Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a31623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: EoOEnmSprfv7QRf0aKXMkrq6x3y4y1nT0OHUgzU34Hc=
Subject key identifier: 85:CA:CC:4E:A0:92:E2:65:16:2F:C5:35:29:29:D8:EC:97:35:D9:D3
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 08B55601091400C565E3FED2BDC664398B54A47D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:04 +0000
ROA not before: Mon 26 Sep 2022 06:55:04 +0000
ROA not after: Mon 25 Sep 2023 07:00:04 +0000
asID: 59282
IP address blocks: 2400:d680:1b::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b5:56:01:09:14:00:c5:65:e3:fe:d2:bd:c6:64:39:8b:54:a4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:04 2022 GMT
Not After : Sep 25 07:00:04 2023 GMT
Subject: CN=85CACC4EA092E265162FC5352929D8EC9735D9D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:73:1b:c9:dd:10:2b:14:23:70:c1:c9:c8:
9f:04:5b:a8:50:fc:08:24:a8:09:7e:cb:13:c4:c4:
b2:2c:3c:fe:99:73:3e:a9:ec:ea:61:f7:31:b3:a9:
2d:64:6d:10:3b:a6:0e:5c:65:a2:a7:44:3d:f3:7f:
5a:11:a3:0d:5a:e7:00:2b:fa:94:fd:b3:69:96:f6:
9a:c6:11:e3:73:f2:f8:9c:2c:ba:f4:dd:ec:d1:70:
8d:cf:bc:ad:3e:68:8a:31:9a:c5:5d:32:d3:27:ed:
59:18:fb:a7:7f:f3:db:7c:93:1d:59:6c:9d:98:bf:
df:01:5a:16:0d:8c:78:73:e8:bf:ca:64:9f:62:8c:
62:27:77:24:7a:f1:9f:d4:8d:24:51:29:1b:e2:2f:
23:af:4e:2c:97:26:ca:13:f8:9a:4c:64:24:fd:a3:
b7:4d:1f:f5:d5:66:ed:30:b9:a0:e0:e7:3c:44:1f:
29:09:e8:f6:c3:32:de:67:63:44:2b:66:e0:be:fb:
22:ed:07:82:1f:ba:b1:31:b8:a7:87:82:94:c7:cb:
c8:d6:de:a5:7a:8b:e3:60:70:0e:fe:89:b7:c8:4e:
f5:8e:68:f3:27:56:a7:14:06:a1:8f:37:23:20:82:
b9:0a:c9:66:f6:a9:ff:8a:19:c1:3a:ab:23:eb:e1:
0e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CA:CC:4E:A0:92:E2:65:16:2F:C5:35:29:29:D8:EC:97:35:D9:D3
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a31623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1b::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f1:24:5c:14:e3:ce:14:be:a5:77:e5:4e:dc:61:0b:7e:11:
42:58:0a:ca:cf:7d:5e:c1:68:2f:f6:19:bc:07:21:64:c2:68:
aa:a3:22:a9:0b:68:d4:6d:96:b0:0a:ad:04:17:7d:56:61:67:
fc:5c:6f:1c:79:45:e3:e1:8a:36:09:4f:c3:31:48:0e:7a:04:
8d:37:10:59:33:c4:df:23:f2:91:c7:4b:bd:34:f7:59:e5:70:
ae:99:01:ee:e5:59:da:27:3a:a6:dd:3c:93:47:63:05:c8:70:
0a:dd:16:08:f1:77:be:34:33:b8:06:27:cb:bd:23:f5:d7:b5:
7e:cc:3f:90:0b:5c:0e:ac:5c:14:9a:5c:af:6c:88:e7:dc:6b:
1a:01:10:9b:23:77:02:76:06:30:47:f6:02:7c:a2:af:ae:3f:
a8:8b:e9:38:37:22:e4:bb:f5:e6:07:40:b7:32:9b:96:03:d3:
66:fc:da:d9:cb:15:87:f7:f1:76:cc:69:aa:60:ee:4d:ce:b4:
3d:76:5f:14:c9:05:a9:5e:7a:e5:1b:d7:fa:f6:97:78:ec:b6:
36:ee:e7:a8:14:dc:c4:8b:76:0a:76:2a:10:4b:df:09:ae:f3:
67:5b:a1:1a:68:13:00:0d:61:d8:95:a7:ca:1a:5e:ff:6c:2f:
f2:4b:3f:5b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUCLVWAQkUAMVl4/7SvcZkOYtUpH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNjU1MDRaFw0yMzA5MjUwNzAwMDRaMDMxMTAvBgNV
BAMTKDg1Q0FDQzRFQTA5MkUyNjUxNjJGQzUzNTI5MjlEOEVDOTczNUQ5RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6nMbyd0QKxQjcMHJyJ8EW6hQ
/AgkqAl+yxPExLIsPP6Zcz6p7Oph9zGzqS1kbRA7pg5cZaKnRD3zf1oRow1a5wAr
+pT9s2mW9prGEeNz8vicLLr03ezRcI3PvK0+aIoxmsVdMtMn7VkY+6d/89t8kx1Z
bJ2Yv98BWhYNjHhz6L/KZJ9ijGIndyR68Z/UjSRRKRviLyOvTiyXJsoT+JpMZCT9
o7dNH/XVZu0wuaDg5zxEHykJ6PbDMt5nY0QrZuC++yLtB4IfurExuKeHgpTHy8jW
3qV6i+NgcA7+ibfITvWOaPMnVqcUBqGPNyMggrkKyWb2qf+KGcE6qyPr4Q4hAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUhcrMTqCS4mUWL8U1KSnY7Jc12dMwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2MjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAABsw
DQYJKoZIhvcNAQELBQADggEBAA/xJFwU484UvqV35U7cYQt+EUJYCsrPfV7BaC/2
GbwHIWTCaKqjIqkLaNRtlrAKrQQXfVZhZ/xcbxx5RePhijYJT8MxSA56BI03EFkz
xN8j8pHHS70091nlcK6ZAe7lWdonOqbdPJNHYwXIcArdFgjxd740M7gGJ8u9I/XX
tX7MP5ALXA6sXBSaXK9siOfcaxoBEJsjdwJ2BjBH9gJ8oq+uP6iL6Tg3IuS79eYH
QLcym5YD02b82tnLFYf38XbMaapg7k3OtD12XxTJBaleeuUb1/r2l3jstjbu56gU
3MSLdgp2KhBL3wmu82dboRpoEwANYdiVp8oaXv9sL/JLP1s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org