Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3163343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: d6aJB+qP0crh8l3nu9W5Oaa0zkvG3rNBqYGztGece7g=
Subject key identifier: 4F:43:48:A4:C5:08:C5:87:63:2A:A3:AD:BE:B9:5F:7A:C2:42:F6:61
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 75F719B7DF5E17D509C1022A395231C695FAF9BA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:24 +0000
ROA not before: Mon 26 Sep 2022 09:55:24 +0000
ROA not after: Mon 25 Sep 2023 10:00:24 +0000
asID: 59282
IP address blocks: 2400:d680:1c4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f7:19:b7:df:5e:17:d5:09:c1:02:2a:39:52:31:c6:95:fa:f9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:24 2022 GMT
Not After : Sep 25 10:00:24 2023 GMT
Subject: CN=4F4348A4C508C587632AA3ADBEB95F7AC242F661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c7:3b:74:52:e9:46:30:5b:71:9e:b5:cf:59:
e5:72:00:1b:6a:7e:19:34:0f:f2:dc:1f:09:b9:fb:
3f:4f:17:35:85:72:d3:53:78:5e:f7:b4:bb:32:bf:
05:99:4b:e9:d6:3a:cb:5b:d6:d9:92:8e:89:e8:8a:
5a:53:ec:d6:d5:e2:64:ac:b9:03:55:f8:a2:8d:b3:
8e:8a:4f:b3:fc:a1:9a:a7:5b:64:ef:67:e4:8c:80:
51:5c:91:dd:a0:8d:ca:9f:26:30:81:b0:9c:78:dc:
39:dd:3d:2c:93:1b:0a:24:24:70:08:0c:90:89:de:
c2:ca:57:0c:f1:73:66:da:2b:0b:a5:b3:be:a3:66:
30:16:f5:36:77:33:9f:0e:c8:0e:13:aa:08:7d:0c:
9b:c7:81:69:7e:52:96:0d:58:26:46:75:d3:1e:ff:
7a:ad:33:34:9d:49:2a:b7:db:5f:91:2b:b9:08:04:
0b:f8:2d:25:aa:44:01:b6:81:c7:49:19:cd:2f:86:
ba:21:74:df:b4:93:b8:25:36:a2:75:f1:9a:4c:b9:
68:e9:f6:14:d1:7c:9f:32:99:db:d1:1d:6b:76:de:
ab:1b:e6:68:de:21:3c:71:dc:a7:e1:1e:ed:a6:12:
65:40:98:0f:7d:00:f5:59:af:dc:5c:59:14:1c:d2:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:43:48:A4:C5:08:C5:87:63:2A:A3:AD:BE:B9:5F:7A:C2:42:F6:61
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1c4::/48
Signature Algorithm: sha256WithRSAEncryption
16:0e:34:59:f4:38:ac:7a:15:55:28:60:bd:ef:88:22:ab:1e:
01:60:43:59:99:e8:2e:a8:a2:ad:1e:15:a2:c6:73:7c:90:82:
88:36:af:17:75:bb:54:4e:7b:07:e7:1d:95:ab:44:fa:f8:c7:
ba:27:b0:84:92:37:7d:66:5a:2f:05:65:a5:a2:1c:b1:e3:55:
1b:4b:3c:27:d1:c7:27:98:c7:01:5c:c3:36:79:73:02:f0:4e:
fc:71:09:2c:f3:63:23:bc:dc:56:2b:3b:da:33:b2:fd:38:b5:
91:f7:6e:b4:0d:59:7b:4d:51:d2:ab:e0:85:a2:c6:30:f7:15:
fe:1e:4a:85:ba:aa:8b:2e:1e:94:ac:5c:7f:85:56:14:3d:dc:
c6:41:55:10:eb:a3:23:33:38:0e:dc:f7:ab:4b:e1:c4:c7:d6:
ae:9d:23:c2:4f:0b:25:cf:29:03:0a:2f:8b:15:93:fb:41:bb:
5f:79:50:48:ff:6d:c1:c2:d7:f3:a0:23:02:f2:a4:39:36:b7:
8f:fa:87:f3:3a:f9:10:c6:ea:fe:2b:db:33:b5:60:b0:4c:26:
fb:09:e9:da:df:f5:53:ae:16:0a:77:99:f0:61:ff:54:dd:00:
b1:23:33:56:ad:88:53:ec:3b:53:f4:04:29:03:c3:32:31:09:
02:e4:68:91
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdfcZt99eF9UJwQIqOVIxxpX6+bowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MjRaFw0yMzA5MjUxMDAwMjRaMDMxMTAvBgNV
BAMTKDRGNDM0OEE0QzUwOEM1ODc2MzJBQTNBREJFQjk1RjdBQzI0MkY2NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgxzt0UulGMFtxnrXPWeVyABtq
fhk0D/LcHwm5+z9PFzWFctNTeF73tLsyvwWZS+nWOstb1tmSjonoilpT7NbV4mSs
uQNV+KKNs46KT7P8oZqnW2TvZ+SMgFFckd2gjcqfJjCBsJx43DndPSyTGwokJHAI
DJCJ3sLKVwzxc2baKwuls76jZjAW9TZ3M58OyA4Tqgh9DJvHgWl+UpYNWCZGddMe
/3qtMzSdSSq321+RK7kIBAv4LSWqRAG2gcdJGc0vhrohdN+0k7glNqJ18ZpMuWjp
9hTRfJ8ymdvRHWt23qsb5mjeITxx3KfhHu2mEmVAmA99APVZr9xcWRQc0sMVAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUT0NIpMUIxYdjKqOtvrlfesJC9mEwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2MzM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
xDANBgkqhkiG9w0BAQsFAAOCAQEAFg40WfQ4rHoVVShgve+IIqseAWBDWZnoLqii
rR4VosZzfJCCiDavF3W7VE57B+cdlatE+vjHuiewhJI3fWZaLwVlpaIcseNVG0s8
J9HHJ5jHAVzDNnlzAvBO/HEJLPNjI7zcVis72jOy/Ti1kfdutA1Ze01R0qvghaLG
MPcV/h5Khbqqiy4elKxcf4VWFD3cxkFVEOujIzM4Dtz3q0vhxMfWrp0jwk8LJc8p
AwovixWT+0G7X3lQSP9twcLX86AjAvKkOTa3j/qH8zr5EMbq/ivbM7VgsEwm+wnp
2t/1U64WCneZ8GH/VN0AsSMzVq2IU+w7U/QEKQPDMjEJAuRokQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org