Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3237363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: rnHE8LNXTuF2J/p3B74VbehLmmTShkPQL/dQ0aWkJ9o=
Subject key identifier: 29:8A:0A:F0:B9:97:04:58:3F:C7:22:9D:01:D6:32:5F:B8:49:04:F0
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1B7A4ED7E01E20A0D2A210EC936A0B2C57302EC4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:13 +0000
ROA not before: Mon 26 Sep 2022 12:55:13 +0000
ROA not after: Mon 25 Sep 2023 13:00:13 +0000
asID: 59282
IP address blocks: 2400:d680:276::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7a:4e:d7:e0:1e:20:a0:d2:a2:10:ec:93:6a:0b:2c:57:30:2e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:13 2022 GMT
Not After : Sep 25 13:00:13 2023 GMT
Subject: CN=298A0AF0B99704583FC7229D01D6325FB84904F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:ce:98:9c:0b:14:c9:e9:1c:e7:bd:46:65:
c6:0e:92:06:d4:11:2a:c9:f8:c0:77:31:a2:ec:1e:
b1:af:3d:a2:e3:e7:a8:92:3b:28:18:2a:60:34:1d:
4a:02:60:85:e3:1d:f1:e5:1e:76:71:45:84:3c:ed:
db:94:d4:a0:2d:d9:4e:14:0b:10:90:3d:9b:b6:c6:
39:0e:22:9b:43:e6:c1:36:62:ba:19:0c:1f:68:6d:
b6:9a:e3:71:bc:68:55:b8:4f:ed:ad:87:29:e8:46:
36:5f:0d:f3:46:fe:79:d9:c5:c2:39:f8:35:77:0b:
da:e5:53:bd:46:be:01:1c:1d:79:19:c0:ec:74:8a:
f5:55:fc:58:79:5e:2b:4f:6c:e1:88:ea:84:ac:06:
aa:be:df:c5:45:2e:7e:8e:08:a3:b4:71:6f:41:a8:
26:b1:6d:8e:76:94:2a:93:54:14:6e:b4:15:c3:a6:
44:6d:9d:fc:7d:ba:fe:d3:a7:7d:e5:3d:47:a0:50:
47:b0:a2:6a:29:16:55:0f:a4:de:50:c8:97:64:b5:
4d:87:2b:e3:be:4e:43:e3:33:0c:b0:37:7a:da:49:
e8:e9:34:a5:9f:26:f2:c2:97:a9:da:c1:f7:90:ef:
ef:dd:ea:5a:37:9f:59:2a:be:01:49:e3:15:10:7f:
14:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8A:0A:F0:B9:97:04:58:3F:C7:22:9D:01:D6:32:5F:B8:49:04:F0
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:276::/48
Signature Algorithm: sha256WithRSAEncryption
14:47:46:39:21:c3:8b:1c:f4:53:8e:47:8b:9d:00:a1:ac:1b:
b1:41:4a:41:93:27:01:3c:37:db:10:69:00:85:60:00:43:fc:
1d:3d:d9:bb:3a:13:b0:f6:bd:cc:7b:fd:6f:d0:b3:e4:70:4d:
3d:9e:94:1d:ed:e2:48:3e:9c:74:25:97:fa:c5:a2:36:8c:73:
19:d5:df:fa:85:09:ef:7e:f5:50:65:cb:dc:77:56:2a:6b:ad:
64:da:0f:7e:3d:cf:92:97:fd:e5:92:b9:6a:4b:eb:58:cc:65:
cf:78:60:04:65:da:c5:ac:91:17:75:df:8e:22:9c:07:49:41:
c4:6d:d0:31:1c:b9:e2:51:53:0e:d8:ef:41:9c:c3:e8:55:44:
c3:fa:00:2d:cc:8f:ed:65:05:d4:3a:d4:56:f7:3a:00:95:09:
e0:99:62:22:21:cf:02:a8:45:ff:e5:50:81:81:c7:9a:3f:4d:
c9:83:d4:ec:58:bc:b2:d7:d6:78:f7:65:30:58:6b:39:b6:c0:
40:96:54:d7:e2:86:db:b6:bf:5e:40:da:31:06:c9:99:a9:8e:
e9:ef:a3:54:59:0d:d5:65:23:d0:18:14:91:40:c4:d2:a4:65:
cb:94:90:cd:4f:07:49:aa:64:42:f1:1c:af:51:a5:03:31:98:
44:62:51:ca
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUG3pO1+AeIKDSohDsk2oLLFcwLsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MTNaFw0yMzA5MjUxMzAwMTNaMDMxMTAvBgNV
BAMTKDI5OEEwQUYwQjk5NzA0NTgzRkM3MjI5RDAxRDYzMjVGQjg0OTA0RjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Os6YnAsUyekc571GZcYOkgbU
ESrJ+MB3MaLsHrGvPaLj56iSOygYKmA0HUoCYIXjHfHlHnZxRYQ87duU1KAt2U4U
CxCQPZu2xjkOIptD5sE2YroZDB9obbaa43G8aFW4T+2thynoRjZfDfNG/nnZxcI5
+DV3C9rlU71GvgEcHXkZwOx0ivVV/Fh5XitPbOGI6oSsBqq+38VFLn6OCKO0cW9B
qCaxbY52lCqTVBRutBXDpkRtnfx9uv7Tp33lPUegUEewomopFlUPpN5QyJdktU2H
K+O+TkPjMwywN3raSejpNKWfJvLCl6nawfeQ7+/d6lo3n1kqvgFJ4xUQfxSpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUKYoK8LmXBFg/xyKdAdYyX7hJBPAwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzNzM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
djANBgkqhkiG9w0BAQsFAAOCAQEAFEdGOSHDixz0U45Hi50AoawbsUFKQZMnATw3
2xBpAIVgAEP8HT3ZuzoTsPa9zHv9b9Cz5HBNPZ6UHe3iSD6cdCWX+sWiNoxzGdXf
+oUJ7371UGXL3HdWKmutZNoPfj3Pkpf95ZK5akvrWMxlz3hgBGXaxayRF3XfjiKc
B0lBxG3QMRy54lFTDtjvQZzD6FVEw/oALcyP7WUF1DrUVvc6AJUJ4JliIiHPAqhF
/+VQgYHHmj9NyYPU7Fi8stfWePdlMFhrObbAQJZU1+KG27a/XkDaMQbJmamO6e+j
VFkN1WUj0BgUkUDE0qRly5SQzU8HSapkQvEcr1GlAzGYRGJRyg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:39:37 2025 by rpki-client