Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3262633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Ccv//TF57C28evgjHINgfRL1PB0SoVeyvPmV3Mrfsuo=
Subject key identifier: E5:AC:DD:35:13:E4:57:66:CE:95:9F:42:55:8A:32:24:A0:AF:91:67
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0E9CDD1EC88003312C8B18B5EC25A2D35263C440
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:18 +0000
ROA not before: Mon 26 Sep 2022 12:55:18 +0000
ROA not after: Mon 25 Sep 2023 13:00:18 +0000
asID: 59282
IP address blocks: 2400:d680:2bc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9c:dd:1e:c8:80:03:31:2c:8b:18:b5:ec:25:a2:d3:52:63:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:18 2022 GMT
Not After : Sep 25 13:00:18 2023 GMT
Subject: CN=E5ACDD3513E45766CE959F42558A3224A0AF9167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:cd:d6:46:71:cb:47:e1:23:2f:9b:59:16:
41:f3:0f:8b:38:e3:ac:50:88:89:00:a8:77:ab:d1:
86:e9:e6:a0:b0:60:14:40:2c:5e:6f:10:2f:64:a8:
24:ce:39:13:21:8a:a6:00:a4:83:b1:0d:fd:50:4a:
9c:64:b2:c0:8e:5b:21:4c:c7:aa:1b:be:f2:ad:71:
cd:05:f6:1b:36:43:ef:e0:b0:db:e4:7e:7a:8a:c0:
14:3f:f6:87:4a:0b:09:9a:9c:63:3d:70:3c:4f:b7:
13:65:16:12:b3:ee:a5:6c:e6:ef:70:68:c9:a6:ab:
e3:e0:19:82:dc:9c:91:b5:1c:b3:fd:0e:23:b9:f4:
e1:25:47:08:85:d5:e2:ee:81:54:0a:be:af:ef:71:
73:22:d6:89:22:30:69:15:ec:a8:8d:47:92:45:4e:
0b:38:ba:90:63:b5:0f:6c:a0:c4:ca:b0:97:15:17:
f2:20:2f:a4:90:66:40:8e:a8:6b:00:61:e9:53:48:
18:94:f0:15:80:ef:ee:7f:51:17:4b:f9:e4:04:7a:
bc:12:b4:4b:02:61:91:61:73:91:3d:60:76:81:cb:
de:db:67:07:fc:40:d9:83:8e:6d:fe:17:3b:5a:cd:
aa:6d:d2:62:5e:d1:23:42:4a:41:3e:ac:1f:35:fa:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AC:DD:35:13:E4:57:66:CE:95:9F:42:55:8A:32:24:A0:AF:91:67
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2bc::/48
Signature Algorithm: sha256WithRSAEncryption
b5:a4:47:1f:14:22:33:c3:e8:11:8a:c3:ac:ca:52:3d:7a:19:
81:58:d4:5a:83:2f:1e:67:c8:29:1d:98:8f:e4:52:f2:09:70:
bd:33:d5:e6:0a:68:05:60:12:09:e4:85:77:77:f0:6d:ec:6c:
9b:2f:aa:f0:db:75:8b:8c:60:ee:d1:e0:af:01:11:01:77:d2:
77:ea:09:0f:72:6b:8c:b8:8b:04:dc:9e:69:aa:48:58:84:50:
9d:8d:04:b6:f9:5f:67:11:f0:e2:ae:31:61:1b:4b:ba:08:91:
06:dd:6f:ab:2b:b6:07:93:e3:e9:83:69:26:a2:a8:e1:32:28:
c4:c8:b3:eb:40:b7:0b:6f:7d:b6:df:5a:64:e2:69:df:76:ef:
24:27:ad:80:49:11:aa:87:54:14:49:2a:79:6a:f3:21:61:2a:
f0:a6:94:9e:45:44:5e:e4:46:d1:a9:f3:c3:4b:0d:b0:c7:2e:
b4:52:6e:ba:98:40:32:e1:4f:c7:29:c8:6f:14:22:86:e7:cf:
4a:d5:e4:87:b2:d9:04:a4:71:02:c4:5f:f3:32:b5:27:69:a6:
04:48:05:4a:0c:7a:84:0b:73:f4:6f:df:10:30:6e:fd:85:99:
04:f8:da:47:ad:de:ad:a3:6b:90:30:56:5f:09:79:97:f3:f9:
03:6b:71:c8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDpzdHsiAAzEsixi17CWi01JjxEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MThaFw0yMzA5MjUxMzAwMThaMDMxMTAvBgNV
BAMTKEU1QUNERDM1MTNFNDU3NjZDRTk1OUY0MjU1OEEzMjI0QTBBRjkxNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhc3WRnHLR+EjL5tZFkHzD4s4
46xQiIkAqHer0Ybp5qCwYBRALF5vEC9kqCTOORMhiqYApIOxDf1QSpxkssCOWyFM
x6obvvKtcc0F9hs2Q+/gsNvkfnqKwBQ/9odKCwmanGM9cDxPtxNlFhKz7qVs5u9w
aMmmq+PgGYLcnJG1HLP9DiO59OElRwiF1eLugVQKvq/vcXMi1okiMGkV7KiNR5JF
Tgs4upBjtQ9soMTKsJcVF/IgL6SQZkCOqGsAYelTSBiU8BWA7+5/URdL+eQEerwS
tEsCYZFhc5E9YHaBy97bZwf8QNmDjm3+Fztazapt0mJe0SNCSkE+rB81+rfbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU5azdNRPkV2bOlZ9CVYoyJKCvkWcwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzI2MjYzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
vDANBgkqhkiG9w0BAQsFAAOCAQEAtaRHHxQiM8PoEYrDrMpSPXoZgVjUWoMvHmfI
KR2Yj+RS8glwvTPV5gpoBWASCeSFd3fwbexsmy+q8Nt1i4xg7tHgrwERAXfSd+oJ
D3JrjLiLBNyeaapIWIRQnY0EtvlfZxHw4q4xYRtLugiRBt1vqyu2B5Pj6YNpJqKo
4TIoxMiz60C3C299tt9aZOJp33bvJCetgEkRqodUFEkqeWrzIWEq8KaUnkVEXuRG
0anzw0sNsMcutFJuuphAMuFPxynIbxQihufPStXkh7LZBKRxAsRf8zK1J2mmBEgF
Sgx6hAtz9G/fEDBu/YWZBPjaR63eraNrkDBWXwl5l/P5A2txyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org