Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3261333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Zw+n3tvmBKVulQTaswX7fJxR7zCGkfZktEl75msiWEg=
Subject key identifier: 85:00:4C:54:87:43:4F:5B:62:27:41:C9:4E:6D:97:AB:39:9D:86:C3
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 53DB6231004D988F8DF0B60728C87D30B90266FC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:05 +0000
ROA not before: Mon 26 Sep 2022 12:55:05 +0000
ROA not after: Mon 25 Sep 2023 13:00:05 +0000
asID: 59282
IP address blocks: 2400:d680:2a3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:db:62:31:00:4d:98:8f:8d:f0:b6:07:28:c8:7d:30:b9:02:66:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:05 2022 GMT
Not After : Sep 25 13:00:05 2023 GMT
Subject: CN=85004C5487434F5B622741C94E6D97AB399D86C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:4c:d6:d3:5d:8f:31:12:5a:42:a8:9e:80:
b6:c9:4b:23:99:2c:fe:df:da:82:cf:b3:4b:c7:05:
b7:88:cf:6b:7f:88:dd:6e:c1:14:7a:d1:46:a2:b6:
58:1a:53:79:40:d2:50:69:98:4c:ac:2a:72:43:de:
3f:33:eb:e3:e4:43:27:05:d4:bd:2a:81:13:c4:81:
00:03:aa:e1:55:09:d5:5d:46:f8:31:9d:a3:23:9e:
90:14:6f:1b:4d:3f:c7:04:2f:13:40:0a:a1:98:5e:
d1:47:29:7b:0c:fc:f6:a8:34:f4:b9:de:f1:08:fa:
74:0e:f7:04:ef:46:50:c1:98:13:4a:66:dc:3e:30:
56:98:7f:1a:d2:19:93:26:45:64:0e:70:4d:e2:28:
0e:59:b6:5f:8f:51:00:e0:18:41:e2:74:78:1a:b0:
16:1f:74:60:d2:d7:d1:94:8e:40:92:58:d3:06:ae:
04:0c:a7:2c:f9:25:1e:23:0c:b1:2f:0d:a4:a9:a1:
ae:f9:ce:1f:76:ae:0b:54:3c:4c:1f:96:d7:2c:69:
47:33:03:7c:49:eb:c9:8a:9e:ea:13:78:f7:ca:e7:
0a:29:1c:c9:2e:0e:7a:b8:13:bf:80:e6:2a:ea:8b:
13:e1:94:93:78:02:e5:ca:78:1a:3a:a4:96:90:f7:
9c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:00:4C:54:87:43:4F:5B:62:27:41:C9:4E:6D:97:AB:39:9D:86:C3
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2a3::/48
Signature Algorithm: sha256WithRSAEncryption
43:b5:c9:51:87:d9:1f:2b:ad:79:8f:dd:e1:ca:a3:1a:ce:db:
f2:23:35:ea:48:ff:38:7e:77:aa:64:f7:a8:45:e8:28:da:4f:
d1:13:32:52:59:ee:50:5d:98:cc:0a:b1:4d:8a:66:17:39:20:
b7:13:b6:57:d4:29:34:06:f8:25:a9:a3:0f:07:5b:08:24:a0:
7c:75:72:18:96:04:21:e9:84:e3:1d:2c:75:fe:e4:7e:7c:d7:
75:88:4f:26:ca:75:3d:06:01:2f:93:4d:73:83:80:60:62:ff:
46:7a:23:d4:dd:d3:9f:05:c1:9a:c1:39:a6:9a:cd:8d:ed:a3:
48:ce:bc:15:d0:0c:29:a3:aa:21:15:38:ec:d9:4a:d6:bb:a6:
1b:23:c8:1f:52:8e:aa:1e:96:4c:8b:d2:8f:f7:1a:70:61:8b:
9b:d8:89:c3:87:1d:47:05:da:b9:a0:98:14:ea:70:cd:82:e8:
00:5a:2d:5a:f9:b4:1f:81:9c:53:11:5b:c7:ca:a8:ca:58:80:
8d:f7:6b:f5:c6:f7:aa:5a:dd:50:b0:a3:05:83:de:b7:25:27:
e2:0f:66:70:89:bb:75:fd:c1:ec:6d:83:9f:84:83:43:c3:5a:
fc:35:67:a6:cb:6d:7f:5a:47:3b:22:37:eb:77:d0:90:7a:06:
59:6e:bc:33
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUU9tiMQBNmI+N8LYHKMh9MLkCZvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MDVaFw0yMzA5MjUxMzAwMDVaMDMxMTAvBgNV
BAMTKDg1MDA0QzU0ODc0MzRGNUI2MjI3NDFDOTRFNkQ5N0FCMzk5RDg2QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nUzW012PMRJaQqiegLbJSyOZ
LP7f2oLPs0vHBbeIz2t/iN1uwRR60UaitlgaU3lA0lBpmEysKnJD3j8z6+PkQycF
1L0qgRPEgQADquFVCdVdRvgxnaMjnpAUbxtNP8cELxNACqGYXtFHKXsM/PaoNPS5
3vEI+nQO9wTvRlDBmBNKZtw+MFaYfxrSGZMmRWQOcE3iKA5Ztl+PUQDgGEHidHga
sBYfdGDS19GUjkCSWNMGrgQMpyz5JR4jDLEvDaSpoa75zh92rgtUPEwfltcsaUcz
A3xJ68mKnuoTePfK5wopHMkuDnq4E7+A5irqixPhlJN4AuXKeBo6pJaQ95zlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUhQBMVIdDT1tiJ0HJTm2XqzmdhsMwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzI2MTMzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
ozANBgkqhkiG9w0BAQsFAAOCAQEAQ7XJUYfZHyuteY/d4cqjGs7b8iM16kj/OH53
qmT3qEXoKNpP0RMyUlnuUF2YzAqxTYpmFzkgtxO2V9QpNAb4JamjDwdbCCSgfHVy
GJYEIemE4x0sdf7kfnzXdYhPJsp1PQYBL5NNc4OAYGL/Rnoj1N3TnwXBmsE5pprN
je2jSM68FdAMKaOqIRU47NlK1rumGyPIH1KOqh6WTIvSj/cacGGLm9iJw4cdRwXa
uaCYFOpwzYLoAFotWvm0H4GcUxFbx8qoyliAjfdr9cb3qlrdULCjBYPetyUn4g9m
cIm7df3B7G2Dn4SDQ8Na/DVnpsttf1pHOyI363fQkHoGWW68Mw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org