Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3263663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: TrwdNzVDppDs2HB5I1EXp3WOfX5kKg0v8cs5PR+W6Jo=
Subject key identifier: 9A:AF:8D:B6:61:B5:BB:4D:89:52:44:99:CF:7D:0D:32:64:62:D8:F7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 62B283888F10BE30FF5AEE9C54541C2B7FAFFF9F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:13 +0000
ROA not before: Mon 26 Sep 2022 12:55:13 +0000
ROA not after: Mon 25 Sep 2023 13:00:13 +0000
asID: 59282
IP address blocks: 2400:d680:2cf::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b2:83:88:8f:10:be:30:ff:5a:ee:9c:54:54:1c:2b:7f:af:ff:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:13 2022 GMT
Not After : Sep 25 13:00:13 2023 GMT
Subject: CN=9AAF8DB661B5BB4D89524499CF7D0D326462D8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:b3:62:63:61:7e:34:ff:50:f0:9e:10:63:
48:db:8a:e4:ea:b6:b0:f5:61:80:3e:6d:18:48:f2:
bc:1d:ac:be:da:52:56:17:8e:0c:b2:03:ba:6e:5f:
68:dd:30:1b:7a:bd:30:d1:ef:2e:49:23:e7:8d:b3:
0d:3f:b0:2f:e8:70:bb:11:69:be:0f:b5:3f:c2:52:
87:c4:10:5a:71:c2:8b:de:c0:fc:84:40:93:3f:a1:
07:cd:04:59:2a:b1:62:89:e5:85:73:38:7f:14:ff:
52:a7:89:78:33:69:5f:17:c1:d7:f5:04:99:87:0a:
e9:4c:be:ae:50:87:71:7f:31:b2:69:bf:87:b3:f2:
a1:50:2c:ba:3e:60:9e:c8:9f:95:0a:11:6b:c0:bc:
22:83:1c:c0:63:97:16:dd:59:e2:06:ed:0d:bd:b9:
f7:97:cd:fb:14:fe:4d:73:30:93:b5:ba:9b:ad:d7:
19:6f:62:2a:cf:2d:e3:44:35:fd:5a:91:ba:d6:05:
45:11:00:04:83:46:84:25:ea:d9:14:3c:b6:68:6a:
fc:86:cb:fb:ae:fc:94:f1:f5:94:c8:37:f2:e8:b9:
55:55:d4:cb:90:6f:78:5c:8f:7e:fa:1a:53:e2:9b:
45:63:03:a6:7b:08:67:bf:4a:10:8e:1d:ab:f7:9c:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AF:8D:B6:61:B5:BB:4D:89:52:44:99:CF:7D:0D:32:64:62:D8:F7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2cf::/48
Signature Algorithm: sha256WithRSAEncryption
a3:2d:4b:dc:90:e6:1c:37:ff:0e:bd:36:45:24:f8:25:94:2f:
1f:4b:5d:9a:ec:87:78:62:8e:ea:36:d3:ca:9c:95:0e:46:94:
7f:e3:d8:7d:44:b8:10:81:86:20:06:69:8e:88:cb:14:7d:70:
92:86:29:a2:e5:e5:6c:75:c4:d6:be:d0:75:26:40:53:2e:d2:
39:fa:e2:88:b6:6c:37:47:cd:8d:91:07:d7:18:c6:fc:07:58:
06:b2:9d:c5:63:82:da:5e:a9:c6:64:71:67:87:2e:51:b7:4d:
d0:fa:57:e3:c5:8b:46:8c:7d:f5:13:b3:aa:83:1b:a2:37:5b:
ce:92:92:df:6f:04:4b:1c:d0:e5:c9:19:3c:d2:71:bc:38:0f:
ab:1a:ab:70:ec:ca:cc:1b:ca:38:4d:8c:51:69:17:d4:34:f1:
99:f6:9f:a6:df:b2:85:db:95:fa:c7:9b:58:e4:26:a1:b8:12:
fa:bf:84:46:41:95:99:bd:28:f5:d4:5c:aa:f9:1c:ff:5a:ab:
df:7b:27:74:c9:4b:ca:64:7b:c4:4f:86:86:af:d2:fc:5b:1c:
ae:03:e3:f7:fd:3f:9d:f5:8b:3e:01:c3:7d:5b:ab:1c:7c:87:
66:cb:9c:1e:77:17:f3:ef:0f:17:fe:3d:36:88:e1:e0:4d:70:
ad:72:77:ef
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYrKDiI8QvjD/Wu6cVFQcK3+v/58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MTNaFw0yMzA5MjUxMzAwMTNaMDMxMTAvBgNV
BAMTKDlBQUY4REI2NjFCNUJCNEQ4OTUyNDQ5OUNGN0QwRDMyNjQ2MkQ4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCui7NiY2F+NP9Q8J4QY0jbiuTq
trD1YYA+bRhI8rwdrL7aUlYXjgyyA7puX2jdMBt6vTDR7y5JI+eNsw0/sC/ocLsR
ab4PtT/CUofEEFpxwovewPyEQJM/oQfNBFkqsWKJ5YVzOH8U/1KniXgzaV8Xwdf1
BJmHCulMvq5Qh3F/MbJpv4ez8qFQLLo+YJ7In5UKEWvAvCKDHMBjlxbdWeIG7Q29
ufeXzfsU/k1zMJO1uput1xlvYirPLeNENf1akbrWBUURAASDRoQl6tkUPLZoavyG
y/uu/JTx9ZTIN/LouVVV1MuQb3hcj376GlPim0VjA6Z7CGe/ShCOHav3nOLxAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUmq+NtmG1u02JUkSZz30NMmRi2PcwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzI2MzY2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
zzANBgkqhkiG9w0BAQsFAAOCAQEAoy1L3JDmHDf/Dr02RST4JZQvH0tdmuyHeGKO
6jbTypyVDkaUf+PYfUS4EIGGIAZpjojLFH1wkoYpouXlbHXE1r7QdSZAUy7SOfri
iLZsN0fNjZEH1xjG/AdYBrKdxWOC2l6pxmRxZ4cuUbdN0PpX48WLRox99ROzqoMb
ojdbzpKS328ESxzQ5ckZPNJxvDgPqxqrcOzKzBvKOE2MUWkX1DTxmfafpt+yhduV
+sebWOQmobgS+r+ERkGVmb0o9dRcqvkc/1qr33sndMlLymR7xE+Ghq/S/FscrgPj
9/0/nfWLPgHDfVurHHyHZsucHncX8+8PF/49Nojh4E1wrXJ37w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org