Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3263323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: vazkPfYECUckbEst9W2kq1r8446FC0QNZF08b3gRmas=
Subject key identifier: 4B:07:E9:D5:87:12:EA:CD:E7:16:C1:67:7A:7B:84:62:5D:0C:0F:8B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 774DBE90243F9BF858A60037724A8507BEC50345
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:11 +0000
ROA not before: Mon 26 Sep 2022 12:55:11 +0000
ROA not after: Mon 25 Sep 2023 13:00:11 +0000
asID: 59282
IP address blocks: 2400:d680:2c2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4d:be:90:24:3f:9b:f8:58:a6:00:37:72:4a:85:07:be:c5:03:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:11 2022 GMT
Not After : Sep 25 13:00:11 2023 GMT
Subject: CN=4B07E9D58712EACDE716C1677A7B84625D0C0F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:77:bb:84:3a:9a:44:0e:a0:c3:bf:db:97:
5a:22:ff:af:2e:ef:b7:52:9a:a1:99:5b:6c:f8:35:
3e:18:76:7b:8c:fe:01:33:5c:ff:25:21:04:24:66:
df:09:22:81:74:a8:15:5d:fe:85:fd:56:89:e4:db:
15:eb:32:ca:55:63:9e:65:74:96:15:92:e9:2e:62:
bb:2d:da:c4:19:5c:f6:3f:0d:d1:79:a7:02:c7:ae:
1c:60:67:8e:ec:5d:43:4e:92:31:ff:7b:9c:98:94:
a3:59:a4:fb:02:46:f4:ba:a9:3d:cf:18:64:90:da:
4c:e1:50:fb:a0:b3:89:7b:98:a0:3c:22:11:94:bf:
f2:8a:99:3f:5f:c6:33:e9:6a:c2:06:38:f3:41:c4:
2f:4a:47:df:87:85:d5:f9:07:3c:b8:7f:32:a8:39:
78:1c:ed:39:9a:93:69:5c:fc:6d:96:58:41:dd:1e:
fa:63:da:08:78:01:dc:f8:ab:fa:35:d3:3f:57:e5:
46:7d:fc:fa:2a:fc:87:0f:13:ea:49:da:e1:68:b2:
c3:9b:04:1b:df:2e:01:de:3b:1f:cb:a3:e9:58:3f:
0f:11:14:6e:86:f6:29:4a:f8:42:d0:9c:79:86:02:
23:b8:c1:90:d4:a3:11:10:44:ff:99:88:3b:35:71:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:07:E9:D5:87:12:EA:CD:E7:16:C1:67:7A:7B:84:62:5D:0C:0F:8B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2c2::/48
Signature Algorithm: sha256WithRSAEncryption
6c:1c:24:3a:ad:b1:5f:71:4f:22:35:af:9f:59:37:f0:8e:3c:
1b:ef:95:eb:2d:f0:59:c5:d4:4e:f6:cb:5d:38:c0:25:af:80:
63:98:ef:20:7e:2d:71:d6:df:05:e7:87:8d:60:b3:2e:4d:28:
0f:19:97:b5:e4:88:3a:e8:b2:b3:fb:46:0b:5f:53:4f:12:c2:
e6:f7:ab:5d:a7:c9:45:55:89:29:f0:f7:70:d1:74:ff:9b:59:
02:9f:be:d4:16:c8:2f:12:ce:6c:0f:10:28:b6:75:b8:01:ff:
b6:59:9a:5e:c6:0f:94:20:fd:b6:8a:b2:a8:4c:1f:b6:de:aa:
89:48:56:11:66:65:04:3f:5e:b0:e6:7c:4e:8c:08:88:e5:0f:
01:1b:0e:86:aa:43:41:96:06:46:d0:d2:d1:93:5b:0d:f3:ca:
cd:26:de:cb:78:7a:3f:37:0f:f8:bd:7a:5e:c7:59:fd:7b:80:
5a:7d:78:cd:20:b3:6d:68:e7:0f:ea:69:65:ed:1a:b5:e7:c4:
a1:de:10:24:d6:7e:71:6c:e8:a4:99:f2:9b:43:96:68:cf:c2:
ae:64:67:1a:55:23:6c:ed:93:2f:7c:87:63:a6:a2:1a:43:cc:
2f:4f:d3:54:85:c4:12:3f:34:07:7a:50:aa:2b:82:8c:20:83:
c4:7a:2f:82
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUd02+kCQ/m/hYpgA3ckqFB77FA0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MTFaFw0yMzA5MjUxMzAwMTFaMDMxMTAvBgNV
BAMTKDRCMDdFOUQ1ODcxMkVBQ0RFNzE2QzE2NzdBN0I4NDYyNUQwQzBGOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Lne7hDqaRA6gw7/bl1oi/68u
77dSmqGZW2z4NT4YdnuM/gEzXP8lIQQkZt8JIoF0qBVd/oX9Vonk2xXrMspVY55l
dJYVkukuYrst2sQZXPY/DdF5pwLHrhxgZ47sXUNOkjH/e5yYlKNZpPsCRvS6qT3P
GGSQ2kzhUPugs4l7mKA8IhGUv/KKmT9fxjPpasIGOPNBxC9KR9+HhdX5Bzy4fzKo
OXgc7Tmak2lc/G2WWEHdHvpj2gh4Adz4q/o10z9X5UZ9/Poq/IcPE+pJ2uFossOb
BBvfLgHeOx/Lo+lYPw8RFG6G9ilK+ELQnHmGAiO4wZDUoxEQRP+ZiDs1cTKrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUSwfp1YcS6s3nFsFnenuEYl0MD4swHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzI2MzMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
wjANBgkqhkiG9w0BAQsFAAOCAQEAbBwkOq2xX3FPIjWvn1k38I48G++V6y3wWcXU
TvbLXTjAJa+AY5jvIH4tcdbfBeeHjWCzLk0oDxmXteSIOuiys/tGC19TTxLC5ver
XafJRVWJKfD3cNF0/5tZAp++1BbILxLObA8QKLZ1uAH/tlmaXsYPlCD9toqyqEwf
tt6qiUhWEWZlBD9esOZ8TowIiOUPARsOhqpDQZYGRtDS0ZNbDfPKzSbey3h6PzcP
+L16XsdZ/XuAWn14zSCzbWjnD+ppZe0atefEod4QJNZ+cWzopJnym0OWaM/CrmRn
GlUjbO2TL3yHY6aiGkPML0/TVIXEEj80B3pQqiuCjCCDxHovgg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org