Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3166663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: VMYhj7DsogiSsJ8bWRTenfLeswrJPIaMEXVowBGnsuQ=
Subject key identifier: 8C:38:06:D7:F3:79:53:68:36:19:1E:5B:20:C4:5D:27:EC:E7:F3:FF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4CF226E83496EAFCB3E6CDB6DEDA3B2DCFDCB538
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:33 +0000
ROA not before: Mon 26 Sep 2022 09:55:33 +0000
ROA not after: Mon 25 Sep 2023 10:00:33 +0000
asID: 59282
IP address blocks: 2400:d680:1ff::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f2:26:e8:34:96:ea:fc:b3:e6:cd:b6:de:da:3b:2d:cf:dc:b5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:33 2022 GMT
Not After : Sep 25 10:00:33 2023 GMT
Subject: CN=8C3806D7F379536836191E5B20C45D27ECE7F3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:e7:99:84:d1:81:6e:6b:b6:a0:c1:27:b3:
8a:c7:d0:c6:8b:4d:a9:47:63:c0:61:3d:95:8b:86:
20:7d:4d:76:35:0c:9b:0e:68:c6:5e:b3:be:dc:81:
24:09:23:52:35:fd:40:ff:57:2d:0c:96:ad:84:09:
9b:17:80:5e:ff:97:9a:50:06:f1:34:53:9d:1a:e7:
19:75:ec:dc:eb:f3:0a:1a:8a:84:ff:83:a5:f8:f2:
7a:5c:01:c3:74:51:77:72:db:ce:7b:e7:d3:32:e2:
41:5c:df:26:2f:d0:91:c8:43:a6:3d:b7:7f:23:e1:
4a:ed:03:60:7a:f1:e1:50:72:b2:1c:67:b1:68:20:
28:79:a4:e7:e3:a4:f4:a4:29:41:4f:47:82:97:8a:
3c:97:7a:68:c8:00:c2:4a:13:27:90:3a:94:f9:b0:
0e:fd:34:bd:eb:0c:d0:3c:85:57:3a:28:0e:7b:85:
1d:ba:44:03:b2:5d:0b:fa:60:b6:1f:14:88:56:fe:
39:2a:95:95:36:c1:ea:40:e3:44:e5:2d:a4:ca:c1:
cb:7e:93:30:ce:41:39:d4:3a:31:b3:03:41:32:a4:
9b:9e:26:80:1a:78:d4:40:3e:ef:79:39:5f:44:b6:
54:f7:e3:54:54:92:9b:73:4f:33:22:76:97:2a:f4:
fc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:06:D7:F3:79:53:68:36:19:1E:5B:20:C4:5D:27:EC:E7:F3:FF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3166663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1ff::/48
Signature Algorithm: sha256WithRSAEncryption
56:9b:72:87:f3:36:46:c1:47:b8:43:00:35:3e:ce:1d:52:ef:
63:cf:10:d2:ed:5c:1a:f3:5b:7e:c0:2b:cd:12:82:cb:ae:74:
64:c7:c6:99:a8:51:79:d5:13:d6:ff:17:1c:db:03:56:c9:b9:
cd:9a:31:79:d4:14:e7:cb:87:ce:e7:0d:af:c8:f2:ed:49:ec:
6d:79:80:04:78:c9:70:4f:5b:e2:4d:d9:17:be:61:42:42:5b:
49:dd:df:21:a6:7e:5f:23:ad:40:a3:50:1a:5b:c8:55:15:cd:
e8:b7:38:44:20:d0:c6:6b:88:ac:84:f2:01:2a:91:87:97:00:
32:57:97:5c:02:52:e5:90:7b:56:7b:b0:8e:cb:fe:15:30:96:
a5:26:2e:b5:ac:f3:bb:5e:94:72:b7:b0:57:7e:53:06:8c:8d:
55:8f:3c:67:90:3e:88:e4:0a:40:c8:8b:20:44:91:04:02:95:
b7:f7:fc:30:5c:21:bd:5b:32:98:b3:a4:13:58:4d:c2:c5:a1:
01:28:1c:50:ce:4b:48:c0:a3:6e:1f:73:f2:f3:94:c0:0d:48:
ab:fc:86:da:fe:55:6f:11:7c:82:d7:ac:c4:a2:a8:50:00:1b:
18:64:b3:a0:8c:66:f1:a3:31:b9:0e:67:cc:55:2a:69:93:39:
e6:f7:b1:ed
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUTPIm6DSW6vyz5s223to7Lc/ctTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MzNaFw0yMzA5MjUxMDAwMzNaMDMxMTAvBgNV
BAMTKDhDMzgwNkQ3RjM3OTUzNjgzNjE5MUU1QjIwQzQ1RDI3RUNFN0YzRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQx+eZhNGBbmu2oMEns4rH0MaL
TalHY8BhPZWLhiB9TXY1DJsOaMZes77cgSQJI1I1/UD/Vy0Mlq2ECZsXgF7/l5pQ
BvE0U50a5xl17Nzr8woaioT/g6X48npcAcN0UXdy285759My4kFc3yYv0JHIQ6Y9
t38j4UrtA2B68eFQcrIcZ7FoICh5pOfjpPSkKUFPR4KXijyXemjIAMJKEyeQOpT5
sA79NL3rDNA8hVc6KA57hR26RAOyXQv6YLYfFIhW/jkqlZU2wepA40TlLaTKwct+
kzDOQTnUOjGzA0EypJueJoAaeNRAPu95OV9EtlT341RUkptzTzMidpcq9Pz5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUjDgG1/N5U2g2GR5bIMRdJ+zn8/8wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzE2NjY2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAB
/zANBgkqhkiG9w0BAQsFAAOCAQEAVptyh/M2RsFHuEMANT7OHVLvY88Q0u1cGvNb
fsArzRKCy650ZMfGmahRedUT1v8XHNsDVsm5zZoxedQU58uHzucNr8jy7UnsbXmA
BHjJcE9b4k3ZF75hQkJbSd3fIaZ+XyOtQKNQGlvIVRXN6Lc4RCDQxmuIrITyASqR
h5cAMleXXAJS5ZB7Vnuwjsv+FTCWpSYutazzu16UcrewV35TBoyNVY88Z5A+iOQK
QMiLIESRBAKVt/f8MFwhvVsymLOkE1hNwsWhASgcUM5LSMCjbh9z8vOUwA1Iq/yG
2v5VbxF8gtesxKKoUAAbGGSzoIxm8aMxuQ5nzFUqaZM55vex7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org