Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3235633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: l1/Sse8tBY3Z3T58HmKxMEdRw1jtjNCT87w7honIFQc=
Subject key identifier: F8:E5:B9:FE:E7:05:4D:30:B2:81:10:2D:69:DF:AD:C9:1B:D5:8A:66
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3650403ACE6D71F9D631FA0B904509CA160FA1A4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:01 +0000
ROA not before: Mon 26 Sep 2022 09:55:01 +0000
ROA not after: Mon 25 Sep 2023 10:00:01 +0000
asID: 59282
IP address blocks: 2400:d680:25c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:50:40:3a:ce:6d:71:f9:d6:31:fa:0b:90:45:09:ca:16:0f:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:01 2022 GMT
Not After : Sep 25 10:00:01 2023 GMT
Subject: CN=F8E5B9FEE7054D30B281102D69DFADC91BD58A66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:6f:87:e4:1d:fa:10:8b:ca:22:c7:6b:ea:
93:3d:e2:77:79:a5:67:1b:bf:e8:c5:f8:f0:3c:af:
79:e8:83:2f:e5:f2:0c:d4:99:57:7b:af:39:e1:19:
d7:d8:9b:00:0c:42:57:e2:4c:45:8d:92:24:5c:1a:
c3:72:aa:a5:15:38:52:ba:e3:9f:33:b6:92:84:46:
38:db:12:ad:5e:d2:fb:bb:1a:fe:3d:f2:42:5e:8b:
ea:76:87:59:b1:76:49:a3:fa:1a:b5:72:b3:11:fc:
d2:f5:75:3f:6b:ab:56:07:88:97:92:2d:52:66:f5:
80:da:fa:63:85:73:a2:92:d5:ba:91:06:00:12:8c:
53:88:8d:f9:9f:90:1b:88:ef:40:8f:9e:2b:ce:6e:
48:94:59:32:48:36:14:4d:f4:b6:e8:bd:7e:8a:85:
6b:4e:cb:86:14:d7:be:04:ed:06:28:ce:28:94:8d:
6f:60:f5:ae:11:67:d0:13:4a:a8:1d:ae:7e:a2:d5:
d2:13:6f:79:7e:d8:33:d4:72:63:67:f9:db:da:eb:
8d:6a:7a:fe:6e:1b:fa:f3:f4:3c:07:51:85:85:c1:
8c:5e:6f:0c:6c:6c:22:07:e0:c7:3d:d4:bf:0a:fd:
03:ec:aa:e5:09:57:5d:9d:c9:a8:ab:ea:d8:3d:08:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:B9:FE:E7:05:4D:30:B2:81:10:2D:69:DF:AD:C9:1B:D5:8A:66
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3235633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:25c::/48
Signature Algorithm: sha256WithRSAEncryption
3d:75:f1:d8:32:ba:85:e5:f9:87:ce:09:0f:29:ed:38:4f:5e:
c7:1e:29:9a:8a:45:68:47:25:e0:9e:67:69:67:a1:de:ad:9c:
be:9a:e3:b2:67:15:6b:8c:c6:5e:0f:1f:9f:66:d0:4d:e5:a5:
50:2a:10:c2:7b:7d:5a:02:34:60:3a:02:0b:dd:d8:12:c1:03:
23:db:d8:d9:ee:dd:fd:cb:c3:e2:56:f0:84:34:3a:ab:31:f9:
e9:ca:ae:54:1c:52:cb:e3:1a:84:36:d8:f5:86:57:ab:80:b3:
e4:41:8f:27:bb:06:9e:35:ce:15:d7:c1:27:99:c1:a0:06:d7:
22:c4:a4:cd:41:45:90:5d:03:10:9e:5b:eb:21:91:ca:7f:fa:
cb:bf:89:60:08:60:1d:2f:bd:0b:1e:83:96:f6:c0:a6:93:05:
7b:f1:b4:9b:81:e3:31:06:89:26:2e:d4:53:24:65:5b:cf:52:
6d:fc:23:73:fb:ad:42:6b:61:3a:bd:97:d9:c7:b4:46:11:80:
94:b9:5f:d0:0e:bf:6f:79:96:c7:53:3d:22:11:74:66:76:f4:
5e:3d:54:d7:88:3a:8f:ce:2d:aa:55:eb:f3:b7:2f:8e:97:e6:
31:ca:33:e5:2c:bc:dc:75:f5:10:05:e4:d7:7d:48:56:6c:68:
4a:8d:85:92
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNlBAOs5tcfnWMfoLkEUJyhYPoaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MDFaFw0yMzA5MjUxMDAwMDFaMDMxMTAvBgNV
BAMTKEY4RTVCOUZFRTcwNTREMzBCMjgxMTAyRDY5REZBREM5MUJENThBNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoh2+H5B36EIvKIsdr6pM94nd5
pWcbv+jF+PA8r3nogy/l8gzUmVd7rznhGdfYmwAMQlfiTEWNkiRcGsNyqqUVOFK6
458ztpKERjjbEq1e0vu7Gv498kJei+p2h1mxdkmj+hq1crMR/NL1dT9rq1YHiJeS
LVJm9YDa+mOFc6KS1bqRBgASjFOIjfmfkBuI70CPnivObkiUWTJINhRN9LbovX6K
hWtOy4YU174E7QYoziiUjW9g9a4RZ9ATSqgdrn6i1dITb3l+2DPUcmNn+dva641q
ev5uG/rz9DwHUYWFwYxebwxsbCIH4Mc91L8K/QPsquUJV12dyair6tg9CBCpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+OW5/ucFTTCygRAtad+tyRvVimYwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzNTYzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
XDANBgkqhkiG9w0BAQsFAAOCAQEAPXXx2DK6heX5h84JDyntOE9exx4pmopFaEcl
4J5naWeh3q2cvprjsmcVa4zGXg8fn2bQTeWlUCoQwnt9WgI0YDoCC93YEsEDI9vY
2e7d/cvD4lbwhDQ6qzH56cquVBxSy+MahDbY9YZXq4Cz5EGPJ7sGnjXOFdfBJ5nB
oAbXIsSkzUFFkF0DEJ5b6yGRyn/6y7+JYAhgHS+9Cx6DlvbAppMFe/G0m4HjMQaJ
Ji7UUyRlW89Sbfwjc/utQmthOr2X2ce0RhGAlLlf0A6/b3mWx1M9IhF0Znb0Xj1U
14g6j84tqlXr87cvjpfmMcoz5Sy83HX1EAXk131IVmxoSo2Fkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org