Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3137373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: BFrtT38F7mGEK0R1Axa2GVjwTtco8OUrQs63wvH49Us=
Subject key identifier: BE:0A:7F:D5:12:2B:C1:E9:4A:62:07:9A:5B:03:F3:90:62:9F:A1:B7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 16F30757FECFAE802F1AB0B89FF35B2DC5FC2D8F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:23 +0000
ROA not before: Mon 26 Sep 2022 07:57:23 +0000
ROA not after: Mon 25 Sep 2023 08:02:23 +0000
asID: 59282
IP address blocks: 2400:d680:177::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f3:07:57:fe:cf:ae:80:2f:1a:b0:b8:9f:f3:5b:2d:c5:fc:2d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:23 2022 GMT
Not After : Sep 25 08:02:23 2023 GMT
Subject: CN=BE0A7FD5122BC1E94A62079A5B03F390629FA1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:24:5e:1b:cc:7c:43:34:2f:68:55:1b:e4:
d0:01:2c:7c:de:90:e6:ce:f0:a3:fd:f8:8a:b6:ff:
21:45:c6:8a:5a:c5:c7:3f:1b:af:c4:ed:d8:a9:6b:
1f:ce:9c:23:4a:02:d9:11:b2:73:5b:8d:c6:3e:ce:
90:7c:2f:c8:e7:3d:0c:03:90:b4:e4:bd:99:f8:a3:
77:91:ed:e1:d8:8a:b4:8b:02:82:20:ff:8d:5f:8e:
3e:72:20:f7:5e:3a:11:e7:62:61:06:a4:33:fe:27:
54:2e:12:23:71:1f:f4:c3:10:8a:a9:09:38:25:34:
ec:ea:75:c4:a3:7f:1d:84:61:75:60:76:e8:84:a3:
27:6b:cc:63:41:45:48:48:81:fc:6e:f6:3f:7c:25:
36:c6:c5:98:30:ac:31:bb:20:31:4b:8e:56:96:91:
df:c8:6f:2d:fd:13:a9:fc:6b:7b:f3:61:71:45:89:
07:9a:0f:2d:e6:f9:ec:72:37:f5:bd:4f:33:9d:0c:
99:84:67:e7:f4:33:87:e6:ba:2c:02:91:11:bf:87:
1b:da:18:31:b6:39:54:b3:54:b2:ef:6a:62:3e:36:
7d:79:02:65:31:9b:7d:c7:62:90:10:35:d0:b6:a1:
8d:4c:a0:d1:f0:76:a6:7a:8b:bd:de:08:2a:72:ba:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:7F:D5:12:2B:C1:E9:4A:62:07:9A:5B:03:F3:90:62:9F:A1:B7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3137373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:177::/48
Signature Algorithm: sha256WithRSAEncryption
3d:59:a3:c6:4e:88:ad:2a:2b:de:de:b2:d2:ee:9e:a4:15:cc:
ee:66:81:87:0a:57:93:d0:85:4d:ea:e5:05:43:45:d5:2a:6e:
7a:1e:cc:6f:b5:87:50:f6:1c:18:74:c7:86:79:06:b3:13:2a:
9a:f6:ee:16:fd:eb:ec:6d:17:71:b6:cb:6d:24:2a:59:7e:99:
c1:6c:05:2d:89:30:ab:f2:d8:ea:7c:7c:22:05:ab:ba:9f:90:
1f:26:b3:0d:5b:b5:16:14:fe:3e:dc:a3:51:6c:7e:8c:c0:58:
45:c1:95:5a:cc:e5:f1:2f:90:3d:fe:0b:b7:80:da:a2:4b:46:
cb:b6:2b:bc:57:cd:75:b7:30:60:84:d4:ff:b0:bc:03:c4:37:
0d:48:48:d6:81:4c:e9:ce:23:1a:4d:9f:3e:14:76:9a:53:5c:
33:b4:2b:52:2b:d1:ff:f1:37:46:c4:c7:6e:e8:5c:83:c7:b6:
a7:42:12:2e:df:eb:90:fe:78:d5:e8:4f:b3:48:dd:9a:0a:ed:
a3:66:f7:a1:0d:40:69:f6:ee:d6:e2:d8:79:ab:66:24:c5:08:
81:87:25:df:4d:39:e8:f7:bf:eb:02:87:82:f5:47:10:d8:a3:
8a:73:cb:34:65:9e:60:de:0f:17:5f:c7:cb:56:f7:79:1e:a5:
11:62:60:7b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUFvMHV/7ProAvGrC4n/NbLcX8LY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MjNaFw0yMzA5MjUwODAyMjNaMDMxMTAvBgNV
BAMTKEJFMEE3RkQ1MTIyQkMxRTk0QTYyMDc5QTVCMDNGMzkwNjI5RkExQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nSReG8x8QzQvaFUb5NABLHze
kObO8KP9+Iq2/yFFxopaxcc/G6/E7dipax/OnCNKAtkRsnNbjcY+zpB8L8jnPQwD
kLTkvZn4o3eR7eHYirSLAoIg/41fjj5yIPdeOhHnYmEGpDP+J1QuEiNxH/TDEIqp
CTglNOzqdcSjfx2EYXVgduiEoydrzGNBRUhIgfxu9j98JTbGxZgwrDG7IDFLjlaW
kd/Iby39E6n8a3vzYXFFiQeaDy3m+exyN/W9TzOdDJmEZ+f0M4fmuiwCkRG/hxva
GDG2OVSzVLLvamI+Nn15AmUxm33HYpAQNdC2oY1MoNHwdqZ6i73eCCpyulDJAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUvgp/1RIrwelKYgeaWwPzkGKfobcwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzNzM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
dzANBgkqhkiG9w0BAQsFAAOCAQEAPVmjxk6IrSor3t6y0u6epBXM7maBhwpXk9CF
TerlBUNF1Spueh7Mb7WHUPYcGHTHhnkGsxMqmvbuFv3r7G0XcbbLbSQqWX6ZwWwF
LYkwq/LY6nx8IgWrup+QHyazDVu1FhT+PtyjUWx+jMBYRcGVWszl8S+QPf4Lt4Da
oktGy7YrvFfNdbcwYITU/7C8A8Q3DUhI1oFM6c4jGk2fPhR2mlNcM7QrUivR//E3
RsTHbuhcg8e2p0ISLt/rkP541ehPs0jdmgrto2b3oQ1Aafbu1uLYeatmJMUIgYcl
30056Pe/6wKHgvVHENijinPLNGWeYN4PF1/Hy1b3eR6lEWJgew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org