Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3161323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: dru0QFKxmEZppOKhZd5xyGBwNeiKmXIo4se1BmH+/+4=
Subject key identifier: FA:A4:DC:5C:17:7A:4E:0F:58:6E:AC:35:00:C9:0E:F3:3A:1F:84:5D
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7E2EBB14AF37676D021565933546A4D7E0139215
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:23 +0000
ROA not before: Mon 26 Sep 2022 09:55:23 +0000
ROA not after: Mon 25 Sep 2023 10:00:23 +0000
asID: 59282
IP address blocks: 2400:d680:1a2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2e:bb:14:af:37:67:6d:02:15:65:93:35:46:a4:d7:e0:13:92:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:23 2022 GMT
Not After : Sep 25 10:00:23 2023 GMT
Subject: CN=FAA4DC5C177A4E0F586EAC3500C90EF33A1F845D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:10:24:d5:8e:9b:25:8b:86:5e:fe:7d:51:
b3:e7:f7:f0:46:bc:ce:8c:2a:07:59:b4:7c:8f:f7:
9e:af:ba:83:3d:28:5c:be:7f:b6:d5:e1:c5:6f:12:
b4:de:63:50:cb:1a:f6:9a:25:49:38:f9:43:9c:12:
a8:a6:d1:1a:d2:0a:88:4c:4b:05:74:ec:54:8a:71:
6a:40:4b:d2:f8:e9:83:c4:65:fd:eb:1a:f5:82:5c:
42:d3:c7:b5:36:c4:06:f7:86:e0:33:e0:42:46:75:
0e:11:c0:a8:9c:db:e4:d4:33:3b:69:3f:c0:e7:f7:
a0:ca:e4:19:f1:dd:f4:6c:0d:36:25:4c:35:c4:c4:
b3:e8:92:37:cb:3b:7e:18:7a:49:3f:ae:55:48:9b:
d5:89:8e:9e:7a:87:fe:0b:70:de:28:01:b1:c6:f9:
19:01:51:dc:33:4a:7c:07:58:61:1f:87:63:98:02:
c7:41:f1:d9:63:89:f4:f8:4c:6e:0a:a0:35:81:5c:
e3:a6:86:80:31:20:61:6a:3d:f6:5e:e7:d2:3d:92:
ea:df:57:98:10:85:1d:a6:ea:2d:4a:80:8b:00:d7:
ab:7f:ec:36:f3:3e:8b:fe:00:5a:d8:6a:ac:eb:c7:
70:e1:03:21:7f:21:fb:f5:7b:0a:70:c6:75:28:49:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:DC:5C:17:7A:4E:0F:58:6E:AC:35:00:C9:0E:F3:3A:1F:84:5D
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3161323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1a2::/48
Signature Algorithm: sha256WithRSAEncryption
b5:46:65:eb:2d:5a:6d:77:e7:a5:62:94:e8:68:c5:63:be:3e:
99:c8:65:ee:cf:e8:d2:5a:90:96:6d:8a:33:6b:33:97:1c:7b:
90:ec:bd:5f:d0:51:98:e8:12:f8:a3:61:f2:92:92:7e:94:01:
05:bb:ad:52:e0:dd:4c:25:ec:a3:6c:65:e0:cc:f9:ee:77:bc:
86:58:c3:fe:c7:a0:da:d6:52:8a:2b:40:43:11:51:44:9b:d2:
82:2f:42:75:15:e3:af:3b:c3:ce:a5:38:e8:26:a9:41:00:c2:
d4:0d:ba:99:19:34:9d:1b:a3:e5:e6:24:25:50:3b:17:c5:c0:
90:78:e1:8a:37:be:0e:3f:3f:bf:70:5c:98:2b:1c:fa:3c:5b:
a8:92:ad:e1:86:d1:9a:a7:dc:74:e2:52:f7:eb:11:71:94:b3:
8a:0d:3a:22:6f:49:07:9e:22:50:de:27:67:96:84:0d:cd:05:
93:a9:a3:31:d2:40:6c:c7:09:d6:18:db:96:b0:45:07:2d:33:
3d:51:fd:8b:c9:1b:8d:55:ab:55:d1:90:a4:26:cd:ee:4b:65:
1d:52:52:32:4a:33:c9:70:2c:5a:54:93:a2:cd:d8:07:44:2f:
11:34:4b:4d:15:ae:10:d4:83:e4:39:56:ca:8a:1b:c5:ca:77:
95:61:d4:b3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfi67FK83Z20CFWWTNUak1+ATkhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MjNaFw0yMzA5MjUxMDAwMjNaMDMxMTAvBgNV
BAMTKEZBQTREQzVDMTc3QTRFMEY1ODZFQUMzNTAwQzkwRUYzM0ExRjg0NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRBAk1Y6bJYuGXv59UbPn9/BG
vM6MKgdZtHyP956vuoM9KFy+f7bV4cVvErTeY1DLGvaaJUk4+UOcEqim0RrSCohM
SwV07FSKcWpAS9L46YPEZf3rGvWCXELTx7U2xAb3huAz4EJGdQ4RwKic2+TUMztp
P8Dn96DK5Bnx3fRsDTYlTDXExLPokjfLO34Yekk/rlVIm9WJjp56h/4LcN4oAbHG
+RkBUdwzSnwHWGEfh2OYAsdB8dljifT4TG4KoDWBXOOmhoAxIGFqPfZe59I9kurf
V5gQhR2m6i1KgIsA16t/7DbzPov+AFrYaqzrx3DhAyF/Ifv1ewpwxnUoSW/XAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+qTcXBd6Tg9Ybqw1AMkO8zofhF0wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2MTMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
ojANBgkqhkiG9w0BAQsFAAOCAQEAtUZl6y1abXfnpWKU6GjFY74+mchl7s/o0lqQ
lm2KM2szlxx7kOy9X9BRmOgS+KNh8pKSfpQBBbutUuDdTCXso2xl4Mz57ne8hljD
/seg2tZSiitAQxFRRJvSgi9CdRXjrzvDzqU46CapQQDC1A26mRk0nRuj5eYkJVA7
F8XAkHjhije+Dj8/v3BcmCsc+jxbqJKt4YbRmqfcdOJS9+sRcZSzig06Im9JB54i
UN4nZ5aEDc0Fk6mjMdJAbMcJ1hjblrBFBy0zPVH9i8kbjVWrVdGQpCbN7ktlHVJS
MkozyXAsWlSTos3YB0QvETRLTRWuENSD5DlWyoobxcp3lWHUsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org