:32:5d:73:42:01:81:ec:26:
32:36:b5:fd:b5:4d:08:00:0f:e1:c6:32:03:b3:05:
da:7f:1d:ca:56:d9:4f:7e:b5:2f:f3:47:72:79:00:
86:6b:2c:b4:d4:5c:05:ae:44:16:79:0c:19:90:44:
db:a5:73:aa:43:58:5d:0c:00:49:ec:32:9e:21:2b:
7c:86:ab:2a:f3:5e:5e:11:01:f2:8f:c9:21:0c:f3:
51:49:71:f4:19:2d:fe:eb:59:84:0c:0f:c8:8b:10:
e0:51:2e:6d:4e:0c:f4:a3:0b:e3:66:f0:e5:a5:d4:
24:84:96:2e:08:d7:94:56:d9:c9:2a:4b:ac:d5:e1:
d1:ab:94:dd:6f:0e:d6:b9:9e:d6:0a:94:b8:ae:6a:
46:a3:0c:01:4a:a9:63:54:6a:de:16:c0:2d:09:d2:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:E0:F9:65:C2:48:6C:A7:CF:5C:4F:1B:A0:9E:B7:B8:BA:4E:2B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3133373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:137::/48
Signature Algorithm: sha256WithRSAEncryption
62:f5:05:03:00:4e:7e:3f:c6:7b:10:8f:af:12:f0:d2:ec:29:
a3:09:0d:27:2f:0b:ac:f0:0e:1f:73:3e:47:73:75:54:fe:fe:
2b:a4:30:a5:cf:36:a3:f4:73:b3:6c:05:7a:bf:e9:26:41:fa:
ce:be:61:45:ee:9a:4f:17:37:ef:07:72:29:04:46:84:76:b7:
5f:dd:5c:d0:a7:be:45:20:34:cb:23:2a:40:b0:ba:f4:70:0d:
79:ca:a3:17:a1:3a:a0:05:a1:0c:5f:15:1d:f7:f8:44:cc:bc:
34:c5:2b:12:bc:02:5d:e7:f7:01:1a:cc:b5:97:24:7d:05:cb:
4f:f0:99:bb:76:8e:95:27:0a:8c:77:d5:c8:99:63:df:69:d4:
b1:62:8e:1d:42:cc:3d:d4:4b:13:f2:28:42:f6:70:c2:73:9d:
7a:e8:1e:ac:fd:52:f5:97:65:50:c6:a1:66:1b:ed:67:49:aa:
29:3a:a5:c6:3f:27:26:a6:32:bd:99:a9:90:96:2d:53:25:0c:
a3:21:23:d7:80:bb:d2:f2:24:b3:3e:7a:87:ee:4b:b3:8d:34:
94:2b:2e:c5:10:05:ce:3a:9b:bf:0f:3e:3c:a2:9f:9f:19:c4:
37:b3:be:5f:74:13:2d:aa:bf:e5:f6:88:6f:01:6a:58:ad:60:
eb:ee:35:80
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUelAyTlL2yIpxZXAtTWTARMD/dHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MDFaFw0yMzA5MjUwODAyMDFaMDMxMTAvBgNV
BAMTKDM1NDFFMEY5NjVDMjQ4NkNBN0NGNUM0RjFCQTA5RUI3QjhCQTRFMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuxYYa0XZtDdie4Y2NCAHIjl9
XXrdnCP2JSFrd4/ZM9pe3HF8YvGwDIrFhMKmcgNLUADRgtzjzbNoweaePY1FAEBg
9kyyuBjV9WSZ4ccR1ySQ8WzvHw/a4f11inkNtSQyXXNCAYHsJjI2tf21TQgAD+HG
MgOzBdp/HcpW2U9+tS/zR3J5AIZrLLTUXAWuRBZ5DBmQRNulc6pDWF0MAEnsMp4h
K3yGqyrzXl4RAfKPySEM81FJcfQZLf7rWYQMD8iLEOBRLm1ODPSjC+Nm8OWl1CSE
li4I15RW2ckqS6zV4dGrlN1vDta5ntYKlLiuakajDAFKqWNUat4WwC0J0mq/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUNUHg+WXCSGynz1xPG6Cet7i6TiswHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzMzM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
NzANBgkqhkiG9w0BAQsFAAOCAQEAYvUFAwBOfj/GexCPrxLw0uwpowkNJy8LrPAO
H3M+R3N1VP7+K6Qwpc82o/Rzs2wFer/pJkH6zr5hRe6aTxc37wdyKQRGhHa3X91c
0Ke+RSA0yyMqQLC69HANecqjF6E6oAWhDF8VHff4RMy8NMUrErwCXef3ARrMtZck
fQXLT/CZu3aOlScKjHfVyJlj32nUsWKOHULMPdRLE/IoQvZwwnOdeugerP1S9Zdl
UMahZhvtZ0mqKTqlxj8nJqYyvZmpkJYtUyUMoyEj14C70vIksz56h+5Ls400lCsu
xRAFzjqbvw8+PKKfnxnEN7O+X3QTLaq/5faIbwFqWK1g6+41gA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org