Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264333a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3264333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: MG5KD/iVX/C2el71xO7asCzmN5aLoY7sFBipqO1mK7U=
Subject key identifier: 7C:0B:54:A1:1E:36:D1:6D:BD:F5:B5:DE:81:A4:C8:D9:B7:62:27:6C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2623F93FFA05832BC75F30EC35DB1747C3435B1D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264333a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:04 +0000
ROA not before: Mon 26 Sep 2022 12:55:04 +0000
ROA not after: Mon 25 Sep 2023 13:00:04 +0000
asID: 59282
IP address blocks: 2400:d680:2d3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:23:f9:3f:fa:05:83:2b:c7:5f:30:ec:35:db:17:47:c3:43:5b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:04 2022 GMT
Not After : Sep 25 13:00:04 2023 GMT
Subject: CN=7C0B54A11E36D16DBDF5B5DE81A4C8D9B762276C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:50:47:c3:38:a4:31:87:19:98:04:23:08:
2d:ba:ae:b5:b1:2a:60:80:42:54:50:74:d4:a2:f4:
89:08:05:9f:36:4c:b6:d7:2e:bb:c3:6c:47:a5:d6:
22:eb:5a:c1:5a:12:04:af:07:45:7d:81:1d:6e:f1:
c3:5a:f1:12:7b:35:c6:5d:2e:77:c9:90:6a:04:27:
df:05:57:6f:96:cf:13:e0:3e:47:01:2c:90:a5:36:
14:7e:a7:45:f0:1e:93:73:a2:f7:ae:d6:2c:e0:6c:
0d:64:3b:a8:81:ec:bc:a4:fc:cb:f1:a1:49:cd:72:
fb:87:68:88:ea:ee:6d:0a:9c:92:66:19:64:90:76:
81:32:27:ac:e5:73:36:eb:4d:0e:f8:b6:24:c3:7a:
22:cf:85:50:c8:b5:d7:bc:f2:14:de:46:cb:01:df:
20:73:b4:de:52:00:e7:ee:f6:8c:7b:b6:e0:9f:64:
e5:46:4f:9d:2c:a9:04:4a:4d:5a:34:0c:c8:aa:3e:
12:b1:ce:d0:78:13:1b:09:59:2d:ad:22:3e:60:5c:
ca:1c:ae:2b:f6:7e:47:9b:da:ee:c6:cc:31:e7:33:
54:ce:2b:b0:f1:10:c8:3e:fb:76:79:59:37:81:49:
f6:c0:9e:d1:f1:3b:0a:78:21:1c:de:66:7f:7b:a7:
dd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0B:54:A1:1E:36:D1:6D:BD:F5:B5:DE:81:A4:C8:D9:B7:62:27:6C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3264333a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2d3::/48
Signature Algorithm: sha256WithRSAEncryption
3e:08:e8:0e:f7:73:45:af:b0:e0:ce:f9:46:74:72:3e:7a:0b:
d9:88:6b:0b:8e:5b:2b:8c:e7:07:50:7f:b5:bc:51:d7:d3:34:
df:27:7a:08:a4:eb:da:22:b5:33:3d:9d:2a:1d:b4:29:3e:2d:
76:db:76:66:1d:b9:dc:33:6c:06:2c:7d:45:43:d6:2d:ac:8f:
1a:a4:1e:21:16:a9:56:9d:b0:57:68:e5:04:4e:68:48:93:a8:
a2:15:e1:09:06:3b:7c:29:fb:4b:1d:42:7b:60:ba:03:7c:a1:
c1:fb:64:70:72:c0:d3:44:d4:25:00:74:4a:2b:43:5b:b4:84:
ff:1c:29:bf:17:89:f7:f3:37:12:85:9c:00:9b:94:27:33:8c:
6d:bc:7b:01:ec:75:e9:0c:3d:eb:27:34:04:2d:d5:f4:94:55:
e4:8e:88:58:48:e1:67:20:39:8d:9e:96:03:bb:1d:23:85:e0:
71:da:64:84:be:bc:0c:bd:24:b7:48:97:c4:16:93:b4:fd:1c:
95:ee:43:b9:f3:10:13:ea:83:a1:b3:85:0a:a2:97:de:12:56:
78:9c:16:1e:ee:c7:be:0e:8c:ec:fe:4f:3c:db:ac:de:65:49:
06:a2:15:f2:1a:a4:f5:00:59:d5:f0:bb:ae:6b:24:62:9c:40:
22:ba:ea:5a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJiP5P/oFgyvHXzDsNdsXR8NDWx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MDRaFw0yMzA5MjUxMzAwMDRaMDMxMTAvBgNV
BAMTKDdDMEI1NEExMUUzNkQxNkRCREY1QjVERTgxQTRDOEQ5Qjc2MjI3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfl1BHwzikMYcZmAQjCC26rrWx
KmCAQlRQdNSi9IkIBZ82TLbXLrvDbEel1iLrWsFaEgSvB0V9gR1u8cNa8RJ7NcZd
LnfJkGoEJ98FV2+WzxPgPkcBLJClNhR+p0XwHpNzoveu1izgbA1kO6iB7Lyk/Mvx
oUnNcvuHaIjq7m0KnJJmGWSQdoEyJ6zlczbrTQ74tiTDeiLPhVDItde88hTeRssB
3yBztN5SAOfu9ox7tuCfZOVGT50sqQRKTVo0DMiqPhKxztB4ExsJWS2tIj5gXMoc
riv2fkeb2u7GzDHnM1TOK7DxEMg++3Z5WTeBSfbAntHxOwp4IRzeZn97p935AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfAtUoR420W299bXegaTI2bdiJ2wwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzI2NDMzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
0zANBgkqhkiG9w0BAQsFAAOCAQEAPgjoDvdzRa+w4M75RnRyPnoL2YhrC45bK4zn
B1B/tbxR19M03yd6CKTr2iK1Mz2dKh20KT4tdtt2Zh253DNsBix9RUPWLayPGqQe
IRapVp2wV2jlBE5oSJOoohXhCQY7fCn7Sx1Ce2C6A3yhwftkcHLA00TUJQB0SitD
W7SE/xwpvxeJ9/M3EoWcAJuUJzOMbbx7Aex16Qw96yc0BC3V9JRV5I6IWEjhZyA5
jZ6WA7sdI4XgcdpkhL68DL0kt0iXxBaTtP0cle5DufMQE+qDobOFCqKX3hJWeJwW
Hu7Hvg6M7P5PPNus3mVJBqIV8hqk9QBZ1fC7rmskYpxAIrrqWg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org