Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3236363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 1krZtKqZ2tuzlAT+tZ6kVXMJQJtM0adv5L9NW5mEhPY=
Subject key identifier: F3:27:82:26:AE:FF:7A:B5:3C:86:7E:2D:AF:B8:FA:AD:3B:D2:03:C9
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 64B71DDAADA61A99033E2F7E940F10F60571D3F5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 10:00:07 +0000
ROA not before: Mon 26 Sep 2022 09:55:07 +0000
ROA not after: Mon 25 Sep 2023 10:00:07 +0000
asID: 59282
IP address blocks: 2400:d680:266::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b7:1d:da:ad:a6:1a:99:03:3e:2f:7e:94:0f:10:f6:05:71:d3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 09:55:07 2022 GMT
Not After : Sep 25 10:00:07 2023 GMT
Subject: CN=F3278226AEFF7AB53C867E2DAFB8FAAD3BD203C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:a7:bb:d6:23:74:6a:75:44:66:16:cd:99:
e4:84:72:d1:84:62:c7:aa:9c:bd:8d:47:41:c1:ec:
c2:61:76:3b:d8:6f:11:da:55:d1:46:2f:08:38:a9:
23:10:12:45:da:85:02:af:c6:71:34:c3:57:9b:1a:
41:5a:35:a8:7b:a9:6c:4b:f0:cd:cc:97:e9:82:ec:
da:af:66:ec:ff:f6:87:1c:c8:86:ac:16:8a:b7:27:
ef:28:4d:b0:c9:ea:e2:0e:49:53:cc:0a:f0:f5:12:
9c:0b:82:06:86:a6:01:22:d8:c8:40:d9:97:c1:78:
72:62:43:3a:b3:7d:a0:36:7a:d5:22:87:08:e6:3d:
c1:4d:a1:8f:ae:26:b9:5b:b7:b0:54:b7:71:60:aa:
9b:08:f4:37:43:f8:0c:9d:0a:70:bf:0e:73:7f:3f:
d8:ac:42:f0:f5:c5:1a:e2:69:05:34:b1:fc:7d:ac:
55:12:29:fc:16:b6:69:89:fe:ac:d4:7a:dd:70:57:
96:b2:82:3a:3c:11:e8:8f:9d:82:a6:38:ee:54:ad:
b3:55:8d:d9:08:df:f3:b0:85:6c:da:35:47:15:f0:
05:5f:25:b8:cc:a4:54:de:91:ac:c2:0f:1b:3a:10:
40:d2:56:5b:bb:30:43:cf:0b:5b:47:2c:ce:4d:d5:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:27:82:26:AE:FF:7A:B5:3C:86:7E:2D:AF:B8:FA:AD:3B:D2:03:C9
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3236363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:266::/48
Signature Algorithm: sha256WithRSAEncryption
d5:94:f9:57:29:7f:60:1f:74:5b:1f:08:cb:61:78:13:d2:9b:
48:ed:ab:2d:92:12:d3:2a:d2:90:e8:88:47:14:46:c7:fe:7e:
7c:e6:d4:a8:e0:ad:54:a6:ee:f3:b6:f3:a3:52:cb:62:29:c9:
4b:95:8d:ae:e9:15:a6:12:5b:bb:9f:b1:19:f9:ea:d0:55:9f:
7d:48:15:dc:7f:fb:46:0b:65:22:d7:44:16:cf:ce:b8:e4:69:
db:26:92:e3:d5:64:71:9d:5a:17:f3:c7:81:1f:6e:95:9a:4f:
c9:14:be:8d:20:64:93:cb:a6:1a:6a:35:c9:a1:25:12:5e:db:
d2:b0:7f:50:aa:90:cf:81:16:aa:99:85:b5:f0:95:c2:56:27:
9e:c5:79:9c:57:0c:a8:a7:93:5b:bd:73:41:e1:7f:d0:ba:c8:
a5:16:f2:25:f1:ab:dc:2b:5f:a3:34:12:a2:c4:89:f3:2a:08:
ca:2f:b7:d8:79:ca:90:17:b6:45:a9:bc:37:35:3a:4f:3e:fa:
44:d1:85:2f:ca:65:4c:e5:d4:47:70:91:f4:ea:bf:37:0f:bb:
17:87:7e:dc:3d:1f:9c:71:a9:f6:92:2e:bc:88:e3:8f:9d:3b:
62:37:ad:f3:2a:2e:fd:26:87:fe:3b:3e:98:2c:18:51:06:ee:
cd:2d:7e:c7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUZLcd2q2mGpkDPi9+lA8Q9gVx0/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MDdaFw0yMzA5MjUxMDAwMDdaMDMxMTAvBgNV
BAMTKEYzMjc4MjI2QUVGRjdBQjUzQzg2N0UyREFGQjhGQUFEM0JEMjAzQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Jqe71iN0anVEZhbNmeSEctGE
YseqnL2NR0HB7MJhdjvYbxHaVdFGLwg4qSMQEkXahQKvxnE0w1ebGkFaNah7qWxL
8M3Ml+mC7NqvZuz/9occyIasFoq3J+8oTbDJ6uIOSVPMCvD1EpwLggaGpgEi2MhA
2ZfBeHJiQzqzfaA2etUihwjmPcFNoY+uJrlbt7BUt3FgqpsI9DdD+AydCnC/DnN/
P9isQvD1xRriaQU0sfx9rFUSKfwWtmmJ/qzUet1wV5aygjo8EeiPnYKmOO5UrbNV
jdkI3/OwhWzaNUcV8AVfJbjMpFTekazCDxs6EEDSVlu7MEPPC1tHLM5N1baDAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU8yeCJq7/erU8hn4tr7j6rTvSA8kwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzNjM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
ZjANBgkqhkiG9w0BAQsFAAOCAQEA1ZT5Vyl/YB90Wx8Iy2F4E9KbSO2rLZIS0yrS
kOiIRxRGx/5+fObUqOCtVKbu87bzo1LLYinJS5WNrukVphJbu5+xGfnq0FWffUgV
3H/7RgtlItdEFs/OuORp2yaS49VkcZ1aF/PHgR9ulZpPyRS+jSBkk8umGmo1yaEl
El7b0rB/UKqQz4EWqpmFtfCVwlYnnsV5nFcMqKeTW71zQeF/0LrIpRbyJfGr3Ctf
ozQSosSJ8yoIyi+32HnKkBe2Ram8NzU6Tz76RNGFL8plTOXUR3CR9Oq/Nw+7F4d+
3D0fnHGp9pIuvIjjj507Yjet8you/SaH/js+mCwYUQbuzS1+xw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org