Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3139653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: DYl2Y3t1+yOoE8wQjxU2IpKQWAGE4ne0ms7uKbbMpiA=
Subject key identifier: C3:80:B2:99:C9:90:F9:FB:BE:1A:F0:3A:F2:79:E3:09:F1:52:37:32
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 21A34AC95208BC05868D95E8E76B72C45A1AFAB1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:46 +0000
ROA not before: Mon 26 Sep 2022 07:56:46 +0000
ROA not after: Mon 25 Sep 2023 08:01:46 +0000
asID: 59282
IP address blocks: 2400:d680:19e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a3:4a:c9:52:08:bc:05:86:8d:95:e8:e7:6b:72:c4:5a:1a:fa:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:46 2022 GMT
Not After : Sep 25 08:01:46 2023 GMT
Subject: CN=C380B299C990F9FBBE1AF03AF279E309F1523732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:c5:e0:fb:f2:f0:dd:3f:4d:31:96:aa:56:
1f:d6:84:f8:90:42:59:e8:c5:47:d8:e5:bd:77:3c:
de:c3:a3:ef:07:4f:e3:d5:24:2d:57:24:17:28:ba:
de:56:d7:b7:bf:0e:30:2b:f3:ca:8e:78:e7:6a:a8:
7d:20:1f:e7:17:0d:e4:ae:6c:62:e6:96:75:39:99:
ec:42:cd:86:51:59:1c:3c:49:9e:c7:57:c2:30:9f:
9a:bc:f2:e2:21:3d:f3:5c:e8:a6:d6:45:35:73:e7:
87:ee:ab:7b:93:e7:26:c9:5c:5b:f7:27:de:b5:61:
aa:07:c1:16:3b:0b:78:77:d3:8f:84:8e:ba:dc:26:
48:b0:44:61:e4:2d:2a:39:b8:e3:47:f4:cf:97:71:
e3:4b:ea:f5:81:4d:60:83:52:51:64:91:f0:53:c5:
82:cb:5b:36:75:b2:e6:e7:3a:b1:36:0a:52:08:ce:
88:d4:2a:7a:b0:87:cc:66:84:41:7c:47:e9:67:d5:
60:34:60:d3:e2:8d:60:8d:b1:c5:ea:4a:b8:99:28:
4e:35:57:82:3c:38:52:0f:b9:18:9d:24:90:5a:40:
e9:d4:86:b9:e3:2b:0c:0d:c3:f7:af:00:6e:62:a4:
29:ca:86:1a:b5:a2:63:83:0f:a6:dc:4c:59:89:47:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:B2:99:C9:90:F9:FB:BE:1A:F0:3A:F2:79:E3:09:F1:52:37:32
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3139653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:19e::/48
Signature Algorithm: sha256WithRSAEncryption
03:c3:60:ea:4f:b8:a9:e4:9c:51:21:4c:df:84:9f:b7:86:a2:
96:a8:37:ce:99:44:77:bd:cb:d4:d4:95:a8:0f:80:d7:29:80:
0e:ae:92:1b:49:01:e1:dc:93:80:4c:59:99:a0:b7:22:11:4d:
23:03:57:c6:33:0c:61:af:c1:49:21:56:c0:3a:95:ef:39:04:
b4:db:3b:1d:5d:53:0d:ba:08:54:30:4c:f0:f7:6b:13:4c:ba:
cd:76:e8:6c:88:7f:4a:5f:73:8f:47:cf:75:e9:8b:56:4f:d8:
8b:76:6d:c7:ef:d6:fc:1c:b6:a2:0b:19:cf:40:6c:2b:4a:03:
32:a2:8f:f0:57:47:b6:6f:88:ba:c3:49:34:2a:e6:6a:dc:68:
40:58:5a:c8:90:f9:3d:88:b4:d5:39:73:ef:1d:19:bc:9c:ed:
2d:b0:41:25:a3:5a:09:4c:a1:fc:62:db:52:99:05:e9:a5:28:
69:82:78:63:23:c5:27:eb:d5:3c:a0:82:bc:93:ad:08:f4:c6:
88:69:50:a5:16:0b:ba:05:3d:2b:e9:2f:e1:6b:0a:b8:13:cf:
ef:30:2f:c7:a5:eb:4f:00:dc:a7:ad:36:47:7c:fe:7c:f9:f7:
65:6a:0f:43:b7:d5:89:df:e6:71:79:dd:44:51:c9:42:e3:68:
d5:fc:c2:c7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUIaNKyVIIvAWGjZXo52tyxFoa+rEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2NDZaFw0yMzA5MjUwODAxNDZaMDMxMTAvBgNV
BAMTKEMzODBCMjk5Qzk5MEY5RkJCRTFBRjAzQUYyNzlFMzA5RjE1MjM3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5r8Xg+/Lw3T9NMZaqVh/WhPiQ
QlnoxUfY5b13PN7Do+8HT+PVJC1XJBcout5W17e/DjAr88qOeOdqqH0gH+cXDeSu
bGLmlnU5mexCzYZRWRw8SZ7HV8Iwn5q88uIhPfNc6KbWRTVz54fuq3uT5ybJXFv3
J961YaoHwRY7C3h304+EjrrcJkiwRGHkLSo5uONH9M+XceNL6vWBTWCDUlFkkfBT
xYLLWzZ1subnOrE2ClIIzojUKnqwh8xmhEF8R+ln1WA0YNPijWCNscXqSriZKE41
V4I8OFIPuRidJJBaQOnUhrnjKwwNw/evAG5ipCnKhhq1omODD6bcTFmJR/EPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUw4CymcmQ+fu+GvA68nnjCfFSNzIwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzEzOTY1M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
njANBgkqhkiG9w0BAQsFAAOCAQEAA8Ng6k+4qeScUSFM34Sft4ailqg3zplEd73L
1NSVqA+A1ymADq6SG0kB4dyTgExZmaC3IhFNIwNXxjMMYa/BSSFWwDqV7zkEtNs7
HV1TDboIVDBM8PdrE0y6zXbobIh/Sl9zj0fPdemLVk/Yi3Ztx+/W/By2ogsZz0Bs
K0oDMqKP8FdHtm+IusNJNCrmatxoQFhayJD5PYi01Tlz7x0ZvJztLbBBJaNaCUyh
/GLbUpkF6aUoaYJ4YyPFJ+vVPKCCvJOtCPTGiGlQpRYLugU9K+kv4WsKuBPP7zAv
x6XrTwDcp602R3z+fPn3ZWoPQ7fVid/mcXndRFHJQuNo1fzCxw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org