Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3135633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 4MU0PcfqS0cOJwOa4V9nPoeYGYsTnAmnzdUe7dSfdDA=
Subject key identifier: EC:87:EE:EA:3E:7C:7E:3D:5B:14:FA:36:28:8B:DE:46:FC:6A:7E:D1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 692F2FFF05E0BC2B7CF4BDC2F2044CB7FD2EC108
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:29 +0000
ROA not before: Mon 26 Sep 2022 07:56:29 +0000
ROA not after: Mon 25 Sep 2023 08:01:29 +0000
asID: 59282
IP address blocks: 2400:d680:15c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2f:2f:ff:05:e0:bc:2b:7c:f4:bd:c2:f2:04:4c:b7:fd:2e:c1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:29 2022 GMT
Not After : Sep 25 08:01:29 2023 GMT
Subject: CN=EC87EEEA3E7C7E3D5B14FA36288BDE46FC6A7ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:e6:9a:4d:bc:60:86:83:10:a7:35:58:c8:
38:bb:5b:db:9e:c8:2e:db:00:dd:71:0d:ac:e7:2a:
75:66:cc:cf:60:88:6a:58:db:57:5f:f3:2c:cd:8b:
5d:60:51:70:3e:d4:af:0d:56:a7:10:db:25:46:65:
bf:0e:da:93:85:b9:74:20:51:d9:47:de:3f:4d:e2:
7b:ee:77:60:45:b2:60:dd:f6:c4:cc:2d:ea:9f:da:
67:04:9e:bd:97:1e:db:f7:6a:15:5c:97:62:31:6e:
b7:4f:54:52:f5:1b:d8:57:eb:f9:9f:6b:55:43:49:
2b:68:c8:37:a1:2d:5f:0e:15:a5:8e:4e:db:88:af:
39:df:6c:c1:8c:a4:18:04:6f:0a:4c:b4:6e:89:21:
3d:dd:71:bf:13:a3:e9:c4:84:aa:9d:15:24:f4:c3:
cd:23:47:27:4f:c9:91:ea:83:e0:3d:70:16:52:6e:
12:11:f2:42:35:e2:81:f0:51:39:86:b9:45:6a:e7:
49:f0:ce:be:ce:ee:c4:6a:ef:d4:1a:af:cc:a0:b2:
4b:9a:5f:55:0f:af:db:66:4d:be:52:55:9a:36:09:
ca:67:40:2e:83:0c:2a:fc:c8:cf:7c:ce:08:3c:45:
82:50:49:ab:2d:50:b5:2a:2f:ab:a5:d2:d7:39:81:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:EE:EA:3E:7C:7E:3D:5B:14:FA:36:28:8B:DE:46:FC:6A:7E:D1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3135633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:15c::/48
Signature Algorithm: sha256WithRSAEncryption
51:39:9f:f7:8d:67:a2:a9:e3:8f:5f:25:ef:22:03:2d:d2:79:
d2:ff:6d:2a:0e:1e:bb:7f:36:90:d5:41:0f:0d:c7:93:83:2c:
fc:a1:0b:cb:6e:63:57:c5:1f:a7:1c:fd:89:a9:8d:97:3d:fb:
50:ad:26:28:c2:80:e0:7e:ed:e0:f3:0e:b8:5f:cd:b2:67:14:
e7:77:36:a2:81:d9:74:05:fa:20:b1:1c:49:53:4e:5e:a2:71:
24:13:fb:b5:73:d1:08:03:6c:65:1d:4e:e7:09:fd:da:0c:cf:
bd:19:a0:a1:a4:e9:86:4b:40:46:b8:cd:26:75:31:c0:f4:da:
46:56:6f:db:36:a0:9f:ee:fd:41:53:93:fd:50:3f:c4:a7:1f:
ff:20:01:f0:3c:d6:0b:f0:77:29:b2:07:1e:e6:bb:db:d3:c6:
30:2c:c9:60:70:eb:08:67:af:a8:80:b3:e2:09:19:fa:2e:3d:
a7:ee:6e:43:ba:51:67:e5:07:0f:b5:33:55:75:b4:19:3b:2a:
2e:cb:a7:0d:72:96:92:f5:61:dd:d3:70:9f:35:ab:80:f4:71:
05:bb:47:34:45:68:29:e7:f5:e8:2b:ea:03:d5:ad:db:95:f9:
0a:96:d7:10:01:56:a6:0e:3e:8c:59:5a:dd:7b:40:7f:ac:ff:
71:f1:85:c7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaS8v/wXgvCt89L3C8gRMt/0uwQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2MjlaFw0yMzA5MjUwODAxMjlaMDMxMTAvBgNV
BAMTKEVDODdFRUVBM0U3QzdFM0Q1QjE0RkEzNjI4OEJERTQ2RkM2QTdFRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFOaaTbxghoMQpzVYyDi7W9ue
yC7bAN1xDaznKnVmzM9giGpY21df8yzNi11gUXA+1K8NVqcQ2yVGZb8O2pOFuXQg
UdlH3j9N4nvud2BFsmDd9sTMLeqf2mcEnr2XHtv3ahVcl2IxbrdPVFL1G9hX6/mf
a1VDSStoyDehLV8OFaWOTtuIrznfbMGMpBgEbwpMtG6JIT3dcb8To+nEhKqdFST0
w80jRydPyZHqg+A9cBZSbhIR8kI14oHwUTmGuUVq50nwzr7O7sRq79Qar8ygskua
X1UPr9tmTb5SVZo2CcpnQC6DDCr8yM98zgg8RYJQSastULUqL6ul0tc5gRkrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU7Ifu6j58fj1bFPo2KIveRvxqftEwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzNTYzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
XDANBgkqhkiG9w0BAQsFAAOCAQEAUTmf941noqnjj18l7yIDLdJ50v9tKg4eu382
kNVBDw3Hk4Ms/KELy25jV8Ufpxz9iamNlz37UK0mKMKA4H7t4PMOuF/NsmcU53c2
ooHZdAX6ILEcSVNOXqJxJBP7tXPRCANsZR1O5wn92gzPvRmgoaTphktARrjNJnUx
wPTaRlZv2zagn+79QVOT/VA/xKcf/yAB8DzWC/B3KbIHHua729PGMCzJYHDrCGev
qICz4gkZ+i49p+5uQ7pRZ+UHD7UzVXW0GTsqLsunDXKWkvVh3dNwnzWrgPRxBbtH
NEVoKef16CvqA9Wt25X5CpbXEAFWpg4+jFla3XtAf6z/cfGFxw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org