Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230343a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3230343a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0t3wJfe9Fz59UVdnFwppbi4pQwnigM/yAjt4+IcFpe0=
Subject key identifier: 63:0A:60:F6:06:1E:66:DA:FE:C5:86:53:54:3D:9B:90:D8:5E:F3:B2
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2857F6928A0CCBEFC3F97E48846A39EFED758513
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230343a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:29 +0000
ROA not before: Mon 26 Sep 2022 07:56:29 +0000
ROA not after: Mon 25 Sep 2023 08:01:29 +0000
asID: 59282
IP address blocks: 2400:d680:204::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:57:f6:92:8a:0c:cb:ef:c3:f9:7e:48:84:6a:39:ef:ed:75:85:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:29 2022 GMT
Not After : Sep 25 08:01:29 2023 GMT
Subject: CN=630A60F6061E66DAFEC58653543D9B90D85EF3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:f3:1c:29:85:2f:77:81:e1:78:73:7d:1d:
76:64:61:ad:d0:8b:43:85:2f:27:84:0e:38:76:c5:
92:77:a0:73:9a:bb:b1:92:de:df:44:a1:11:50:b6:
ab:17:41:c2:53:f2:54:b5:84:68:2a:a7:28:06:e0:
69:d0:73:85:70:bf:30:7d:b8:0a:1d:c5:92:e4:28:
d2:a9:67:9e:9b:09:c8:92:35:a8:a9:2e:78:4a:2e:
29:26:8f:25:1d:20:69:20:f7:9a:4e:ce:68:2f:d6:
62:6c:89:70:0b:b3:f6:47:78:1a:f9:97:e8:a4:a3:
33:56:74:00:2a:20:d4:8b:9d:4e:73:78:7f:e4:f6:
e9:7c:eb:62:d4:cb:51:2d:3d:7a:0b:35:65:4f:a9:
29:db:c0:ce:84:c0:87:31:58:98:19:10:53:f4:b9:
60:bd:31:e3:ef:56:97:fe:20:e3:e6:5b:c2:51:41:
23:86:cc:16:ff:2b:10:00:77:ee:0d:97:f9:d3:7e:
43:a6:d4:2a:53:83:5f:6b:54:fc:7b:69:b5:ab:4c:
44:95:2f:f9:b8:e0:14:26:dc:71:21:4f:58:7c:2c:
10:fe:68:c5:d5:4a:5f:e4:de:be:af:02:45:b6:71:
a1:35:5e:58:18:fd:74:e3:da:48:f3:15:8d:2d:5c:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:60:F6:06:1E:66:DA:FE:C5:86:53:54:3D:9B:90:D8:5E:F3:B2
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3230343a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:204::/48
Signature Algorithm: sha256WithRSAEncryption
8e:22:86:d1:cf:62:be:28:a1:09:73:77:8e:14:65:47:f7:79:
5f:c4:c0:c8:87:f4:d8:74:07:06:7c:9f:1a:bb:3b:26:5b:18:
25:1b:56:ed:ea:9e:3e:7b:6d:0b:71:55:3c:79:d8:a6:63:ba:
f2:e1:46:0b:d3:5e:e3:74:ca:59:53:98:1b:3f:33:4a:67:7f:
07:1a:ca:18:6d:0d:c5:eb:6c:41:3f:98:c2:d6:34:0d:7d:4b:
b5:20:93:c1:50:9a:55:34:be:6a:28:b7:0c:11:65:86:e7:c5:
90:c7:b0:67:cd:01:fd:16:7a:7d:27:6a:fd:82:1f:87:6b:1b:
e9:56:7e:d7:94:48:f5:21:a4:b9:c7:10:7a:c6:b1:48:d4:b5:
1e:66:47:81:32:6e:eb:e6:37:e4:13:75:e5:a5:18:46:84:97:
b3:12:72:23:f2:d1:13:60:89:29:be:ad:c5:35:16:f3:97:8c:
5d:28:fb:3b:ad:21:08:c5:81:30:d2:f9:bb:78:31:36:8a:82:
73:11:8f:eb:9e:69:f1:62:6a:cc:9d:b5:84:cb:01:d1:7b:fc:
eb:fb:49:63:1d:2b:d3:c7:f4:f8:d2:95:e8:71:e5:ee:56:67:
3a:dd:64:1e:80:0e:3e:72:10:1d:d1:f8:fb:fb:d6:0f:78:9d:
74:59:31:65
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUKFf2kooMy+/D+X5IhGo57+11hRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2MjlaFw0yMzA5MjUwODAxMjlaMDMxMTAvBgNV
BAMTKDYzMEE2MEY2MDYxRTY2REFGRUM1ODY1MzU0M0Q5QjkwRDg1RUYzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZPMcKYUvd4HheHN9HXZkYa3Q
i0OFLyeEDjh2xZJ3oHOau7GS3t9EoRFQtqsXQcJT8lS1hGgqpygG4GnQc4VwvzB9
uAodxZLkKNKpZ56bCciSNaipLnhKLikmjyUdIGkg95pOzmgv1mJsiXALs/ZHeBr5
l+ikozNWdAAqINSLnU5zeH/k9ul862LUy1EtPXoLNWVPqSnbwM6EwIcxWJgZEFP0
uWC9MePvVpf+IOPmW8JRQSOGzBb/KxAAd+4Nl/nTfkOm1CpTg19rVPx7abWrTESV
L/m44BQm3HEhT1h8LBD+aMXVSl/k3r6vAkW2caE1XlgY/XTj2kjzFY0tXMUPAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUYwpg9gYeZtr+xYZTVD2bkNhe87IwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzMDM0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
BDANBgkqhkiG9w0BAQsFAAOCAQEAjiKG0c9iviihCXN3jhRlR/d5X8TAyIf02HQH
BnyfGrs7JlsYJRtW7eqePnttC3FVPHnYpmO68uFGC9Ne43TKWVOYGz8zSmd/BxrK
GG0NxetsQT+YwtY0DX1LtSCTwVCaVTS+aii3DBFlhufFkMewZ80B/RZ6fSdq/YIf
h2sb6VZ+15RI9SGkuccQesaxSNS1HmZHgTJu6+Y35BN15aUYRoSXsxJyI/LRE2CJ
Kb6txTUW85eMXSj7O60hCMWBMNL5u3gxNoqCcxGP655p8WJqzJ21hMsB0Xv86/tJ
Yx0r08f0+NKV6HHl7lZnOt1kHoAOPnIQHdH4+/vWD3iddFkxZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org