Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3138363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: VI5jot5L0NKcfOZvyA9kpZe034eLCqZA5xKvDPA/hXA=
Subject key identifier: C4:43:17:44:20:79:DE:EF:F4:67:93:E5:6E:19:E5:D1:A5:91:35:00
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2E6BBB4ED081F5272E263413E91512CA51E892BD
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:45 +0000
ROA not before: Mon 26 Sep 2022 07:56:45 +0000
ROA not after: Mon 25 Sep 2023 08:01:45 +0000
asID: 59282
IP address blocks: 2400:d680:186::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6b:bb:4e:d0:81:f5:27:2e:26:34:13:e9:15:12:ca:51:e8:92:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:45 2022 GMT
Not After : Sep 25 08:01:45 2023 GMT
Subject: CN=C44317442079DEEFF46793E56E19E5D1A5913500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:bb:f3:7b:06:b5:9a:33:04:ae:e8:17:65:
d1:3a:84:30:49:cc:42:6d:40:3d:be:a8:21:3b:25:
08:d8:69:dc:e1:a4:a7:6f:5a:96:a6:b9:f3:f8:af:
4d:09:7c:60:a3:03:cb:1d:b0:fe:7f:be:bc:d9:90:
88:17:57:23:a2:72:5a:37:54:9c:e1:63:f9:96:c5:
cd:a4:64:9e:3b:aa:35:de:15:af:13:73:16:e3:59:
92:4b:7f:3c:f2:91:bd:71:32:1c:10:b4:14:b1:05:
ac:5c:32:11:57:ed:4e:cc:23:94:a3:a9:fe:5a:06:
71:c3:f7:df:79:5e:b8:82:c5:35:b2:d8:13:a1:16:
1a:33:90:b9:05:f2:77:d2:26:7a:d6:7d:9a:3a:3c:
7b:d1:94:36:af:cf:0b:73:ed:ca:27:12:9b:85:5b:
b1:c9:02:f1:39:b6:ba:6b:38:f0:12:9a:c2:73:82:
b6:c0:68:15:c7:a1:e2:7a:ae:d4:f8:dd:ba:e8:14:
f1:05:d0:90:f1:58:c5:5d:c5:b3:80:22:8c:52:f9:
db:22:2f:c6:19:56:b1:70:4d:61:d9:10:00:f8:9c:
af:fe:b5:7d:26:b0:5b:f7:49:9b:ec:50:6b:f3:30:
a9:40:03:71:de:98:b9:cb:ec:be:67:bd:ce:14:ce:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:43:17:44:20:79:DE:EF:F4:67:93:E5:6E:19:E5:D1:A5:91:35:00
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:186::/48
Signature Algorithm: sha256WithRSAEncryption
68:73:d1:98:ee:e5:e9:ed:8d:01:f4:19:a3:a6:78:50:8b:a7:
ff:68:08:35:83:03:c1:e6:42:d3:5d:ed:c6:b6:ab:57:0f:aa:
68:00:04:e7:35:da:5d:8f:60:e8:27:c2:d6:be:ea:ed:c2:d0:
2c:41:4f:d9:0d:2a:cf:f8:b8:9e:91:f9:38:e0:17:74:77:72:
29:3b:6a:a9:33:ef:bd:d2:40:4c:09:0f:bc:7b:18:04:98:2e:
08:98:6f:01:a6:07:ab:87:e5:a1:1f:1d:16:65:c8:15:35:dd:
d9:be:26:e4:6f:95:f6:31:e6:8e:87:9c:69:45:f3:65:5f:b2:
5c:09:00:18:83:69:bb:f6:74:73:ed:4c:97:24:d7:a0:97:6a:
e0:04:40:fc:d7:94:c5:ec:36:c4:71:02:fe:54:b1:22:4b:b1:
bd:35:5e:bc:15:a4:d7:0e:39:a4:a5:22:79:a4:93:7a:0d:26:
f2:b9:19:55:3b:66:58:17:cf:31:29:cb:9a:93:57:e4:ca:98:
19:fe:a9:01:5e:8f:69:5d:de:f0:6b:ac:b8:cb:a3:2a:e3:13:
49:d6:01:05:d7:52:ea:9d:ef:80:e7:09:ee:3e:82:2a:1c:0f:
8f:49:85:ef:14:6c:c1:26:3f:dd:63:bb:d2:72:b2:e5:e9:b2:
e0:6b:10:6e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIULmu7TtCB9ScuJjQT6RUSylHokr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2NDVaFw0yMzA5MjUwODAxNDVaMDMxMTAvBgNV
BAMTKEM0NDMxNzQ0MjA3OURFRUZGNDY3OTNFNTZFMTlFNUQxQTU5MTM1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcRbvzewa1mjMErugXZdE6hDBJ
zEJtQD2+qCE7JQjYadzhpKdvWpamufP4r00JfGCjA8sdsP5/vrzZkIgXVyOiclo3
VJzhY/mWxc2kZJ47qjXeFa8TcxbjWZJLfzzykb1xMhwQtBSxBaxcMhFX7U7MI5Sj
qf5aBnHD9995XriCxTWy2BOhFhozkLkF8nfSJnrWfZo6PHvRlDavzwtz7conEpuF
W7HJAvE5trprOPASmsJzgrbAaBXHoeJ6rtT43broFPEF0JDxWMVdxbOAIoxS+dsi
L8YZVrFwTWHZEAD4nK/+tX0msFv3SZvsUGvzMKlAA3HemLnL7L5nvc4UzhmXAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUxEMXRCB53u/0Z5Plbhnl0aWRNQAwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzODM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
hjANBgkqhkiG9w0BAQsFAAOCAQEAaHPRmO7l6e2NAfQZo6Z4UIun/2gINYMDweZC
013txrarVw+qaAAE5zXaXY9g6CfC1r7q7cLQLEFP2Q0qz/i4npH5OOAXdHdyKTtq
qTPvvdJATAkPvHsYBJguCJhvAaYHq4floR8dFmXIFTXd2b4m5G+V9jHmjoecaUXz
ZV+yXAkAGINpu/Z0c+1MlyTXoJdq4ARA/NeUxew2xHEC/lSxIkuxvTVevBWk1w45
pKUieaSTeg0m8rkZVTtmWBfPMSnLmpNX5MqYGf6pAV6PaV3e8GusuMujKuMTSdYB
BddS6p3vgOcJ7j6CKhwPj0mF7xRswSY/3WO70nKy5emy4GsQbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org