Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a31343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: xdAGomWGQWtkNv0BYlv/bdAshxIF7wRrAxtKJ1Q/Alg=
Subject key identifier: 24:D7:F9:EE:18:00:A8:70:79:86:89:3B:83:B5:35:B9:5E:92:01:16
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 38EECC69A0D238F848687353E135F8974C3E827C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:06 +0000
ROA not before: Mon 26 Sep 2022 06:55:06 +0000
ROA not after: Mon 25 Sep 2023 07:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:14::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ee:cc:69:a0:d2:38:f8:48:68:73:53:e1:35:f8:97:4c:3e:82:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:06 2022 GMT
Not After : Sep 25 07:00:06 2023 GMT
Subject: CN=24D7F9EE1800A8707986893B83B535B95E920116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:ad:fb:09:cf:0d:35:5a:0b:38:70:65:9e:
fd:2c:70:8b:a1:eb:b5:df:cd:5a:9e:9f:5e:29:3c:
62:6b:46:bf:dc:9a:1e:c8:32:0d:a8:08:14:57:1c:
3c:0f:09:c2:10:8d:a6:a8:67:ad:4c:ee:66:aa:a2:
09:a7:2a:d2:ae:8f:52:4a:51:37:be:b0:1f:6b:40:
e8:31:ab:e6:96:e8:16:7e:26:d3:61:ca:66:06:42:
7a:05:21:e7:f4:fd:e9:c5:52:a5:a9:5a:c5:a4:60:
23:ee:67:84:51:e1:3e:9c:a2:57:da:83:f3:7f:c5:
a8:1d:cf:36:9f:ea:fe:76:76:a3:8b:c1:19:c4:19:
ae:2e:ea:c2:71:56:36:b0:cb:50:9e:27:a1:de:71:
b5:97:c1:4d:db:35:6e:20:5d:02:f2:4c:4c:61:a4:
ed:81:5f:e2:03:54:96:7b:79:bb:ab:da:81:ab:e3:
0d:83:1d:8f:1e:bc:2f:7b:bc:8a:fe:68:cf:a9:d4:
5e:22:2f:c1:26:c9:fe:9a:a5:6a:5d:4d:2b:19:40:
d7:20:4c:d8:70:b3:6d:2f:76:c1:8a:cd:f8:c8:13:
4e:1a:d5:30:4d:e0:ba:6d:e3:de:6e:0f:90:d9:50:
c2:11:f7:89:3d:48:16:06:ee:9f:a3:2c:de:76:de:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:F9:EE:18:00:A8:70:79:86:89:3B:83:B5:35:B9:5E:92:01:16
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:14::/48
Signature Algorithm: sha256WithRSAEncryption
0c:fa:d8:61:ea:e3:54:dd:d9:d0:b0:67:ff:0b:73:6e:6e:0f:
9e:2b:e3:7e:35:0e:e2:f5:3d:35:69:d8:6e:ee:90:51:a3:f2:
4f:ac:0f:7b:83:12:33:ab:2d:a6:05:ea:0c:77:f8:b0:85:ed:
df:96:b4:27:91:c7:3c:71:ea:c2:17:12:21:a9:c4:0b:ed:4b:
59:28:7e:44:ef:00:da:f4:ce:b7:24:34:72:08:ca:ea:ac:b7:
94:aa:ed:4e:bf:04:2b:92:ab:ae:6c:61:aa:47:df:8e:a7:5f:
66:75:6b:f2:00:33:8c:44:df:7c:f1:5a:71:14:1e:7a:82:40:
a2:58:15:cc:20:8e:d9:90:67:10:1a:5e:7e:59:ad:cc:a8:42:
54:0a:ad:a6:78:cf:ed:e2:3d:04:4a:99:9e:20:37:be:e4:4f:
6a:43:b4:f3:ea:4c:d1:69:df:c4:09:77:77:a0:f8:c3:af:ef:
85:f2:cd:64:ff:cc:7b:3a:65:68:ca:1a:31:d9:71:40:02:f4:
8e:42:c3:a1:d8:61:3d:31:c1:de:66:ce:10:ca:18:06:8e:63:
c2:1e:24:03:0c:e8:86:27:7b:9a:75:0a:43:ef:27:cd:ea:78:
f7:ed:db:b9:40:0f:6a:15:aa:94:c3:d9:8f:21:23:6d:21:c7:
f7:f5:80:a9
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUOO7MaaDSOPhIaHNT4TX4l0w+gnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNjU1MDZaFw0yMzA5MjUwNzAwMDZaMDMxMTAvBgNV
BAMTKDI0RDdGOUVFMTgwMEE4NzA3OTg2ODkzQjgzQjUzNUI5NUU5MjAxMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYVa37Cc8NNVoLOHBlnv0scIuh
67XfzVqen14pPGJrRr/cmh7IMg2oCBRXHDwPCcIQjaaoZ61M7maqogmnKtKuj1JK
UTe+sB9rQOgxq+aW6BZ+JtNhymYGQnoFIef0/enFUqWpWsWkYCPuZ4RR4T6colfa
g/N/xagdzzaf6v52dqOLwRnEGa4u6sJxVjawy1CeJ6HecbWXwU3bNW4gXQLyTExh
pO2BX+IDVJZ7ebur2oGr4w2DHY8evC97vIr+aM+p1F4iL8Emyf6apWpdTSsZQNcg
TNhws20vdsGKzfjIE04a1TBN4Lpt495uD5DZUMIR94k9SBYG7p+jLN523iPDAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUJNf57hgAqHB5hok7g7U1uV6SARYwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzNDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAABQw
DQYJKoZIhvcNAQELBQADggEBAAz62GHq41Td2dCwZ/8Lc25uD54r4341DuL1PTVp
2G7ukFGj8k+sD3uDEjOrLaYF6gx3+LCF7d+WtCeRxzxx6sIXEiGpxAvtS1kofkTv
ANr0zrckNHIIyuqst5Sq7U6/BCuSq65sYapH346nX2Z1a/IAM4xE33zxWnEUHnqC
QKJYFcwgjtmQZxAaXn5ZrcyoQlQKraZ4z+3iPQRKmZ4gN77kT2pDtPPqTNFp38QJ
d3eg+MOv74XyzWT/zHs6ZWjKGjHZcUAC9I5Cw6HYYT0xwd5mzhDKGAaOY8IeJAMM
6IYne5p1CkPvJ83qePft27lAD2oVqpTD2Y8hI20hx/f1gKk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org