Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3162323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: xEZZTf0veWqnEXw1GEqC495wflIlIsJzBtR0h9BO8DU=
Subject key identifier: F2:14:27:33:71:76:52:E1:19:0A:EA:01:62:74:99:89:A1:8E:06:F6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5C7DCC28FE0BC5CB38B699EBD50527EC58EB3D08
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:06 +0000
ROA not before: Mon 26 Sep 2022 09:55:06 +0000
ROA not after: Mon 25 Sep 2023 10:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:1b2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:7d:cc:28:fe:0b:c5:cb:38:b6:99:eb:d5:05:27:ec:58:eb:3d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:06 2022 GMT
Not After : Sep 25 10:00:06 2023 GMT
Subject: CN=F2142733717652E1190AEA0162749989A18E06F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:98:c1:c1:27:0c:7f:25:f6:30:d0:3c:20:
3d:3f:49:52:aa:cb:01:da:4c:4b:cb:c5:4a:7c:da:
c4:00:f6:62:d2:db:32:ec:e9:c0:e0:b4:af:cf:0b:
c9:23:bd:58:44:66:f1:ad:b8:97:e6:e0:c0:18:bb:
35:58:18:f3:38:16:5a:70:12:e6:c3:38:e7:d0:de:
f1:ef:b2:83:e2:c8:3b:5c:ab:2c:33:74:47:d8:7b:
69:6a:42:6e:07:01:83:d2:af:82:84:be:80:c7:90:
53:88:6f:b7:20:b4:99:6a:69:ca:38:f8:d1:60:88:
9a:a5:1b:fb:f9:bc:40:ab:1b:d7:22:10:2d:61:c9:
17:f7:8a:7f:2f:4e:c2:4d:15:dc:3d:e8:a0:5a:10:
94:c9:fb:ef:e0:6b:8d:d5:7d:07:53:9a:ca:15:a0:
f8:5d:af:a0:25:61:84:0b:f7:1b:9d:e8:ed:86:a4:
bc:db:d9:b7:92:68:e2:46:a0:28:b8:1b:64:b7:19:
82:36:d9:56:ba:24:c6:a4:5c:d0:6e:19:4e:ba:43:
6c:25:bc:11:59:4a:a9:b0:50:c4:8c:c7:0a:a1:68:
9a:f6:55:0b:95:f7:42:91:76:64:b3:5b:86:76:67:
63:e5:48:fc:8b:e6:e4:51:9e:30:45:74:d9:26:44:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:27:33:71:76:52:E1:19:0A:EA:01:62:74:99:89:A1:8E:06:F6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3162323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1b2::/48
Signature Algorithm: sha256WithRSAEncryption
a3:e6:d7:7c:64:2c:fe:3a:b3:62:cb:32:17:7b:d2:03:7b:95:
0c:a0:36:9b:44:7f:fd:6c:0d:2c:ca:11:16:4d:9b:2a:af:b2:
6a:95:84:97:8d:94:41:35:3f:5e:2b:3b:55:59:8b:b2:9d:04:
3c:4a:9a:11:97:3d:7a:d0:ae:08:36:ec:86:df:de:29:dd:02:
f8:bf:7d:cd:4a:c4:ec:cb:f5:ba:f2:66:89:1d:d8:1a:65:51:
ee:36:3b:63:2d:70:a3:4d:cc:5e:c8:c4:2d:4a:bc:d2:f3:fe:
12:34:28:ee:8b:97:97:f4:ea:6c:6c:00:2b:33:7a:9d:97:fc:
a8:9d:cb:cd:22:7b:18:fb:11:1c:0a:65:51:21:a4:36:a8:82:
89:64:9a:64:1c:16:dc:15:1e:dc:99:3f:43:ec:e1:17:27:04:
15:49:c9:1b:92:f3:a3:1c:d4:6c:4e:ad:66:84:c5:67:23:b8:
44:c6:9f:6c:27:52:66:46:db:48:1f:8a:ef:05:07:82:a0:13:
5d:ba:ac:ec:b5:ed:19:98:e4:05:2e:2b:b7:b4:b7:04:dc:82:
ff:b6:a4:45:1e:ed:83:85:9f:15:22:58:55:af:fc:92:7a:6f:
e3:87:22:46:31:9c:17:fb:7a:28:90:9a:83:fd:07:7e:e8:ad:
d0:36:82:b6
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXH3MKP4Lxcs4tpnr1QUn7FjrPQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MDZaFw0yMzA5MjUxMDAwMDZaMDMxMTAvBgNV
BAMTKEYyMTQyNzMzNzE3NjUyRTExOTBBRUEwMTYyNzQ5OTg5QTE4RTA2RjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC805jBwScMfyX2MNA8ID0/SVKq
ywHaTEvLxUp82sQA9mLS2zLs6cDgtK/PC8kjvVhEZvGtuJfm4MAYuzVYGPM4Flpw
EubDOOfQ3vHvsoPiyDtcqywzdEfYe2lqQm4HAYPSr4KEvoDHkFOIb7cgtJlqaco4
+NFgiJqlG/v5vECrG9ciEC1hyRf3in8vTsJNFdw96KBaEJTJ++/ga43VfQdTmsoV
oPhdr6AlYYQL9xud6O2GpLzb2beSaOJGoCi4G2S3GYI22Va6JMakXNBuGU66Q2wl
vBFZSqmwUMSMxwqhaJr2VQuV90KRdmSzW4Z2Z2PlSPyL5uRRnjBFdNkmRAwvAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU8hQnM3F2UuEZCuoBYnSZiaGOBvYwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2MjMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
sjANBgkqhkiG9w0BAQsFAAOCAQEAo+bXfGQs/jqzYssyF3vSA3uVDKA2m0R//WwN
LMoRFk2bKq+yapWEl42UQTU/Xis7VVmLsp0EPEqaEZc9etCuCDbsht/eKd0C+L99
zUrE7Mv1uvJmiR3YGmVR7jY7Yy1wo03MXsjELUq80vP+EjQo7ouXl/TqbGwAKzN6
nZf8qJ3LzSJ7GPsRHAplUSGkNqiCiWSaZBwW3BUe3Jk/Q+zhFycEFUnJG5LzoxzU
bE6tZoTFZyO4RMafbCdSZkbbSB+K7wUHgqATXbqs7LXtGZjkBS4rt7S3BNyC/7ak
RR7tg4WfFSJYVa/8knpv44ciRjGcF/t6KJCag/0Hfuit0DaCtg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org