Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3166363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: jQgyOsYH8Z8Ttvgs2KkVecLIiAcsxmIOS+I9t4hzss8=
Subject key identifier: 2A:0C:59:F6:3B:AC:78:38:9A:0F:D5:3C:5C:A4:CC:5F:7D:63:A1:BD
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 503B2CCB4A603DBF17FDC398DB797F25E043FA2E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:28 +0000
ROA not before: Mon 26 Sep 2022 09:55:28 +0000
ROA not after: Mon 25 Sep 2023 10:00:28 +0000
asID: 59282
IP address blocks: 2400:d680:1f6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3b:2c:cb:4a:60:3d:bf:17:fd:c3:98:db:79:7f:25:e0:43:fa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:28 2022 GMT
Not After : Sep 25 10:00:28 2023 GMT
Subject: CN=2A0C59F63BAC78389A0FD53C5CA4CC5F7D63A1BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d4:b9:26:0d:23:cb:70:8b:18:ec:d6:24:05:
e8:df:db:a3:02:11:e7:9b:c9:ef:ce:7b:ad:56:37:
3b:38:76:df:64:9b:1c:72:cc:13:87:54:5d:86:7b:
e8:08:a6:21:6c:8d:98:f0:88:f3:d8:89:af:49:7f:
ba:b5:f1:c7:d6:c8:48:fa:9a:56:a7:c5:17:6a:de:
27:53:99:71:76:ed:61:75:be:49:a9:c9:7a:72:f2:
fa:2f:b6:3e:79:22:20:22:e7:06:35:57:02:76:34:
c5:23:cc:43:58:ae:99:00:e4:ad:32:b7:a9:00:2a:
04:20:2f:c0:12:3a:cd:2a:d3:b6:7f:f1:2c:21:13:
55:11:d5:5e:91:b0:14:47:8b:a1:0d:47:b5:7c:4a:
5c:fc:70:fb:85:d5:84:69:04:89:09:6a:b5:03:f8:
88:c8:89:e3:e5:69:f5:f8:d5:29:ab:57:7a:fe:9a:
b3:9a:a0:56:9b:3a:e0:97:ba:31:11:26:8f:ad:23:
f1:53:ae:c2:96:b4:e3:7e:6d:24:96:14:48:35:a5:
06:83:10:d0:1f:f4:7d:6c:a2:44:48:f7:3b:75:8a:
cb:98:cc:4e:fd:ed:4a:76:c9:5c:24:b7:5a:57:32:
15:22:36:5c:f8:e3:4a:16:c0:ba:dd:51:11:a1:21:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0C:59:F6:3B:AC:78:38:9A:0F:D5:3C:5C:A4:CC:5F:7D:63:A1:BD
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1f6::/48
Signature Algorithm: sha256WithRSAEncryption
82:00:e9:81:f5:35:ad:81:b2:a8:65:54:d7:3d:43:7e:45:7d:
4e:69:71:ff:de:84:0c:3a:c4:33:61:79:58:70:25:c7:ab:df:
ae:2b:24:84:01:6e:5c:cf:7e:51:22:08:9b:8f:48:f1:e1:a9:
a6:be:fe:35:c4:90:ea:2f:76:ab:b7:92:7f:18:7b:b2:67:b2:
06:07:2f:3f:11:a6:dc:77:4c:21:54:00:36:97:5d:8c:79:b2:
21:48:bf:29:f9:a3:26:b7:ec:a9:6c:5f:5f:7a:b0:43:8d:da:
70:32:f9:45:ec:38:c5:1c:8e:bc:ed:48:68:8b:b0:b9:1b:5f:
76:c0:b3:e1:50:a3:2b:4b:89:e4:0b:c9:9a:77:b7:05:d9:2a:
68:42:80:04:a4:d1:cb:b0:70:cb:8e:13:2b:9c:e7:8c:58:cf:
3d:83:d9:b0:fb:34:12:56:67:1b:c9:8b:ef:ea:e6:be:76:db:
c6:8b:4f:81:7f:30:35:39:04:60:6c:76:54:da:c9:69:c7:1c:
83:00:81:05:15:07:35:6e:72:74:49:9a:f2:83:8d:d2:9f:09:
aa:8f:a7:08:8e:80:13:a5:1d:94:b1:0d:b5:52:df:37:de:b9:
70:31:32:54:1e:ce:f1:0a:e2:e1:86:57:c9:24:31:f1:aa:1b:
7b:b7:7e:8a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUDssy0pgPb8X/cOY23l/JeBD+i4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MjhaFw0yMzA5MjUxMDAwMjhaMDMxMTAvBgNV
BAMTKDJBMEM1OUY2M0JBQzc4Mzg5QTBGRDUzQzVDQTRDQzVGN0Q2M0ExQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm1LkmDSPLcIsY7NYkBejf26MC
Eeebye/Oe61WNzs4dt9kmxxyzBOHVF2Ge+gIpiFsjZjwiPPYia9Jf7q18cfWyEj6
mlanxRdq3idTmXF27WF1vkmpyXpy8vovtj55IiAi5wY1VwJ2NMUjzENYrpkA5K0y
t6kAKgQgL8ASOs0q07Z/8SwhE1UR1V6RsBRHi6ENR7V8Slz8cPuF1YRpBIkJarUD
+IjIiePlafX41SmrV3r+mrOaoFabOuCXujERJo+tI/FTrsKWtON+bSSWFEg1pQaD
ENAf9H1sokRI9zt1isuYzE797Up2yVwkt1pXMhUiNlz440oWwLrdURGhIblvAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUKgxZ9juseDiaD9U8XKTMX31job0wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2NjM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
9jANBgkqhkiG9w0BAQsFAAOCAQEAggDpgfU1rYGyqGVU1z1DfkV9Tmlx/96EDDrE
M2F5WHAlx6vfriskhAFuXM9+USIIm49I8eGppr7+NcSQ6i92q7eSfxh7smeyBgcv
PxGm3HdMIVQANpddjHmyIUi/KfmjJrfsqWxfX3qwQ43acDL5Rew4xRyOvO1IaIuw
uRtfdsCz4VCjK0uJ5AvJmne3BdkqaEKABKTRy7Bwy44TK5znjFjPPYPZsPs0ElZn
G8mL7+rmvnbbxotPgX8wNTkEYGx2VNrJacccgwCBBRUHNW5ydEma8oON0p8Jqo+n
CI6AE6UdlLENtVLfN965cDEyVB7O8Qri4YZXySQx8aobe7d+ig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org