Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3165353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: XgVFRducFVYdP8G8Sn1R5df8LGj9nnNvoMnGM4WItwI=
Subject key identifier: EE:AB:FB:5E:C6:65:73:FA:A1:02:30:BD:8A:33:89:C3:D8:91:3C:95
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5474289AB7DFBA120243DCD4228E5C1018AB8A8D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:06 +0000
ROA not before: Mon 26 Sep 2022 09:55:06 +0000
ROA not after: Mon 25 Sep 2023 10:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:1e5::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:74:28:9a:b7:df:ba:12:02:43:dc:d4:22:8e:5c:10:18:ab:8a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:06 2022 GMT
Not After : Sep 25 10:00:06 2023 GMT
Subject: CN=EEABFB5EC66573FAA10230BD8A3389C3D8913C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:53:b7:4f:8b:a1:61:72:c5:32:e4:a1:15:
3d:58:a1:5a:aa:50:e6:a2:c0:71:31:21:84:38:81:
ef:46:83:14:7f:83:e3:a7:25:96:ce:31:6a:6d:f5:
db:49:ba:bc:a3:21:4c:ff:c0:5b:a3:f3:b9:8a:06:
af:11:d9:19:86:35:9d:4a:53:67:0b:5b:08:9f:25:
a1:cb:1c:a0:03:76:35:57:95:8f:52:4b:b2:51:5a:
9e:5f:36:47:77:c8:52:65:79:33:c6:ae:de:40:d4:
7b:43:3e:82:c2:35:3f:9f:54:05:3a:72:d4:19:d9:
50:0d:0d:4b:8c:e8:d0:80:e1:3a:97:53:81:54:e5:
7c:16:66:5b:bf:41:94:bd:39:aa:6e:2c:0d:b8:78:
ba:01:c1:d8:bb:d2:fd:d2:79:23:88:6a:a1:6d:80:
e9:f9:c9:a1:fa:67:99:51:98:d2:41:91:6e:30:b4:
e8:47:83:b0:98:2e:f8:61:c7:d0:97:8f:37:8f:17:
75:fc:5f:d5:7a:37:e5:35:14:6c:8d:08:02:a2:90:
9b:ee:72:9f:19:30:a3:93:96:6e:cb:16:a6:c0:39:
4c:b8:83:e9:39:0c:75:d7:2d:64:2c:a9:d0:77:67:
b6:68:86:64:5f:51:18:01:75:a7:66:02:dc:1c:32:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:FB:5E:C6:65:73:FA:A1:02:30:BD:8A:33:89:C3:D8:91:3C:95
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1e5::/48
Signature Algorithm: sha256WithRSAEncryption
57:64:ca:fb:35:2a:2c:a8:21:0c:1d:b0:ec:72:30:b2:79:b7:
65:9e:44:21:43:eb:10:da:b8:5a:1b:57:56:65:25:57:b7:92:
d4:45:ca:d5:b9:92:6e:f1:ad:c0:e6:05:42:e3:f2:00:8e:32:
af:41:13:4f:64:70:f1:d3:28:87:d4:f5:50:ba:cb:9a:99:c0:
fe:fe:58:53:51:0d:33:0f:f9:ca:db:0c:d3:f7:52:46:2a:60:
57:1f:c8:ac:64:71:a5:d3:6b:d1:bd:53:51:71:6c:0b:77:e2:
ac:49:af:fe:08:82:18:e9:19:20:8c:a8:02:66:c6:72:51:98:
6e:b8:c8:89:89:06:3b:fa:ff:fc:e7:21:a4:ea:9a:60:fd:df:
f9:57:e6:f3:6a:4a:ce:ef:c8:5f:7b:31:31:da:56:37:dc:6b:
6e:06:a3:20:69:c0:32:7e:db:40:57:b4:1b:0c:1b:ad:3e:5e:
a6:1b:66:0e:c3:88:cc:9a:6c:7a:69:28:85:e7:08:0e:d3:52:
9f:17:a7:8c:96:74:97:65:46:45:30:7e:57:b5:30:d0:7d:e5:
5d:14:bc:be:32:03:74:60:6b:15:f6:94:77:10:c5:f7:b3:72:
f4:22:25:20:5e:8c:93:e7:e9:b8:d1:6f:63:02:0f:8b:da:5a:
1f:8f:da:cf
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVHQomrffuhICQ9zUIo5cEBirio0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MDZaFw0yMzA5MjUxMDAwMDZaMDMxMTAvBgNV
BAMTKEVFQUJGQjVFQzY2NTczRkFBMTAyMzBCRDhBMzM4OUMzRDg5MTNDOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfY1O3T4uhYXLFMuShFT1YoVqq
UOaiwHExIYQ4ge9GgxR/g+OnJZbOMWpt9dtJuryjIUz/wFuj87mKBq8R2RmGNZ1K
U2cLWwifJaHLHKADdjVXlY9SS7JRWp5fNkd3yFJleTPGrt5A1HtDPoLCNT+fVAU6
ctQZ2VANDUuM6NCA4TqXU4FU5XwWZlu/QZS9OapuLA24eLoBwdi70v3SeSOIaqFt
gOn5yaH6Z5lRmNJBkW4wtOhHg7CYLvhhx9CXjzePF3X8X9V6N+U1FGyNCAKikJvu
cp8ZMKOTlm7LFqbAOUy4g+k5DHXXLWQsqdB3Z7ZohmRfURgBdadmAtwcMlZDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU7qv7XsZlc/qhAjC9ijOJw9iRPJUwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2NTM1M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
5TANBgkqhkiG9w0BAQsFAAOCAQEAV2TK+zUqLKghDB2w7HIwsnm3ZZ5EIUPrENq4
WhtXVmUlV7eS1EXK1bmSbvGtwOYFQuPyAI4yr0ETT2Rw8dMoh9T1ULrLmpnA/v5Y
U1ENMw/5ytsM0/dSRipgVx/IrGRxpdNr0b1TUXFsC3firEmv/giCGOkZIIyoAmbG
clGYbrjIiYkGO/r//OchpOqaYP3f+Vfm82pKzu/IX3sxMdpWN9xrbgajIGnAMn7b
QFe0GwwbrT5ephtmDsOIzJpsemkohecIDtNSnxenjJZ0l2VGRTB+V7Uw0H3lXRS8
vjIDdGBrFfaUdxDF97Ny9CIlIF6Mk+fpuNFvYwIPi9paH4/azw==
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:17 2025 by rpki-client