Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3164303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: W/PDtMDA9q8Z6Sid4JGqq6DWsD035Lm0IgNIxQVIE9c=
Subject key identifier: 7C:C3:45:EB:AB:9B:7B:5B:C6:FD:C1:44:7B:19:E0:7F:35:51:74:E5
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4E3627649ADC605A57F5AEEC0CA1445D9620E8A6
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:31 +0000
ROA not before: Mon 26 Sep 2022 09:55:31 +0000
ROA not after: Mon 25 Sep 2023 10:00:31 +0000
asID: 59282
IP address blocks: 2400:d680:1d0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:36:27:64:9a:dc:60:5a:57:f5:ae:ec:0c:a1:44:5d:96:20:e8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:31 2022 GMT
Not After : Sep 25 10:00:31 2023 GMT
Subject: CN=7CC345EBAB9B7B5BC6FDC1447B19E07F355174E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:74:a6:78:6a:cd:3c:29:be:6d:7e:4b:99:f8:
8c:70:6c:c7:ec:37:d6:8a:05:43:af:6d:7d:b1:6c:
29:ef:c2:75:4c:9f:50:b0:e0:55:1b:77:57:57:58:
a8:73:dd:0a:54:b4:4e:e6:ce:c0:e1:97:b7:e4:6e:
a3:9f:9b:95:8a:19:fd:c3:47:2f:2c:15:cb:73:98:
aa:a1:a0:cd:ed:aa:00:9c:6d:28:a7:cd:4f:5a:76:
a2:ac:e7:b5:d6:b9:59:cc:e3:bf:b9:eb:33:39:a9:
c9:74:0b:75:0a:29:3e:34:1c:fc:61:33:da:f5:23:
4b:5e:59:52:4e:cf:33:de:3e:4c:f0:25:78:36:95:
1b:42:43:1f:a9:0b:2e:fe:84:69:82:7b:79:f9:3b:
85:63:39:a2:a8:55:95:c7:3f:27:05:d5:38:3b:8f:
20:8c:f4:96:b7:f0:e1:be:58:0b:36:14:46:0f:86:
8e:a2:ed:79:f5:0a:64:8e:e9:f0:28:17:68:cb:da:
a6:16:46:09:71:4e:c5:66:ab:bd:fc:f0:68:c7:e5:
ed:ac:16:82:d8:60:54:ad:06:79:b1:76:5d:ce:ab:
70:f4:c1:78:cc:6b:c3:8a:4f:63:e4:7e:c1:78:66:
1b:1b:35:b5:bb:81:5a:9d:28:1a:0a:ba:2f:cf:b3:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C3:45:EB:AB:9B:7B:5B:C6:FD:C1:44:7B:19:E0:7F:35:51:74:E5
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1d0::/48
Signature Algorithm: sha256WithRSAEncryption
b9:63:86:60:c1:e2:22:5b:c4:fd:88:c1:06:ec:ef:54:36:6c:
fc:d2:e2:15:46:30:df:a2:e0:e8:9c:22:84:2f:bc:66:13:68:
17:11:c6:85:19:e3:c3:e2:2f:30:ae:2d:69:af:c4:9c:cf:3a:
29:06:74:21:4a:a1:4e:31:9b:75:40:d7:97:a6:f1:70:4a:2d:
f8:16:1f:0a:28:91:29:88:c1:e9:11:70:cd:5e:c3:86:e0:c5:
93:5c:fc:3b:ee:e9:ec:e3:3e:1c:20:05:20:82:4a:31:01:d5:
bb:62:b9:a3:73:24:76:86:a1:35:f7:00:2a:67:ba:e2:d8:b9:
49:31:82:95:5d:a4:1c:c5:61:4c:bd:ae:f1:b0:67:e9:48:31:
33:c2:41:cc:e7:f2:2d:c6:43:e8:3f:a7:a8:a0:58:9b:aa:94:
75:86:0f:05:12:3c:ab:2e:ce:e6:a1:76:37:3c:42:b1:55:01:
63:a3:1f:73:b0:4f:95:96:63:31:60:9b:4e:83:02:8f:59:74:
f1:25:65:13:09:42:db:3e:be:fa:88:d0:43:b2:4b:c0:be:33:
44:43:02:35:d1:b2:06:d0:ff:6b:6a:ec:b1:0f:7e:0b:94:ae:
6f:ad:8d:d3:6e:76:28:c6:3b:64:f9:e3:c3:b7:63:6c:22:b4:
c9:b4:c2:2e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUTjYnZJrcYFpX9a7sDKFEXZYg6KYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MzFaFw0yMzA5MjUxMDAwMzFaMDMxMTAvBgNV
BAMTKDdDQzM0NUVCQUI5QjdCNUJDNkZEQzE0NDdCMTlFMDdGMzU1MTc0RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdKZ4as08Kb5tfkuZ+IxwbMfs
N9aKBUOvbX2xbCnvwnVMn1Cw4FUbd1dXWKhz3QpUtE7mzsDhl7fkbqOfm5WKGf3D
Ry8sFctzmKqhoM3tqgCcbSinzU9adqKs57XWuVnM47+56zM5qcl0C3UKKT40HPxh
M9r1I0teWVJOzzPePkzwJXg2lRtCQx+pCy7+hGmCe3n5O4VjOaKoVZXHPycF1Tg7
jyCM9Ja38OG+WAs2FEYPho6i7Xn1CmSO6fAoF2jL2qYWRglxTsVmq7388GjH5e2s
FoLYYFStBnmxdl3Oq3D0wXjMa8OKT2PkfsF4ZhsbNbW7gVqdKBoKui/Psx0TAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfMNF66ube1vG/cFEexngfzVRdOUwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2NDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
0DANBgkqhkiG9w0BAQsFAAOCAQEAuWOGYMHiIlvE/YjBBuzvVDZs/NLiFUYw36Lg
6JwihC+8ZhNoFxHGhRnjw+IvMK4taa/EnM86KQZ0IUqhTjGbdUDXl6bxcEot+BYf
CiiRKYjB6RFwzV7DhuDFk1z8O+7p7OM+HCAFIIJKMQHVu2K5o3MkdoahNfcAKme6
4ti5STGClV2kHMVhTL2u8bBn6UgxM8JBzOfyLcZD6D+nqKBYm6qUdYYPBRI8qy7O
5qF2NzxCsVUBY6Mfc7BPlZZjMWCbToMCj1l08SVlEwlC2z6++ojQQ7JLwL4zREMC
NdGyBtD/a2rssQ9+C5Sub62N0252KMY7ZPnjw7djbCK0ybTCLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org