Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3264313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 1xLFxDt6G5gG1YatYZaI5S5zPrFvx7PTuctMuqfoGWo=
Subject key identifier: FA:6F:07:86:9B:1A:D2:54:2D:07:35:47:AD:DA:80:A1:FA:14:03:EC
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1D2DA88B494926492330849C924FC4374A851096
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:06 +0000
ROA not before: Mon 26 Sep 2022 12:55:06 +0000
ROA not after: Mon 25 Sep 2023 13:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:2d1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2d:a8:8b:49:49:26:49:23:30:84:9c:92:4f:c4:37:4a:85:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:06 2022 GMT
Not After : Sep 25 13:00:06 2023 GMT
Subject: CN=FA6F07869B1AD2542D073547ADDA80A1FA1403EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:8a:5a:b6:24:e5:2e:24:ff:57:a1:b3:9b:
1c:d4:21:dd:f3:61:d1:81:03:23:12:0b:72:fc:26:
d6:15:4a:b9:83:90:0f:15:45:92:a2:1b:dc:8d:64:
cc:05:7f:29:5e:01:35:9c:9a:c2:2d:dd:2c:ce:5a:
17:d9:1c:3c:5b:d4:d5:3a:29:74:7f:50:25:70:c7:
b0:30:e1:b6:25:e2:7e:c3:e0:e3:17:ea:f7:ac:85:
36:f7:5f:d1:6c:31:da:da:ac:5a:9a:a3:78:f6:e1:
d4:fb:ed:3e:6e:e2:78:6b:34:52:4d:8c:4e:cf:a3:
65:42:32:3f:90:03:76:bf:55:cd:3e:50:2a:f0:9e:
bb:da:e1:11:ac:2b:03:b5:69:d4:d5:4a:49:cd:37:
95:bc:f8:82:56:d9:cf:40:68:0f:87:13:57:5d:29:
c4:c6:0c:1a:83:c6:f9:5b:61:12:33:f0:6a:98:cb:
9a:10:22:e5:18:17:27:78:93:fd:3f:50:e2:52:ea:
4a:64:8a:8d:d3:91:de:c3:14:92:a6:f1:a8:a7:ac:
58:9c:3a:c4:9a:b5:31:15:1e:b5:49:07:61:d5:07:
ab:1f:ab:2b:0e:c7:12:c7:17:4b:16:80:7b:d9:1f:
c1:38:94:61:f1:57:98:53:cd:83:be:82:cd:f8:65:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:07:86:9B:1A:D2:54:2D:07:35:47:AD:DA:80:A1:FA:14:03:EC
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2d1::/48
Signature Algorithm: sha256WithRSAEncryption
7f:22:95:0f:ce:70:60:cd:cc:87:29:15:a2:ff:cc:9f:9f:56:
2b:4e:96:e4:fb:a6:46:eb:18:c4:3c:b5:26:da:bb:2b:eb:60:
8a:9b:12:46:3b:60:38:ce:8f:ee:fa:c9:d2:ca:38:c6:a0:8a:
b4:74:65:fc:b0:7f:d8:d7:39:a4:3b:cf:c6:7b:53:9e:ee:af:
1d:f0:8e:c1:88:f0:b3:db:95:a6:27:71:8d:c2:43:4a:03:c3:
10:65:e0:c6:07:11:51:a1:09:50:7b:4f:92:7c:eb:8d:de:3a:
b8:95:94:5e:2c:94:25:d4:b3:ce:a4:0b:89:47:31:78:6f:cf:
52:d2:c6:49:42:4e:a0:c3:9e:93:01:1d:0d:ba:85:08:f6:d3:
35:7f:d6:84:79:17:0b:fd:06:18:20:88:d5:02:f9:e4:ee:10:
4c:1d:59:78:0c:35:4c:3b:ce:59:9d:2f:a0:af:38:db:43:8f:
78:fc:40:10:cc:43:22:3b:03:7c:76:f3:f6:12:eb:70:13:6b:
58:4a:7c:a0:ac:01:97:b0:61:5a:11:45:76:56:ae:12:38:74:
0a:7b:80:6b:94:7c:cb:41:40:32:e1:00:85:de:9a:ca:d6:fa:
89:32:ae:1f:24:a1:a5:0e:e1:7a:f9:4c:f8:74:d2:bd:0f:09:
81:b3:48:0c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUHS2oi0lJJkkjMISckk/EN0qFEJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MDZaFw0yMzA5MjUxMzAwMDZaMDMxMTAvBgNV
BAMTKEZBNkYwNzg2OUIxQUQyNTQyRDA3MzU0N0FEREE4MEExRkExNDAzRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFaIpatiTlLiT/V6GzmxzUId3z
YdGBAyMSC3L8JtYVSrmDkA8VRZKiG9yNZMwFfyleATWcmsIt3SzOWhfZHDxb1NU6
KXR/UCVwx7Aw4bYl4n7D4OMX6veshTb3X9FsMdrarFqao3j24dT77T5u4nhrNFJN
jE7Po2VCMj+QA3a/Vc0+UCrwnrva4RGsKwO1adTVSknNN5W8+IJW2c9AaA+HE1dd
KcTGDBqDxvlbYRIz8GqYy5oQIuUYFyd4k/0/UOJS6kpkio3Tkd7DFJKm8ainrFic
OsSatTEVHrVJB2HVB6sfqysOxxLHF0sWgHvZH8E4lGHxV5hTzYO+gs34ZTeFAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+m8Hhpsa0lQtBzVHrdqAofoUA+wwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzI2NDMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
0TANBgkqhkiG9w0BAQsFAAOCAQEAfyKVD85wYM3MhykVov/Mn59WK06W5PumRusY
xDy1Jtq7K+tgipsSRjtgOM6P7vrJ0so4xqCKtHRl/LB/2Nc5pDvPxntTnu6vHfCO
wYjws9uVpidxjcJDSgPDEGXgxgcRUaEJUHtPknzrjd46uJWUXiyUJdSzzqQLiUcx
eG/PUtLGSUJOoMOekwEdDbqFCPbTNX/WhHkXC/0GGCCI1QL55O4QTB1ZeAw1TDvO
WZ0voK8420OPePxAEMxDIjsDfHbz9hLrcBNrWEp8oKwBl7BhWhFFdlauEjh0CnuA
a5R8y0FAMuEAhd6aytb6iTKuHyShpQ7hevlM+HTSvQ8JgbNIDA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org