Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3164313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 7wzuIRlzu6J5scqCXT6mTptOZN4tM1cpqS3N/OCYOmM=
Subject key identifier: 2F:00:BD:39:67:02:1B:85:8F:2C:8A:99:0A:48:C4:69:81:77:3E:64
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 51CD35FEDBA03CC31384D5A7B8DF04548E1F1D6B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:13 +0000
ROA not before: Mon 26 Sep 2022 09:55:13 +0000
ROA not after: Mon 25 Sep 2023 10:00:13 +0000
asID: 59282
IP address blocks: 2400:d680:1d1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:cd:35:fe:db:a0:3c:c3:13:84:d5:a7:b8:df:04:54:8e:1f:1d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:13 2022 GMT
Not After : Sep 25 10:00:13 2023 GMT
Subject: CN=2F00BD3967021B858F2C8A990A48C46981773E64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fb:9b:e3:ae:4e:ae:89:d6:5f:88:56:f2:b4:
1f:fa:a8:e0:a7:85:2b:11:05:99:f3:f3:5e:8c:bd:
98:75:94:12:5b:1c:df:43:f3:b0:d1:5d:0d:81:4b:
6a:a6:79:90:25:16:ce:53:26:fb:e4:68:10:9f:78:
f4:8f:7e:09:dc:b3:bb:82:23:56:17:47:07:7c:bf:
46:0f:f0:e3:41:df:34:c6:46:27:50:3d:8d:e8:f1:
4a:17:18:c5:24:96:ea:e5:1e:eb:a5:d6:67:48:bb:
42:ff:14:bd:af:04:e0:04:09:ff:08:53:6d:a4:20:
97:6a:82:dd:7f:87:12:46:dc:37:c4:1e:59:ef:14:
ce:a3:9e:38:c2:52:c9:a5:94:fe:83:ae:d5:f4:65:
7a:d2:98:c5:12:77:7f:08:76:7a:94:4f:0c:4d:82:
0d:70:f4:f5:9b:2f:95:7d:8c:61:04:49:00:82:40:
13:e6:d1:44:01:9f:c8:81:e7:0a:77:79:64:7c:a1:
f4:53:0f:fe:35:ab:ac:60:c7:fd:99:15:90:d9:dc:
b5:52:e0:48:b6:52:2f:2f:36:85:73:52:e1:2f:57:
53:da:3d:8c:ee:12:28:26:e8:fa:aa:76:51:af:11:
2d:7f:70:e7:96:77:c5:0b:3b:89:ca:af:e4:17:17:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:00:BD:39:67:02:1B:85:8F:2C:8A:99:0A:48:C4:69:81:77:3E:64
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1d1::/48
Signature Algorithm: sha256WithRSAEncryption
5e:f5:73:80:23:b5:70:5d:8b:2f:eb:12:70:7f:17:b5:82:04:
4e:cf:0f:b3:0b:39:2b:87:51:04:8b:02:75:25:34:b0:b0:7c:
6e:25:da:67:6b:86:14:b3:9e:08:27:97:a0:6a:32:da:0f:d7:
a1:47:a2:fb:1c:2b:4e:51:b0:ba:26:78:47:05:5a:f5:80:53:
78:e2:1f:3f:c0:bf:9b:52:fe:50:2d:7b:08:6e:f5:2c:26:99:
71:de:d3:88:b5:ff:23:d0:36:35:4c:37:ae:75:cc:d0:60:c4:
7f:3f:61:5a:8c:dd:00:38:e4:bb:95:77:bd:48:75:86:41:f6:
ce:ad:d2:42:16:ef:61:48:46:b9:ed:ac:6c:10:fd:cc:75:43:
52:ca:87:3b:12:72:35:24:42:97:30:d8:a9:a7:06:30:12:59:
0d:a8:33:de:21:2f:2d:66:58:e6:3b:bb:01:42:38:c8:b2:08:
66:11:72:5a:fe:88:a2:6a:88:9a:9c:0d:fe:5e:6d:0f:35:0e:
c7:e4:05:71:cb:11:76:0a:b7:ca:90:f0:91:66:e7:dd:62:26:
1f:15:73:04:34:9b:da:fe:9c:00:3e:52:51:1e:d0:64:da:fd:
f6:9b:eb:8e:de:45:bc:57:11:f7:74:32:cb:b9:67:62:d5:45:
b3:eb:c9:5b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUc01/tugPMMThNWnuN8EVI4fHWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MTNaFw0yMzA5MjUxMDAwMTNaMDMxMTAvBgNV
BAMTKDJGMDBCRDM5NjcwMjFCODU4RjJDOEE5OTBBNDhDNDY5ODE3NzNFNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg+5vjrk6uidZfiFbytB/6qOCn
hSsRBZnz816MvZh1lBJbHN9D87DRXQ2BS2qmeZAlFs5TJvvkaBCfePSPfgncs7uC
I1YXRwd8v0YP8ONB3zTGRidQPY3o8UoXGMUklurlHuul1mdIu0L/FL2vBOAECf8I
U22kIJdqgt1/hxJG3DfEHlnvFM6jnjjCUsmllP6DrtX0ZXrSmMUSd38IdnqUTwxN
gg1w9PWbL5V9jGEESQCCQBPm0UQBn8iB5wp3eWR8ofRTD/41q6xgx/2ZFZDZ3LVS
4Ei2Ui8vNoVzUuEvV1PaPYzuEigm6PqqdlGvES1/cOeWd8ULO4nKr+QXF8+ZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQULwC9OWcCG4WPLIqZCkjEaYF3PmQwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2NDMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
0TANBgkqhkiG9w0BAQsFAAOCAQEAXvVzgCO1cF2LL+sScH8XtYIETs8Psws5K4dR
BIsCdSU0sLB8biXaZ2uGFLOeCCeXoGoy2g/XoUei+xwrTlGwuiZ4RwVa9YBTeOIf
P8C/m1L+UC17CG71LCaZcd7TiLX/I9A2NUw3rnXM0GDEfz9hWozdADjku5V3vUh1
hkH2zq3SQhbvYUhGue2sbBD9zHVDUsqHOxJyNSRClzDYqacGMBJZDagz3iEvLWZY
5ju7AUI4yLIIZhFyWv6IomqImpwN/l5tDzUOx+QFccsRdgq3ypDwkWbn3WImHxVz
BDSb2v6cAD5SUR7QZNr99pvrjt5FvFcR93Qyy7lnYtVFs+vJWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org