Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3164373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 7TOgO0MndVglk4WQvt2N8BTv/87hQ6sSqYe2Zp5cXkU=
Subject key identifier: B6:3A:1B:6B:04:FD:33:35:5A:A5:BE:DC:F6:34:39:4F:33:67:1D:23
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 30EFB908881FF9BE41B81DCF900431812A38B859
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:03 +0000
ROA not before: Mon 26 Sep 2022 09:55:03 +0000
ROA not after: Mon 25 Sep 2023 10:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:1d7::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ef:b9:08:88:1f:f9:be:41:b8:1d:cf:90:04:31:81:2a:38:b8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:03 2022 GMT
Not After : Sep 25 10:00:03 2023 GMT
Subject: CN=B63A1B6B04FD33355AA5BEDCF634394F33671D23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:7c:aa:6e:bc:f4:03:35:f7:df:18:12:14:
8d:49:1b:2e:46:d7:99:cf:e6:c6:f9:bc:a7:d0:88:
e6:58:e7:6f:f6:c0:3a:97:1f:9e:1f:88:23:6e:79:
04:7d:6a:00:75:79:fb:92:27:51:9e:af:f1:83:c2:
f0:4f:f0:28:8f:e2:0f:aa:83:59:72:fc:c2:36:65:
f8:69:d8:40:5b:7e:c7:ac:84:fb:11:b1:db:7b:d8:
58:10:15:d5:c0:a3:9c:19:c1:82:94:52:5a:9a:01:
de:29:d9:fe:0a:19:9d:2a:29:4c:c8:d0:79:c9:74:
73:3b:43:e7:e6:04:9f:ad:0f:82:2f:10:32:a9:aa:
49:8a:60:a3:5f:8a:f3:36:54:85:78:5c:79:54:90:
e6:b8:47:af:53:90:b1:30:68:96:f2:22:60:6d:f1:
4e:66:02:95:86:79:c2:6c:d8:2f:11:e4:d0:ac:52:
d1:02:54:9c:28:19:22:b4:24:40:a2:55:c7:f6:e5:
e6:71:66:46:2a:a1:77:72:c9:fa:5e:71:2d:ec:e8:
d6:d0:b7:f1:4b:73:20:27:69:6f:9b:ac:4d:15:08:
72:7a:16:e8:6a:a3:08:dd:bc:74:b7:5f:8a:f5:a7:
f1:9b:49:7d:32:c0:7a:9b:57:08:fd:d8:09:84:2e:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3A:1B:6B:04:FD:33:35:5A:A5:BE:DC:F6:34:39:4F:33:67:1D:23
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3164373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1d7::/48
Signature Algorithm: sha256WithRSAEncryption
27:6f:02:37:80:7d:22:ab:ba:c6:cc:8b:21:a6:4e:f6:c4:19:
4f:6e:c3:d8:01:70:93:07:e5:6b:35:e1:de:f8:f7:49:0e:e3:
c8:2c:3b:d0:8d:3b:c6:7e:92:b6:26:c1:5f:32:98:8a:6c:00:
43:24:bd:3d:26:af:b7:63:35:7e:41:9d:ae:a2:13:fa:1d:a8:
3a:c3:8f:13:1d:13:70:df:ca:a6:64:a3:9e:05:b8:9a:cb:41:
d6:db:a2:1e:d7:5a:38:8c:7d:d6:a2:7f:ef:cb:51:c8:a8:92:
4a:0e:1f:db:c1:c1:29:20:51:96:8c:47:f2:5b:a2:47:f1:80:
cf:43:c6:8e:c9:d9:a5:67:a6:f0:de:12:52:7e:34:ae:aa:25:
a1:e6:f2:e1:82:e3:d5:23:1f:73:fc:02:98:c5:d6:75:dc:7e:
ff:6a:1c:5b:a3:d2:20:4d:49:4c:36:fa:e7:a0:43:e8:23:ed:
b8:da:69:29:55:ab:3b:f2:b3:fb:59:f7:fd:4c:7c:c6:94:d5:
7e:0b:61:f6:fc:2c:b7:7e:f0:09:22:2b:89:78:ab:ff:96:af:
da:ad:c8:52:5e:a6:7d:e5:3c:85:6a:1c:6c:a1:fb:1e:76:d0:
b0:0d:87:69:67:fb:97:c5:0c:f2:d9:57:ed:79:96:ea:03:9c:
9d:22:a1:6b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMO+5CIgf+b5BuB3PkAQxgSo4uFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MDNaFw0yMzA5MjUxMDAwMDNaMDMxMTAvBgNV
BAMTKEI2M0ExQjZCMDRGRDMzMzU1QUE1QkVEQ0Y2MzQzOTRGMzM2NzFEMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG63yqbrz0AzX33xgSFI1JGy5G
15nP5sb5vKfQiOZY52/2wDqXH54fiCNueQR9agB1efuSJ1Ger/GDwvBP8CiP4g+q
g1ly/MI2Zfhp2EBbfseshPsRsdt72FgQFdXAo5wZwYKUUlqaAd4p2f4KGZ0qKUzI
0HnJdHM7Q+fmBJ+tD4IvEDKpqkmKYKNfivM2VIV4XHlUkOa4R69TkLEwaJbyImBt
8U5mApWGecJs2C8R5NCsUtECVJwoGSK0JECiVcf25eZxZkYqoXdyyfpecS3s6NbQ
t/FLcyAnaW+brE0VCHJ6FuhqowjdvHS3X4r1p/GbSX0ywHqbVwj92AmELmvPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUtjobawT9MzVapb7c9jQ5TzNnHSMwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2NDM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
1zANBgkqhkiG9w0BAQsFAAOCAQEAJ28CN4B9Iqu6xsyLIaZO9sQZT27D2AFwkwfl
azXh3vj3SQ7jyCw70I07xn6StibBXzKYimwAQyS9PSavt2M1fkGdrqIT+h2oOsOP
Ex0TcN/KpmSjngW4mstB1tuiHtdaOIx91qJ/78tRyKiSSg4f28HBKSBRloxH8lui
R/GAz0PGjsnZpWem8N4SUn40rqoloeby4YLj1SMfc/wCmMXWddx+/2ocW6PSIE1J
TDb656BD6CPtuNppKVWrO/Kz+1n3/Ux8xpTVfgth9vwst37wCSIriXir/5av2q3I
Ul6mfeU8hWocbKH7HnbQsA2HaWf7l8UM8tlX7XmW6gOcnSKhaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org