Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3239643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 16ma014daOTGsBzKTbDckrgVkECn0jyQBBH+p+hmc7M=
Subject key identifier: 17:C4:93:82:E4:C5:93:6F:E9:3C:AF:89:D5:2B:E6:AC:24:34:D2:A1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 140D44DB2040BA2A873B846E611DA851094C4426
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:02 +0000
ROA not before: Mon 26 Sep 2022 12:55:02 +0000
ROA not after: Mon 25 Sep 2023 13:00:02 +0000
asID: 59282
IP address blocks: 2400:d680:29d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0d:44:db:20:40:ba:2a:87:3b:84:6e:61:1d:a8:51:09:4c:44:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:02 2022 GMT
Not After : Sep 25 13:00:02 2023 GMT
Subject: CN=17C49382E4C5936FE93CAF89D52BE6AC2434D2A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:d2:80:97:9d:9b:17:71:63:56:5c:8e:2e:
98:ee:b3:8c:c6:1e:85:94:92:a1:aa:e7:7b:0f:57:
14:f9:47:99:7c:72:7f:47:f6:95:9f:36:b2:75:d2:
ed:13:27:4e:bd:a4:2f:55:84:81:d0:52:03:9a:a5:
c5:21:70:4f:aa:73:dc:2e:06:c0:cb:ff:86:8a:c4:
d6:e0:f3:16:5f:a1:63:78:81:cc:1e:36:b9:cb:ba:
4c:b5:f6:3a:3f:dd:fb:09:fa:6f:27:7f:1c:7a:5e:
ea:d7:17:ec:37:95:47:ef:41:bf:9e:18:86:a3:f1:
17:dc:e9:a3:6a:35:0f:6c:c9:99:42:06:5c:e2:53:
92:a5:c2:7c:ea:d7:6e:e6:92:f7:8c:85:3f:7e:0b:
aa:42:f5:69:51:0c:f8:2f:81:5b:bd:37:bf:4f:b9:
27:d8:7d:e5:95:22:28:00:d5:dd:84:14:aa:68:6c:
1c:2e:ec:a1:4b:27:6e:25:c9:a7:43:2c:db:8a:7a:
8c:99:69:78:1d:0f:41:1d:0a:d5:57:01:bd:fe:c7:
48:2b:c4:04:dd:f0:40:e5:7a:b1:a7:22:05:3b:02:
8b:48:d6:b9:ac:23:4b:1b:f6:66:1c:b6:1c:c8:fa:
da:0b:3c:eb:52:24:e4:75:a0:43:1b:71:1e:cf:66:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:93:82:E4:C5:93:6F:E9:3C:AF:89:D5:2B:E6:AC:24:34:D2:A1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3239643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:29d::/48
Signature Algorithm: sha256WithRSAEncryption
c5:fe:b1:a2:2f:42:ae:f3:0c:f3:bd:e9:98:8f:a2:30:80:ef:
e2:ea:76:98:5a:ee:a9:63:23:ea:12:01:d6:84:20:89:a1:4b:
a4:19:a7:d0:e2:57:69:f7:f3:5b:22:a4:16:4e:19:6a:bb:8f:
80:df:7e:e1:26:29:3f:af:28:64:ed:a3:f7:11:b7:93:29:21:
46:a9:c6:bf:0c:13:f2:a8:d1:e4:01:b3:8d:a3:f6:31:1f:33:
da:74:51:75:30:52:ed:c7:b7:23:1a:56:42:aa:0a:96:a1:7d:
c6:88:69:44:c1:fd:45:b1:91:42:be:20:e0:ec:38:be:d5:95:
70:47:41:30:72:f3:e6:3e:15:b7:5c:8b:18:83:9a:9f:45:5d:
32:0a:9b:43:65:9c:6d:0b:94:eb:e1:a3:5a:f6:e9:30:04:db:
af:fa:55:7d:dc:8e:52:11:ad:d5:23:3e:d4:fc:11:15:f8:07:
9f:a9:59:a3:97:d1:ab:17:e0:92:f1:f1:7a:09:39:2c:90:34:
31:49:ce:46:7a:92:9c:45:2c:8f:2e:b5:b8:f5:e4:01:2c:f4:
b7:90:de:39:26:ad:6d:8b:1e:62:f0:f5:df:fd:8d:04:46:3e:
b7:11:a7:9b:92:a6:9d:c8:1f:2a:71:b8:65:98:59:f6:80:cb:
aa:7e:92:69
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUFA1E2yBAuiqHO4RuYR2oUQlMRCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MDJaFw0yMzA5MjUxMzAwMDJaMDMxMTAvBgNV
BAMTKDE3QzQ5MzgyRTRDNTkzNkZFOTNDQUY4OUQ1MkJFNkFDMjQzNEQyQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqy9KAl52bF3FjVlyOLpjus4zG
HoWUkqGq53sPVxT5R5l8cn9H9pWfNrJ10u0TJ069pC9VhIHQUgOapcUhcE+qc9wu
BsDL/4aKxNbg8xZfoWN4gcweNrnLuky19jo/3fsJ+m8nfxx6XurXF+w3lUfvQb+e
GIaj8Rfc6aNqNQ9syZlCBlziU5Klwnzq127mkveMhT9+C6pC9WlRDPgvgVu9N79P
uSfYfeWVIigA1d2EFKpobBwu7KFLJ24lyadDLNuKeoyZaXgdD0EdCtVXAb3+x0gr
xATd8EDlerGnIgU7AotI1rmsI0sb9mYcthzI+toLPOtSJOR1oEMbcR7PZpmbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUF8STguTFk2/pPK+J1SvmrCQ00qEwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzOTY0M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
nTANBgkqhkiG9w0BAQsFAAOCAQEAxf6xoi9CrvMM873pmI+iMIDv4up2mFruqWMj
6hIB1oQgiaFLpBmn0OJXaffzWyKkFk4ZaruPgN9+4SYpP68oZO2j9xG3kykhRqnG
vwwT8qjR5AGzjaP2MR8z2nRRdTBS7ce3IxpWQqoKlqF9xohpRMH9RbGRQr4g4Ow4
vtWVcEdBMHLz5j4Vt1yLGIOan0VdMgqbQ2WcbQuU6+GjWvbpMATbr/pVfdyOUhGt
1SM+1PwRFfgHn6lZo5fRqxfgkvHxegk5LJA0MUnORnqSnEUsjy61uPXkASz0t5De
OSatbYseYvD13/2NBEY+txGnm5KmncgfKnG4ZZhZ9oDLqn6SaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org