Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3233663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: lOMdPx2KDn8+ua4ALOcoSFN4aeJqToKHTkTHC78lAus=
Subject key identifier: 57:C3:9F:49:A9:FA:DB:CD:07:A5:8C:9A:C8:F7:EB:7F:D2:FF:A9:65
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 371748ADD7F6E31741C38CEEBFEEBFBA674E1401
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:03 +0000
ROA not before: Mon 26 Sep 2022 09:55:03 +0000
ROA not after: Mon 25 Sep 2023 10:00:03 +0000
asID: 59282
IP address blocks: 2400:d680:23f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:17:48:ad:d7:f6:e3:17:41:c3:8c:ee:bf:ee:bf:ba:67:4e:14:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:03 2022 GMT
Not After : Sep 25 10:00:03 2023 GMT
Subject: CN=57C39F49A9FADBCD07A58C9AC8F7EB7FD2FFA965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:47:32:66:88:7e:90:09:a2:5c:94:e2:f4:
a5:9f:72:d9:da:51:06:3d:c1:dd:fb:f5:aa:d0:ff:
cb:d3:96:25:ee:73:48:4a:94:63:c3:56:76:96:44:
eb:ce:eb:09:60:64:a1:77:4a:f8:4e:e0:d6:94:72:
ec:81:4c:48:5f:f0:d5:bd:55:bd:d4:f8:ee:fe:c3:
08:6c:df:12:a1:08:f0:54:b1:73:45:a9:31:91:82:
5d:8b:78:56:db:16:f8:7c:fc:18:1e:f7:56:07:a0:
55:7a:1c:74:2d:15:4f:95:90:ff:b6:13:4a:90:c3:
c4:32:6a:bb:9a:9b:e7:3b:30:43:0e:de:9c:c4:06:
f2:65:02:bc:4c:db:37:2f:ab:fa:ec:3c:dd:95:7e:
38:1e:45:0b:4c:f3:b7:5a:2c:1c:56:a4:b0:18:8f:
60:9b:af:65:3a:f5:28:bf:18:4a:57:39:c3:26:24:
a8:82:52:7d:cb:b6:67:cc:71:d7:e7:4b:2b:64:e7:
32:52:aa:c3:a6:40:aa:1b:a4:20:ac:1f:d8:d7:b2:
93:8b:b5:28:18:08:a7:da:e1:1f:a3:79:9b:c3:12:
a2:6f:17:94:f6:18:db:75:85:b4:29:aa:3a:b5:30:
3a:a4:76:e8:03:a3:84:84:86:5e:08:0c:e0:c7:66:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C3:9F:49:A9:FA:DB:CD:07:A5:8C:9A:C8:F7:EB:7F:D2:FF:A9:65
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:23f::/48
Signature Algorithm: sha256WithRSAEncryption
c8:b6:f1:98:04:2d:3c:61:aa:0d:c1:b1:65:f6:3b:55:2a:c1:
55:ad:16:9d:0b:f2:c4:cb:e3:81:15:68:83:08:f2:32:2c:11:
d6:ca:04:df:45:85:83:c7:cb:ac:71:c2:d7:a1:ed:a2:0d:c4:
e8:4a:60:e4:3d:bd:19:27:74:03:e4:90:07:73:63:07:6e:a6:
3e:8b:cf:d2:2c:7d:2e:b6:8a:2c:f2:3b:d8:ba:e8:3e:c7:5a:
bf:e5:11:87:c2:19:ef:b2:f0:cf:8a:d0:2d:f2:2d:8e:4f:51:
cd:9c:e2:4b:17:86:3a:b2:bb:df:ef:f6:ac:91:1b:85:bc:88:
f6:2e:a6:5f:95:55:d2:76:03:8f:9a:a4:e3:fa:a3:57:ab:9f:
d8:94:b0:47:34:9a:0c:82:eb:70:c5:fb:5c:6d:6e:aa:fe:d9:
a3:f3:61:83:42:d1:9b:60:63:ec:5d:06:43:6f:41:bd:67:5f:
12:70:6f:c8:c3:36:49:af:84:16:0f:02:16:a2:49:8a:1a:52:
09:24:89:82:4e:47:30:7d:55:fe:cd:1c:5e:47:b4:21:ae:7d:
56:3e:0e:d9:15:99:25:e8:37:a9:ea:5d:f5:dc:41:69:6a:c9:
f2:45:66:8e:91:3b:63:ae:b9:a0:58:7d:c2:7b:21:9a:29:60:
70:07:10:80
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNxdIrdf24xdBw4zuv+6/umdOFAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MDNaFw0yMzA5MjUxMDAwMDNaMDMxMTAvBgNV
BAMTKDU3QzM5RjQ5QTlGQURCQ0QwN0E1OEM5QUM4RjdFQjdGRDJGRkE5NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6wEcyZoh+kAmiXJTi9KWfctna
UQY9wd379arQ/8vTliXuc0hKlGPDVnaWROvO6wlgZKF3SvhO4NaUcuyBTEhf8NW9
Vb3U+O7+wwhs3xKhCPBUsXNFqTGRgl2LeFbbFvh8/Bge91YHoFV6HHQtFU+VkP+2
E0qQw8Qyaruam+c7MEMO3pzEBvJlArxM2zcvq/rsPN2VfjgeRQtM87daLBxWpLAY
j2Cbr2U69Si/GEpXOcMmJKiCUn3LtmfMcdfnSytk5zJSqsOmQKobpCCsH9jXspOL
tSgYCKfa4R+jeZvDEqJvF5T2GNt1hbQpqjq1MDqkdugDo4SEhl4IDODHZs5VAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUV8OfSan6280HpYyayPfrf9L/qWUwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzMzY2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
PzANBgkqhkiG9w0BAQsFAAOCAQEAyLbxmAQtPGGqDcGxZfY7VSrBVa0WnQvyxMvj
gRVogwjyMiwR1soE30WFg8fLrHHC16Htog3E6Epg5D29GSd0A+SQB3NjB26mPovP
0ix9LraKLPI72LroPsdav+URh8IZ77Lwz4rQLfItjk9RzZziSxeGOrK73+/2rJEb
hbyI9i6mX5VV0nYDj5qk4/qjV6uf2JSwRzSaDILrcMX7XG1uqv7Zo/Nhg0LRm2Bj
7F0GQ29BvWdfEnBvyMM2Sa+EFg8CFqJJihpSCSSJgk5HMH1V/s0cXke0Ia59Vj4O
2RWZJeg3qepd9dxBaWrJ8kVmjpE7Y665oFh9wnshmilgcAcQgA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org