Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3135623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: YpSdAqzKiyAECWmfd01lB6gybWqLnqb5KZiYSWzIMTs=
Subject key identifier: AE:17:A1:19:96:F7:5E:9B:7F:86:A2:0B:0B:8F:61:17:B0:93:AB:7A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 72833343AB89B70423C64E5C51BE682B1F50AF42
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:17 +0000
ROA not before: Mon 26 Sep 2022 07:56:17 +0000
ROA not after: Mon 25 Sep 2023 08:01:17 +0000
asID: 59282
IP address blocks: 2400:d680:15b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:83:33:43:ab:89:b7:04:23:c6:4e:5c:51:be:68:2b:1f:50:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:17 2022 GMT
Not After : Sep 25 08:01:17 2023 GMT
Subject: CN=AE17A11996F75E9B7F86A20B0B8F6117B093AB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:54:16:e4:5d:27:79:09:18:32:e7:8d:d9:
81:82:6c:80:1d:67:11:fa:30:f6:66:f8:6b:31:af:
90:87:86:4c:de:9e:57:19:87:3a:21:26:31:f9:d6:
ea:b7:9e:3f:c1:d1:a9:7c:bb:b9:e5:5f:a2:7c:69:
a2:72:50:07:9c:65:59:2f:43:d7:0b:a9:c1:ce:7f:
02:6b:c4:9f:98:36:34:2c:2f:bf:9c:18:0f:d4:18:
64:b0:81:d8:b2:6f:5a:58:d1:ea:a5:0c:d5:d5:ae:
28:50:d4:4b:0b:76:63:45:b3:e1:e4:60:d0:d4:40:
cf:74:04:3a:bc:c8:b7:00:ce:a9:99:3d:2e:4b:71:
96:fb:50:8b:73:f4:92:81:06:d7:b6:fe:dd:1c:81:
52:47:11:3b:56:c3:97:5b:4b:4b:45:56:30:3d:3e:
80:ec:4e:46:e1:8d:49:55:48:22:e1:d6:d4:ac:1d:
58:0e:f2:e3:ba:09:3d:de:9b:b7:81:b8:4f:b1:83:
d0:3e:b7:5d:b3:5e:ee:ea:d4:dd:e4:3b:b2:c9:1b:
40:11:83:84:9c:17:79:29:f7:e8:e4:69:89:11:f1:
d5:09:e5:ec:0d:8d:9c:83:30:31:bb:b8:d2:0a:8e:
3a:7f:9e:db:c6:7c:b7:83:f2:93:27:a9:5f:36:d6:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:17:A1:19:96:F7:5E:9B:7F:86:A2:0B:0B:8F:61:17:B0:93:AB:7A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:15b::/48
Signature Algorithm: sha256WithRSAEncryption
9d:4d:96:04:1e:b4:3e:62:fd:b2:1b:74:9a:ca:c2:e2:7a:7d:
74:9d:e5:59:40:d4:40:9b:20:3c:75:49:d1:fc:61:c7:ad:37:
3d:e3:32:22:c6:40:cf:fe:24:cb:f3:05:b5:e4:22:db:41:f0:
7d:85:51:b3:27:0f:2e:17:fb:d3:4c:d8:6b:ba:3f:77:92:9a:
e6:da:c3:0b:e9:76:e1:72:d9:86:17:90:4c:0d:b2:45:e8:d3:
a7:58:34:a1:5b:bb:3a:28:b0:a4:a2:93:8b:68:bd:bf:d0:f5:
56:bb:04:04:75:c2:11:45:17:4e:5e:49:29:15:2a:74:3b:9b:
c6:9b:9a:92:b9:e6:c2:1a:b9:52:af:78:3a:10:36:74:94:38:
66:a9:7d:64:7d:c4:43:b1:b1:df:65:24:ea:1d:ec:53:65:06:
64:5b:7e:e8:cb:31:4f:cd:92:75:da:2d:04:9d:60:60:2f:ac:
50:29:a2:aa:16:f4:9b:7d:06:ff:b2:f8:13:50:41:d8:8a:b4:
9e:97:be:8b:2e:fb:f9:a5:1d:e1:6d:30:1d:fb:f9:ca:f1:56:
08:fb:03:63:57:ea:ab:84:95:4d:58:7e:98:76:06:96:d1:62:
01:c8:18:dd:85:fe:55:4b:d5:7d:02:12:7f:e3:96:c0:cb:f7:
9b:b6:6a:ac
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUcoMzQ6uJtwQjxk5cUb5oKx9Qr0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2MTdaFw0yMzA5MjUwODAxMTdaMDMxMTAvBgNV
BAMTKEFFMTdBMTE5OTZGNzVFOUI3Rjg2QTIwQjBCOEY2MTE3QjA5M0FCN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIp1QW5F0neQkYMueN2YGCbIAd
ZxH6MPZm+Gsxr5CHhkzenlcZhzohJjH51uq3nj/B0al8u7nlX6J8aaJyUAecZVkv
Q9cLqcHOfwJrxJ+YNjQsL7+cGA/UGGSwgdiyb1pY0eqlDNXVrihQ1EsLdmNFs+Hk
YNDUQM90BDq8yLcAzqmZPS5LcZb7UItz9JKBBte2/t0cgVJHETtWw5dbS0tFVjA9
PoDsTkbhjUlVSCLh1tSsHVgO8uO6CT3em7eBuE+xg9A+t12zXu7q1N3kO7LJG0AR
g4ScF3kp9+jkaYkR8dUJ5ewNjZyDMDG7uNIKjjp/ntvGfLeD8pMnqV821ghHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUrhehGZb3Xpt/hqILC49hF7CTq3owHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzNTYyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
WzANBgkqhkiG9w0BAQsFAAOCAQEAnU2WBB60PmL9sht0msrC4np9dJ3lWUDUQJsg
PHVJ0fxhx603PeMyIsZAz/4ky/MFteQi20HwfYVRsycPLhf700zYa7o/d5Ka5trD
C+l24XLZhheQTA2yRejTp1g0oVu7OiiwpKKTi2i9v9D1VrsEBHXCEUUXTl5JKRUq
dDubxpuakrnmwhq5Uq94OhA2dJQ4Zql9ZH3EQ7Gx32Uk6h3sU2UGZFt+6MsxT82S
ddotBJ1gYC+sUCmiqhb0m30G/7L4E1BB2Iq0npe+iy77+aUd4W0wHfv5yvFWCPsD
Y1fqq4SVTVh+mHYGltFiAcgY3YX+VUvVfQISf+OWwMv3m7ZqrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org