Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3139613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: baTGNVVSxjnv6ozBLZMxMAFket0/CXcXM24ZuaD15sQ=
Subject key identifier: 86:45:59:BC:5B:DE:DF:62:72:47:7C:5B:A1:0B:26:12:AD:0F:56:FE
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 300DE10138D5490CD43A935109680C2C93ABD377
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:00 +0000
ROA not before: Mon 26 Sep 2022 07:57:00 +0000
ROA not after: Mon 25 Sep 2023 08:02:00 +0000
asID: 59282
IP address blocks: 2400:d680:19a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:0d:e1:01:38:d5:49:0c:d4:3a:93:51:09:68:0c:2c:93:ab:d3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:00 2022 GMT
Not After : Sep 25 08:02:00 2023 GMT
Subject: CN=864559BC5BDEDF6272477C5BA10B2612AD0F56FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:4e:53:22:64:25:2c:52:68:70:e3:27:8f:
46:d1:fa:51:e5:52:85:1c:c6:8e:ce:06:93:fa:b7:
da:87:d2:a0:74:cf:a7:04:94:af:de:ae:a0:d7:0b:
4c:43:4d:36:14:03:63:38:0f:31:8c:70:40:a5:71:
8c:e8:c5:0f:2f:ca:04:ff:4d:19:86:4b:d4:5c:12:
46:4c:f9:53:ce:5c:68:12:5b:dc:9c:c2:84:a6:92:
86:0f:49:bd:a6:1c:bd:16:69:de:a8:e8:8e:32:2a:
3a:1e:09:93:9c:40:d0:84:5c:7a:6d:9a:64:d3:9d:
ed:21:ee:60:d8:d1:12:92:93:9e:cc:a3:95:03:82:
08:6d:bd:f8:88:2b:45:e6:65:3a:cd:cc:b3:61:a2:
76:9d:3d:a0:64:dc:1b:54:7c:b5:29:40:6c:e2:27:
a8:3b:ee:9a:98:64:0f:b0:9f:97:7b:77:fc:de:59:
be:c9:56:bd:26:51:20:b1:3e:53:09:87:2d:34:bb:
6a:2c:91:36:d6:9b:ea:83:a1:fa:02:e6:c3:c9:d1:
20:10:5b:31:11:4e:92:cd:88:46:a4:bc:29:3d:21:
65:23:59:38:db:08:98:15:8b:c3:bb:e8:c6:0b:ef:
d1:5d:e7:5c:f2:24:7a:4b:f1:44:d4:0f:c6:87:3c:
d2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:59:BC:5B:DE:DF:62:72:47:7C:5B:A1:0B:26:12:AD:0F:56:FE
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:19a::/48
Signature Algorithm: sha256WithRSAEncryption
00:ee:9e:c1:ce:0c:42:1f:8e:aa:4e:7c:a6:1e:67:b6:f7:1d:
5d:1e:2f:7a:77:70:5e:04:78:23:51:33:e3:72:7c:61:6a:d8:
a5:91:2d:b7:d7:21:65:d6:b6:50:a3:e4:59:e5:83:31:26:84:
18:ea:aa:90:0c:1a:d7:a0:74:99:69:fe:24:81:46:be:a0:09:
23:c0:4f:0a:2f:cd:09:c6:44:07:d8:01:94:56:65:c6:b1:36:
4e:dc:00:b8:60:0e:24:8b:c9:10:ff:06:a7:3a:56:2e:6b:3f:
f3:cc:92:11:88:f7:2f:53:1c:2f:84:0c:89:b5:14:61:e7:8d:
43:a6:d6:2f:92:6c:52:35:d6:5b:fa:e9:f4:d9:46:2b:ac:27:
d9:73:94:24:fc:80:5c:15:f7:08:21:6c:a4:3b:98:e9:be:b6:
a2:62:84:36:22:d5:8b:d4:78:46:64:a4:e7:92:4b:37:aa:b1:
66:0f:4f:81:d3:4a:7d:85:e2:4e:21:f0:08:1a:4c:26:1e:fe:
ae:c3:b4:ee:81:8e:4f:38:25:78:3d:f0:61:17:d5:56:86:2e:
fb:90:0e:cb:55:a6:d9:d3:6d:f5:bd:b2:ea:51:ff:53:02:39:
16:cb:b2:2d:80:35:1c:0a:55:1e:43:db:23:22:92:2f:a2:b7:
db:23:17:1b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMA3hATjVSQzUOpNRCWgMLJOr03cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MDBaFw0yMzA5MjUwODAyMDBaMDMxMTAvBgNV
BAMTKDg2NDU1OUJDNUJERURGNjI3MjQ3N0M1QkExMEIyNjEyQUQwRjU2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QU5TImQlLFJocOMnj0bR+lHl
UoUcxo7OBpP6t9qH0qB0z6cElK/erqDXC0xDTTYUA2M4DzGMcEClcYzoxQ8vygT/
TRmGS9RcEkZM+VPOXGgSW9ycwoSmkoYPSb2mHL0Wad6o6I4yKjoeCZOcQNCEXHpt
mmTTne0h7mDY0RKSk57Mo5UDgghtvfiIK0XmZTrNzLNhonadPaBk3BtUfLUpQGzi
J6g77pqYZA+wn5d7d/zeWb7JVr0mUSCxPlMJhy00u2oskTbWm+qDofoC5sPJ0SAQ
WzERTpLNiEakvCk9IWUjWTjbCJgVi8O76MYL79Fd51zyJHpL8UTUD8aHPNJhAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhkVZvFve32JyR3xboQsmEq0PVv4wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzOTYxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
mjANBgkqhkiG9w0BAQsFAAOCAQEAAO6ewc4MQh+Oqk58ph5ntvcdXR4vendwXgR4
I1Ez43J8YWrYpZEtt9chZda2UKPkWeWDMSaEGOqqkAwa16B0mWn+JIFGvqAJI8BP
Ci/NCcZEB9gBlFZlxrE2TtwAuGAOJIvJEP8GpzpWLms/88ySEYj3L1McL4QMibUU
YeeNQ6bWL5JsUjXWW/rp9NlGK6wn2XOUJPyAXBX3CCFspDuY6b62omKENiLVi9R4
RmSk55JLN6qxZg9PgdNKfYXiTiHwCBpMJh7+rsO07oGOTzgleD3wYRfVVoYu+5AO
y1Wm2dNt9b2y6lH/UwI5FsuyLYA1HApVHkPbIyKSL6K32yMXGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org