Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3237383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 7/SR0dpRi5wEiXmThZrFZprSDQEC+p1n6zHOR3N88Go=
Subject key identifier: C3:FE:2F:16:F7:85:05:92:74:C6:ED:17:04:13:13:02:48:C7:4C:C2
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6E81E3B094F96FAA2D9CDCDE3C59712CFE2605A4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:17 +0000
ROA not before: Mon 26 Sep 2022 12:55:17 +0000
ROA not after: Mon 25 Sep 2023 13:00:17 +0000
asID: 59282
IP address blocks: 2400:d680:278::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:81:e3:b0:94:f9:6f:aa:2d:9c:dc:de:3c:59:71:2c:fe:26:05:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:17 2022 GMT
Not After : Sep 25 13:00:17 2023 GMT
Subject: CN=C3FE2F16F785059274C6ED170413130248C74CC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:6d:7a:c7:05:61:12:8e:34:8d:e8:94:87:
6e:cf:b3:2d:eb:cf:45:f2:b7:17:71:46:8f:3a:9f:
a2:0f:05:34:2e:c3:f0:4f:a3:00:05:12:6a:9a:f4:
4c:f2:4d:e2:f0:93:6d:f2:bb:69:f4:5d:e9:1e:b5:
58:d4:ed:c5:b5:0a:01:b6:1d:0e:72:a2:fb:3b:a6:
1b:3b:bb:68:d2:22:91:f3:ad:7b:47:6d:64:70:82:
45:9b:47:79:63:58:7b:a3:2d:4d:3f:32:e3:85:ab:
79:f6:d7:36:87:d3:23:3d:7e:7b:cc:38:6a:9d:e7:
73:76:ef:c1:af:35:8b:9e:69:47:db:62:70:1f:19:
3c:d6:2e:1c:51:63:9d:fe:39:95:ec:37:b1:a4:31:
da:c0:3d:bd:93:e6:5a:d8:21:a4:d3:df:f2:72:97:
56:86:c2:ee:7b:4b:d5:65:7d:15:61:4d:9d:aa:f5:
c5:b5:c8:0a:eb:43:7d:32:0a:f3:ea:45:b4:5a:1f:
b7:ce:51:8c:d4:5e:d8:5a:f1:b1:a6:3b:4d:0f:8f:
4b:21:5f:86:c0:eb:01:18:01:6e:dd:94:b3:39:93:
3c:a0:4f:4f:d3:7f:b1:6a:62:f9:bc:5b:20:18:71:
a1:ce:a5:e3:11:ae:78:df:94:93:ca:9e:01:f6:ad:
ce:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FE:2F:16:F7:85:05:92:74:C6:ED:17:04:13:13:02:48:C7:4C:C2
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:278::/48
Signature Algorithm: sha256WithRSAEncryption
94:4e:c7:c5:89:95:32:d9:b0:b3:70:68:72:8f:17:45:0a:f2:
d6:93:d3:ff:48:df:cb:2d:0a:5d:73:fe:49:1b:86:4b:e1:0a:
4d:4a:a7:43:23:7a:e9:7a:ae:36:7a:26:98:e9:12:c7:68:5f:
8d:09:a1:2b:8a:07:cb:5a:b4:be:af:a3:d3:20:28:5c:b9:67:
3b:0d:c1:9d:24:25:c7:7a:2b:c0:a8:65:2c:ec:94:ee:2a:94:
d0:c3:ed:7c:bb:b4:70:c2:a7:ad:c6:fc:22:9c:fa:dc:a0:35:
1f:77:8d:7f:d2:06:86:72:8b:32:b0:9a:55:d1:22:5f:4a:e2:
d2:f7:20:6c:d2:86:81:ef:67:3a:72:b5:68:ad:7e:33:a7:e8:
ac:b9:ba:43:5f:c9:d4:75:d4:3e:e4:bc:1c:2d:c1:53:8f:29:
94:56:ed:a8:11:bb:f1:05:c3:af:c7:72:ae:c7:40:cb:17:00:
30:f1:cf:1b:2d:67:7f:94:8a:ab:a4:86:f0:cd:4e:1d:ac:26:
cd:da:0e:f2:46:d1:b5:12:02:1a:12:36:fc:a2:1e:72:cd:60:
de:8d:b3:d4:cf:27:88:0d:54:5a:f7:d9:a7:af:28:75:47:1c:
16:53:b3:1b:4a:0d:21:0e:21:be:49:75:a0:c0:5c:2c:6d:ba:
d6:b9:ce:a7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUboHjsJT5b6otnNzePFlxLP4mBaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MTdaFw0yMzA5MjUxMzAwMTdaMDMxMTAvBgNV
BAMTKEMzRkUyRjE2Rjc4NTA1OTI3NEM2RUQxNzA0MTMxMzAyNDhDNzRDQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBL216xwVhEo40jeiUh27Psy3r
z0XytxdxRo86n6IPBTQuw/BPowAFEmqa9EzyTeLwk23yu2n0XeketVjU7cW1CgG2
HQ5yovs7phs7u2jSIpHzrXtHbWRwgkWbR3ljWHujLU0/MuOFq3n21zaH0yM9fnvM
OGqd53N278GvNYueaUfbYnAfGTzWLhxRY53+OZXsN7GkMdrAPb2T5lrYIaTT3/Jy
l1aGwu57S9VlfRVhTZ2q9cW1yArrQ30yCvPqRbRaH7fOUYzUXtha8bGmO00Pj0sh
X4bA6wEYAW7dlLM5kzygT0/Tf7FqYvm8WyAYcaHOpeMRrnjflJPKngH2rc61AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUw/4vFveFBZJ0xu0XBBMTAkjHTMIwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzNzM4M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
eDANBgkqhkiG9w0BAQsFAAOCAQEAlE7HxYmVMtmws3Boco8XRQry1pPT/0jfyy0K
XXP+SRuGS+EKTUqnQyN66XquNnommOkSx2hfjQmhK4oHy1q0vq+j0yAoXLlnOw3B
nSQlx3orwKhlLOyU7iqU0MPtfLu0cMKnrcb8Ipz63KA1H3eNf9IGhnKLMrCaVdEi
X0ri0vcgbNKGge9nOnK1aK1+M6forLm6Q1/J1HXUPuS8HC3BU48plFbtqBG78QXD
r8dyrsdAyxcAMPHPGy1nf5SKq6SG8M1OHawmzdoO8kbRtRICGhI2/KIecs1g3o2z
1M8niA1UWvfZp68odUccFlOzG0oNIQ4hvkl1oMBcLG261rnOpw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org