Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3237663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 4UTDFSqfmin3ZfBQB1vs7FfTfPR2SrYQ2m0KLt+6B3Q=
Subject key identifier: A5:44:64:8F:93:39:97:C4:BE:BD:F5:C6:40:6B:24:84:63:96:4C:E1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 470AF3DF5DB990B198920BAE131C5A5824D87C13
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:17 +0000
ROA not before: Mon 26 Sep 2022 12:55:17 +0000
ROA not after: Mon 25 Sep 2023 13:00:17 +0000
asID: 59282
IP address blocks: 2400:d680:27f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:0a:f3:df:5d:b9:90:b1:98:92:0b:ae:13:1c:5a:58:24:d8:7c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:17 2022 GMT
Not After : Sep 25 13:00:17 2023 GMT
Subject: CN=A544648F933997C4BEBDF5C6406B248463964CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:37:d3:9a:fc:d7:b8:81:04:90:cb:31:40:
ae:e4:fc:15:9f:a9:9d:71:9e:55:9d:9c:f4:58:73:
07:0d:ff:bf:94:c1:25:89:15:25:f7:13:5f:48:33:
03:12:a5:6d:00:3e:d2:3f:bb:f3:07:c3:db:1d:a9:
cc:8c:f6:ed:6b:35:e2:a3:e7:97:e4:93:ae:55:28:
1a:62:c8:8a:32:b1:89:0e:6f:ee:18:c1:9b:3a:01:
13:42:3f:0a:e8:a0:b4:48:0e:1c:fb:9a:e8:33:90:
20:5a:de:26:c5:8e:b5:30:8c:f3:a5:97:84:79:2a:
b1:0b:3c:1a:c7:1c:80:4c:ba:9a:eb:5f:f5:7a:a2:
4a:07:89:2a:58:21:16:02:e7:bd:89:88:cd:c9:85:
54:c7:9b:57:08:ee:a6:ba:92:f6:2e:20:36:d2:ed:
a4:fc:ef:4b:04:73:f2:f5:b1:7c:e5:81:c1:5f:b2:
71:41:2d:a5:44:1d:a5:ca:9c:41:cb:df:90:ca:f2:
aa:6f:6b:f1:26:3a:b2:e4:d6:56:10:82:0a:1a:4e:
38:5d:83:80:03:42:10:50:53:7c:9f:cc:ab:d8:13:
33:1b:b7:61:af:2f:6c:fa:9f:d4:1a:7f:77:94:1d:
5d:0b:d5:b1:75:81:52:69:66:79:9f:6a:92:d3:ad:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:44:64:8F:93:39:97:C4:BE:BD:F5:C6:40:6B:24:84:63:96:4C:E1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:27f::/48
Signature Algorithm: sha256WithRSAEncryption
8e:fb:c7:ab:2b:53:1d:79:91:22:0d:f5:2b:ea:5d:09:48:68:
6f:7a:ae:1f:61:c9:80:dc:6a:b3:81:68:e3:4e:93:d5:a6:0c:
55:ea:29:f4:6c:94:3b:e4:6d:9b:68:84:0e:c7:b6:c2:54:99:
2f:54:d8:58:78:ca:99:f3:18:30:c7:af:cb:bb:5f:5b:14:33:
21:4a:21:05:89:0b:83:f3:25:1c:20:57:6d:a8:64:5f:a2:59:
94:67:5c:04:d0:84:f4:64:02:53:23:32:5a:71:7b:e3:3e:24:
13:46:18:35:8a:6d:83:8e:0c:8a:68:53:b2:d0:16:97:41:4b:
48:06:b0:d4:dd:83:bf:34:d4:6f:4a:3c:b6:51:56:aa:8c:3f:
2c:97:98:67:96:ed:bf:0a:14:42:48:f6:82:f8:b4:4d:e1:77:
62:ac:9a:d2:be:c8:24:19:2c:8a:bb:86:ce:4a:96:3c:24:9f:
5c:45:64:3c:79:8d:99:dc:90:fc:46:5b:2e:ca:f9:17:2b:dd:
6a:15:da:cb:d8:75:c9:49:41:c5:93:82:3c:ae:33:79:e8:05:
51:df:d9:d0:0d:56:c7:3b:d1:c7:fc:f8:7c:66:28:86:ce:53:
9d:6e:db:b8:80:4a:8e:01:a0:a3:e0:68:71:ba:a2:e5:5e:4b:
e3:74:a8:5a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIURwrz3125kLGYkguuExxaWCTYfBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MTdaFw0yMzA5MjUxMzAwMTdaMDMxMTAvBgNV
BAMTKEE1NDQ2NDhGOTMzOTk3QzRCRUJERjVDNjQwNkIyNDg0NjM5NjRDRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwRzfTmvzXuIEEkMsxQK7k/BWf
qZ1xnlWdnPRYcwcN/7+UwSWJFSX3E19IMwMSpW0APtI/u/MHw9sdqcyM9u1rNeKj
55fkk65VKBpiyIoysYkOb+4YwZs6ARNCPwrooLRIDhz7mugzkCBa3ibFjrUwjPOl
l4R5KrELPBrHHIBMuprrX/V6okoHiSpYIRYC572JiM3JhVTHm1cI7qa6kvYuIDbS
7aT870sEc/L1sXzlgcFfsnFBLaVEHaXKnEHL35DK8qpva/EmOrLk1lYQggoaTjhd
g4ADQhBQU3yfzKvYEzMbt2GvL2z6n9Qaf3eUHV0L1bF1gVJpZnmfapLTrZCrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUpURkj5M5l8S+vfXGQGskhGOWTOEwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzNzY2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
fzANBgkqhkiG9w0BAQsFAAOCAQEAjvvHqytTHXmRIg31K+pdCUhob3quH2HJgNxq
s4Fo406T1aYMVeop9GyUO+Rtm2iEDse2wlSZL1TYWHjKmfMYMMevy7tfWxQzIUoh
BYkLg/MlHCBXbahkX6JZlGdcBNCE9GQCUyMyWnF74z4kE0YYNYptg44MimhTstAW
l0FLSAaw1N2DvzTUb0o8tlFWqow/LJeYZ5btvwoUQkj2gvi0TeF3Yqya0r7IJBks
iruGzkqWPCSfXEVkPHmNmdyQ/EZbLsr5FyvdahXay9h1yUlBxZOCPK4zeegFUd/Z
0A1WxzvRx/z4fGYohs5TnW7buIBKjgGgo+Bocbqi5V5L43SoWg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org