Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3136373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: t4MthNF2Ynf0ThH5MUjiijCIWg2h9kYwBgOqp/iJcH8=
Subject key identifier: 2A:A8:B6:73:17:C2:DC:CF:E4:26:3D:B6:52:0A:DE:C3:DC:8A:F4:02
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 424A171EF5A17D05897F44BDCD04CA0EB8FB028F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:01 +0000
ROA not before: Mon 26 Sep 2022 07:57:01 +0000
ROA not after: Mon 25 Sep 2023 08:02:01 +0000
asID: 59282
IP address blocks: 2400:d680:167::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4a:17:1e:f5:a1:7d:05:89:7f:44:bd:cd:04:ca:0e:b8:fb:02:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:01 2022 GMT
Not After : Sep 25 08:02:01 2023 GMT
Subject: CN=2AA8B67317C2DCCFE4263DB6520ADEC3DC8AF402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:77:ec:45:f3:af:35:83:d4:f9:8b:aa:a5:
45:d8:7c:59:f7:ef:28:cc:68:70:26:c2:23:ba:17:
ca:f7:9f:e8:a0:72:2d:85:cc:55:90:5a:1f:59:ce:
0c:05:fa:bb:11:4f:52:87:2c:b2:f3:81:e4:d9:3b:
91:b4:e5:b0:eb:7a:ae:4f:81:df:48:95:0a:0b:8d:
6b:0f:08:6b:92:f6:4c:60:38:27:66:d6:8b:73:54:
6c:f4:94:4f:51:cf:b7:2e:4b:5b:9c:04:2f:d1:42:
1e:7b:9f:20:03:4b:10:b9:4d:1a:b9:3b:14:aa:0b:
d5:ea:9f:19:51:da:20:09:32:e3:4d:cd:2a:97:01:
47:fe:54:9c:e2:78:68:93:96:b7:28:ea:13:c5:e3:
43:3a:4d:70:74:f9:a7:b9:bf:94:2a:a9:e6:11:0e:
2e:e9:3f:18:d9:f0:62:bb:82:f9:2b:45:36:4e:a4:
a2:c3:41:bc:e4:de:67:b9:57:86:44:19:95:a9:90:
4f:93:77:d0:f0:2a:90:9d:0a:81:11:25:8a:6a:59:
ea:54:fe:37:1b:37:50:38:e8:74:05:df:00:8e:a6:
f4:66:5a:ef:04:1e:80:64:ff:0a:45:26:46:fb:72:
62:0a:7d:65:75:62:9e:2f:21:18:27:29:a7:df:38:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A8:B6:73:17:C2:DC:CF:E4:26:3D:B6:52:0A:DE:C3:DC:8A:F4:02
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3136373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:167::/48
Signature Algorithm: sha256WithRSAEncryption
30:71:09:0b:9c:51:3f:60:19:9a:ed:44:8d:22:fc:70:53:bb:
26:6a:8b:31:34:a0:ff:07:d9:1c:40:ac:7a:8a:39:db:38:9e:
c2:b0:d1:5b:4f:d9:d5:e7:66:f0:5c:67:d5:73:78:fe:51:05:
a2:c0:21:18:9a:fe:4d:58:d4:db:c3:55:ff:50:e9:00:f0:96:
7a:eb:cb:37:45:e2:84:17:20:84:06:26:ac:1e:c4:81:22:ad:
18:4e:d4:ea:bf:17:55:28:ad:84:29:cb:5e:05:e0:22:9d:25:
80:f9:17:20:5a:90:b4:64:52:3c:b1:e0:76:01:9b:e6:6b:14:
f5:79:ee:a6:07:89:21:c9:26:1e:2a:cf:b5:59:ba:96:8a:f9:
7a:83:d9:e9:85:6d:e1:d1:4f:13:dd:7f:89:98:d6:34:89:70:
07:dc:c7:44:dc:30:1a:28:f8:6a:0f:c6:6e:43:bc:5d:ac:c3:
2c:8d:2a:9a:4c:15:33:c9:17:3f:4a:6a:31:89:50:e5:69:7f:
ef:33:8d:49:84:a0:a4:6d:e7:a2:bb:31:ac:c6:9e:27:63:14:
b0:79:2d:75:48:14:89:31:c9:58:2a:b3:57:5d:4b:59:2e:46:
7b:1a:0c:15:99:d0:e9:31:6b:a0:55:df:a9:89:27:2f:4c:db:
14:a8:22:62
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUQkoXHvWhfQWJf0S9zQTKDrj7Ao8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MDFaFw0yMzA5MjUwODAyMDFaMDMxMTAvBgNV
BAMTKDJBQThCNjczMTdDMkRDQ0ZFNDI2M0RCNjUyMEFERUMzREM4QUY0MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChdnfsRfOvNYPU+YuqpUXYfFn3
7yjMaHAmwiO6F8r3n+igci2FzFWQWh9ZzgwF+rsRT1KHLLLzgeTZO5G05bDreq5P
gd9IlQoLjWsPCGuS9kxgOCdm1otzVGz0lE9Rz7cuS1ucBC/RQh57nyADSxC5TRq5
OxSqC9XqnxlR2iAJMuNNzSqXAUf+VJzieGiTlrco6hPF40M6TXB0+ae5v5QqqeYR
Di7pPxjZ8GK7gvkrRTZOpKLDQbzk3me5V4ZEGZWpkE+Td9DwKpCdCoERJYpqWepU
/jcbN1A46HQF3wCOpvRmWu8EHoBk/wpFJkb7cmIKfWV1Yp4vIRgnKaffOCiTAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUKqi2cxfC3M/kJj22Ugrew9yK9AIwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzNjM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
ZzANBgkqhkiG9w0BAQsFAAOCAQEAMHEJC5xRP2AZmu1EjSL8cFO7JmqLMTSg/wfZ
HECseoo52ziewrDRW0/Z1edm8Fxn1XN4/lEFosAhGJr+TVjU28NV/1DpAPCWeuvL
N0XihBcghAYmrB7EgSKtGE7U6r8XVSithCnLXgXgIp0lgPkXIFqQtGRSPLHgdgGb
5msU9XnupgeJIckmHirPtVm6lor5eoPZ6YVt4dFPE91/iZjWNIlwB9zHRNwwGij4
ag/GbkO8XazDLI0qmkwVM8kXP0pqMYlQ5Wl/7zONSYSgpG3norsxrMaeJ2MUsHkt
dUgUiTHJWCqzV11LWS5GexoMFZnQ6TFroFXfqYknL0zbFKgiYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org