Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3163373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: HhCIiKhV9KZxTtbuAxp38No5DjSsJmXyKvX3HKdatkw=
Subject key identifier: FE:4B:6F:45:51:BC:0F:46:B2:B1:47:B2:7E:72:22:29:E9:25:EB:B2
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3C11C9A8837A79F63CF6C8FD504157074EC01BB3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:30 +0000
ROA not before: Mon 26 Sep 2022 09:55:30 +0000
ROA not after: Mon 25 Sep 2023 10:00:30 +0000
asID: 59282
IP address blocks: 2400:d680:1c7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:11:c9:a8:83:7a:79:f6:3c:f6:c8:fd:50:41:57:07:4e:c0:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:30 2022 GMT
Not After : Sep 25 10:00:30 2023 GMT
Subject: CN=FE4B6F4551BC0F46B2B147B27E722229E925EBB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:4c:ba:4f:86:17:0f:db:2e:c4:e8:48:2f:
09:2c:95:c7:5a:24:be:eb:62:2a:2f:25:79:ad:e4:
a8:b0:1b:e3:9b:89:b9:56:c3:45:4d:10:38:22:16:
63:e7:e8:8b:dc:be:8a:e2:65:96:e9:a0:a1:0f:22:
e5:5d:21:2e:fa:5d:b3:78:97:c4:17:13:4a:9f:29:
d1:6a:e8:f3:e9:67:d8:9c:a1:95:b9:70:a5:b3:76:
9b:23:ac:b8:c4:b6:74:42:27:61:56:91:a0:91:15:
39:24:11:ec:02:5d:ff:8f:ca:04:a4:7e:78:68:97:
b0:b5:ae:af:61:be:73:71:32:31:4c:9e:46:40:4c:
e9:e4:16:85:1c:0f:d2:1f:6a:1b:ab:cc:a4:9b:bc:
88:38:3c:4c:6a:df:98:ae:6a:4b:9e:e7:ee:0f:e4:
98:25:1d:1a:9a:60:bf:44:c5:98:96:13:2c:51:fc:
4d:ab:da:c4:22:56:1a:57:af:91:cb:c6:f9:ad:d0:
4d:29:07:2d:af:fe:e1:cf:bf:6a:33:5b:aa:0f:7f:
ad:ae:ac:ca:91:19:57:68:cb:a7:52:2e:cc:b7:06:
f5:20:10:9b:34:3c:1e:7e:11:16:7d:d5:48:0b:e9:
17:b5:99:2c:7f:82:af:07:80:3d:06:90:63:f5:bf:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4B:6F:45:51:BC:0F:46:B2:B1:47:B2:7E:72:22:29:E9:25:EB:B2
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3163373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1c7::/48
Signature Algorithm: sha256WithRSAEncryption
9a:c2:8b:67:4e:fe:57:aa:71:82:bd:4f:93:7b:cf:21:18:65:
c5:06:cf:13:59:98:d1:f6:51:92:75:dc:48:f3:44:88:fa:96:
bd:ef:1a:d1:b0:e1:c6:84:bb:fc:d3:a9:9a:eb:c8:14:6e:18:
79:90:0e:3b:db:4e:d4:b9:07:58:21:a0:a0:c8:c7:85:42:12:
19:9f:b9:d5:62:9d:42:88:ac:d9:ca:1e:b4:33:77:64:cb:65:
8e:a3:27:91:e0:28:0c:63:cd:da:59:62:ed:7a:63:2a:ac:d0:
f4:75:f2:c5:fa:f4:c1:0d:0e:90:67:1b:3b:78:92:7c:bd:f7:
b7:5a:b8:57:70:7f:1c:fe:f7:7c:38:7a:e5:54:21:98:ab:0d:
37:78:6e:ab:71:5b:9e:67:16:60:a4:ca:d4:47:2d:d5:03:ea:
a7:60:48:9d:6c:c7:8d:9b:36:55:d0:34:76:8b:91:cb:fa:47:
ba:1b:50:e7:cd:7a:50:bb:da:d9:fe:1a:80:55:75:0b:1b:5e:
47:80:0f:61:87:e6:51:7e:aa:03:20:21:64:d8:c8:7b:e0:98:
80:e9:1c:14:18:d2:10:19:b6:1d:7c:e8:67:aa:70:b6:55:07:
83:84:cc:d1:57:a1:49:3f:6b:2b:5a:29:c9:d9:85:a2:f1:9f:
f3:57:35:f8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUPBHJqIN6efY89sj9UEFXB07AG7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MzBaFw0yMzA5MjUxMDAwMzBaMDMxMTAvBgNV
BAMTKEZFNEI2RjQ1NTFCQzBGNDZCMkIxNDdCMjdFNzIyMjI5RTkyNUVCQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBm0y6T4YXD9suxOhILwkslcda
JL7rYiovJXmt5KiwG+ObiblWw0VNEDgiFmPn6IvcvoriZZbpoKEPIuVdIS76XbN4
l8QXE0qfKdFq6PPpZ9icoZW5cKWzdpsjrLjEtnRCJ2FWkaCRFTkkEewCXf+PygSk
fnhol7C1rq9hvnNxMjFMnkZATOnkFoUcD9IfahurzKSbvIg4PExq35iuakue5+4P
5JglHRqaYL9ExZiWEyxR/E2r2sQiVhpXr5HLxvmt0E0pBy2v/uHPv2ozW6oPf62u
rMqRGVdoy6dSLsy3BvUgEJs0PB5+ERZ91UgL6Re1mSx/gq8HgD0GkGP1vzVnAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU/ktvRVG8D0aysUeyfnIiKekl67IwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2MzM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
xzANBgkqhkiG9w0BAQsFAAOCAQEAmsKLZ07+V6pxgr1Pk3vPIRhlxQbPE1mY0fZR
knXcSPNEiPqWve8a0bDhxoS7/NOpmuvIFG4YeZAOO9tO1LkHWCGgoMjHhUISGZ+5
1WKdQois2coetDN3ZMtljqMnkeAoDGPN2lli7XpjKqzQ9HXyxfr0wQ0OkGcbO3iS
fL33t1q4V3B/HP73fDh65VQhmKsNN3huq3FbnmcWYKTK1Ect1QPqp2BInWzHjZs2
VdA0douRy/pHuhtQ5816ULva2f4agFV1CxteR4APYYfmUX6qAyAhZNjIe+CYgOkc
FBjSEBm2HXzoZ6pwtlUHg4TM0VehST9rK1opydmFovGf81c1+A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org