Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3135363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: fqcs8x7C3E4sgqMHoULxD0uiTHA9rMXptZ6o21NIS2s=
Subject key identifier: FB:80:8E:A9:DD:71:5A:4A:48:A1:50:37:9D:9B:07:EE:B7:31:0D:07
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 25A425BE11A7322CD77378644581E453E1A01643
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:45 +0000
ROA not before: Mon 26 Sep 2022 07:56:45 +0000
ROA not after: Mon 25 Sep 2023 08:01:45 +0000
asID: 59282
IP address blocks: 2400:d680:156::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:a4:25:be:11:a7:32:2c:d7:73:78:64:45:81:e4:53:e1:a0:16:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:45 2022 GMT
Not After : Sep 25 08:01:45 2023 GMT
Subject: CN=FB808EA9DD715A4A48A150379D9B07EEB7310D07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:b6:ea:cd:8a:c3:fd:0e:22:17:f9:de:1b:
2c:a5:1b:de:06:60:05:e1:8a:d6:09:08:0f:af:d5:
80:82:6d:24:cb:08:70:66:f8:78:41:34:ba:25:2d:
c0:da:05:40:7f:01:70:18:24:b9:2c:c3:ad:98:b2:
3b:11:21:8b:76:29:c7:93:60:cc:75:db:04:04:c4:
8f:83:f2:ac:93:bf:9d:c0:f5:ef:8e:d7:e5:65:21:
82:84:e6:b6:fd:e6:ea:e0:ce:c1:eb:e3:2e:54:73:
d2:6a:21:f6:79:d3:63:3c:9b:e5:cb:22:f7:1b:ba:
cb:fc:36:15:6a:a1:25:41:7f:6a:88:59:cd:65:da:
d7:46:73:77:93:da:bc:75:11:8a:5f:cb:82:04:2a:
ee:b7:f3:b3:28:ec:39:1e:a4:dd:05:e9:11:0f:d9:
1b:db:5f:7c:0d:e2:2f:5d:36:85:54:1e:6d:ba:bc:
34:de:3f:3d:df:26:21:ac:e5:39:89:96:2c:84:0e:
7d:da:fe:09:bd:e8:20:8e:f4:a6:5e:8b:c6:cc:01:
b7:ea:70:bf:24:30:3f:0f:b2:16:fc:f9:4c:b4:fb:
a2:63:0f:fa:10:64:1e:19:db:6b:6c:71:f8:fc:30:
31:de:b2:c9:8f:de:fd:a4:ed:ce:b6:3d:72:ec:13:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:80:8E:A9:DD:71:5A:4A:48:A1:50:37:9D:9B:07:EE:B7:31:0D:07
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:156::/48
Signature Algorithm: sha256WithRSAEncryption
29:18:23:f0:f7:3a:1c:ec:ab:fc:69:f2:7b:11:05:1a:a2:37:
9c:aa:7f:3b:36:c8:a9:6a:bd:56:88:a5:ed:d3:08:16:76:49:
e7:f4:a8:f8:f7:4a:c7:60:9a:10:c0:e5:88:29:b4:0c:38:6d:
34:2c:2e:79:70:26:ab:4c:fd:22:3b:ec:f3:90:98:22:16:63:
e5:0c:a8:70:24:d1:1f:c8:a8:9f:96:b4:2b:22:69:54:2d:cf:
e1:a6:e1:0c:ea:f5:c4:86:1d:2a:50:87:cf:b8:d8:c5:71:9d:
43:34:87:8c:be:e4:11:c2:08:5e:98:60:8a:d1:73:ef:12:bc:
30:a4:4d:d4:9a:06:22:d5:3c:58:96:2e:bd:83:21:5e:2c:89:
d6:16:5d:c4:6f:29:85:61:2e:f1:4b:5e:66:c0:a8:3f:33:5b:
d8:90:c0:de:0b:e8:f4:68:da:06:2b:81:52:6a:4b:93:cd:9a:
2c:dc:a4:c5:55:fe:04:68:1d:c3:36:1a:ed:7a:f4:7d:98:90:
6d:49:c9:2e:bf:57:76:e5:49:86:8d:2c:5c:4a:61:7b:5a:a3:
d7:a8:58:3d:95:17:b0:20:38:65:6d:fb:ac:d0:f5:20:ad:31:
49:89:42:eb:a8:d9:45:87:10:43:ff:ab:4b:79:f4:81:fa:05:
cc:51:bc:4e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJaQlvhGnMizXc3hkRYHkU+GgFkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2NDVaFw0yMzA5MjUwODAxNDVaMDMxMTAvBgNV
BAMTKEZCODA4RUE5REQ3MTVBNEE0OEExNTAzNzlEOUIwN0VFQjczMTBEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo17bqzYrD/Q4iF/neGyylG94G
YAXhitYJCA+v1YCCbSTLCHBm+HhBNLolLcDaBUB/AXAYJLksw62YsjsRIYt2KceT
YMx12wQExI+D8qyTv53A9e+O1+VlIYKE5rb95urgzsHr4y5Uc9JqIfZ502M8m+XL
Ivcbusv8NhVqoSVBf2qIWc1l2tdGc3eT2rx1EYpfy4IEKu6387Mo7DkepN0F6REP
2RvbX3wN4i9dNoVUHm26vDTePz3fJiGs5TmJliyEDn3a/gm96CCO9KZei8bMAbfq
cL8kMD8Pshb8+Uy0+6JjD/oQZB4Z22tscfj8MDHessmP3v2k7c62PXLsE4nbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+4COqd1xWkpIoVA3nZsH7rcxDQcwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzNTM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
VjANBgkqhkiG9w0BAQsFAAOCAQEAKRgj8Pc6HOyr/GnyexEFGqI3nKp/OzbIqWq9
Voil7dMIFnZJ5/So+PdKx2CaEMDliCm0DDhtNCwueXAmq0z9Ijvs85CYIhZj5Qyo
cCTRH8ion5a0KyJpVC3P4abhDOr1xIYdKlCHz7jYxXGdQzSHjL7kEcIIXphgitFz
7xK8MKRN1JoGItU8WJYuvYMhXiyJ1hZdxG8phWEu8UteZsCoPzNb2JDA3gvo9Gja
BiuBUmpLk82aLNykxVX+BGgdwzYa7Xr0fZiQbUnJLr9XduVJho0sXEphe1qj16hY
PZUXsCA4ZW37rND1IK0xSYlC66jZRYcQQ/+rS3n0gfoFzFG8Tg==
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:12 2025 by rpki-client