Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3265313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: acJzt8k3smPgKj6e3MiYYT/EqdGV701aM47WVazFQX4=
Subject key identifier: 82:6F:A7:F9:E7:C4:8A:B8:FB:EF:AD:1C:43:88:11:21:29:23:B9:71
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 093D482075947EBA880AD4249B8788B00274F721
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 13:00:14 +0000
ROA not before: Mon 26 Sep 2022 12:55:14 +0000
ROA not after: Mon 25 Sep 2023 13:00:14 +0000
asID: 59282
IP address blocks: 2400:d680:2e1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3d:48:20:75:94:7e:ba:88:0a:d4:24:9b:87:88:b0:02:74:f7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 12:55:14 2022 GMT
Not After : Sep 25 13:00:14 2023 GMT
Subject: CN=826FA7F9E7C48AB8FBEFAD1C438811212923B971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:98:48:00:de:bd:93:a2:cb:14:29:0f:de:
31:fc:9b:48:2d:3f:80:f3:86:3a:c0:7d:7b:c9:bf:
57:e8:51:18:a8:32:2e:5a:c4:9b:d6:cb:d4:f7:36:
2a:b3:da:4c:16:6e:31:d3:f2:5d:0a:7e:97:4d:b1:
e1:33:08:fb:49:ed:29:17:ea:df:82:a5:dd:27:b3:
be:01:03:4c:c5:02:15:06:b9:50:a8:b8:15:f4:75:
f3:37:64:52:c9:2c:ce:7e:9b:cc:b7:9f:17:62:86:
0b:12:e0:5b:d2:7c:98:09:dc:88:4b:9e:98:cc:af:
7b:8b:77:e3:93:f7:22:8d:00:33:63:d9:dd:a2:c3:
08:7d:dd:ab:1f:6c:d7:9f:0e:ef:55:2d:58:13:59:
4b:1e:8c:7b:6d:d4:20:33:39:4f:7a:3e:ac:eb:35:
08:2d:6f:1d:97:ed:9a:1e:fc:6d:5a:97:d7:2c:c6:
fe:2e:71:dc:79:89:29:ca:b3:f2:3f:3a:75:a2:8f:
4d:91:ee:b7:c8:bb:ab:12:22:88:c5:51:a7:14:9d:
39:0b:68:6c:e0:ac:8d:01:66:0e:49:54:7c:3d:c0:
eb:ca:16:00:b4:0a:58:41:4f:59:72:61:39:0c:9c:
d7:ef:7d:31:34:43:8e:e4:36:45:9c:85:b4:5a:e4:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6F:A7:F9:E7:C4:8A:B8:FB:EF:AD:1C:43:88:11:21:29:23:B9:71
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:2e1::/48
Signature Algorithm: sha256WithRSAEncryption
8f:74:fc:95:1e:53:60:c9:3f:1a:fc:62:11:b3:29:4a:09:2e:
c9:18:42:8d:2d:26:2f:d8:bf:66:7c:da:cf:7a:dc:8d:bb:a7:
6a:cc:ff:69:94:37:53:b7:56:fa:78:f9:98:8e:a5:c1:01:42:
a8:74:24:36:55:18:62:33:4d:0f:c1:40:14:bb:f2:2c:a3:2b:
86:3c:ec:e9:74:1f:3d:84:07:69:5c:a3:7b:53:98:89:79:31:
29:45:9d:b2:40:ad:ce:71:58:5d:f8:4e:fe:04:83:05:1e:84:
80:6f:95:87:20:a5:75:52:c0:27:74:fd:e3:4c:cb:a5:d2:c9:
10:3b:6b:f1:28:f9:8d:e2:63:eb:63:b4:ad:a8:5c:63:e3:a4:
49:4c:c9:58:ff:2e:7e:b9:74:9a:6e:18:2f:cd:ad:67:17:e2:
05:9d:b4:5c:26:e4:8d:0e:b6:87:f7:1f:21:42:04:40:56:28:
a5:d1:7b:cc:80:36:e6:e6:c8:77:21:8d:06:e3:b0:ae:7e:96:
9d:aa:c8:eb:29:d3:51:00:20:af:bf:fd:97:0f:eb:39:8e:35:
b4:9d:64:69:43:dd:c5:89:f1:de:da:53:4a:fb:0a:1f:00:f9:
e6:39:6b:1d:d1:2c:1c:4b:09:9c:c8:63:e0:d3:a4:d4:1e:32:
18:a4:f5:4d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUCT1IIHWUfrqICtQkm4eIsAJ09yEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MTRaFw0yMzA5MjUxMzAwMTRaMDMxMTAvBgNV
BAMTKDgyNkZBN0Y5RTdDNDhBQjhGQkVGQUQxQzQzODgxMTIxMjkyM0I5NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaGJhIAN69k6LLFCkP3jH8m0gt
P4DzhjrAfXvJv1foURioMi5axJvWy9T3Niqz2kwWbjHT8l0KfpdNseEzCPtJ7SkX
6t+Cpd0ns74BA0zFAhUGuVCouBX0dfM3ZFLJLM5+m8y3nxdihgsS4FvSfJgJ3IhL
npjMr3uLd+OT9yKNADNj2d2iwwh93asfbNefDu9VLVgTWUsejHtt1CAzOU96Pqzr
NQgtbx2X7Zoe/G1al9csxv4ucdx5iSnKs/I/OnWij02R7rfIu6sSIojFUacUnTkL
aGzgrI0BZg5JVHw9wOvKFgC0ClhBT1lyYTkMnNfvfTE0Q47kNkWchbRa5OgVAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUgm+n+efEirj7760cQ4gRISkjuXEwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzI2NTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
4TANBgkqhkiG9w0BAQsFAAOCAQEAj3T8lR5TYMk/GvxiEbMpSgkuyRhCjS0mL9i/
Znzaz3rcjbunasz/aZQ3U7dW+nj5mI6lwQFCqHQkNlUYYjNND8FAFLvyLKMrhjzs
6XQfPYQHaVyje1OYiXkxKUWdskCtznFYXfhO/gSDBR6EgG+VhyCldVLAJ3T940zL
pdLJEDtr8Sj5jeJj62O0rahcY+OkSUzJWP8ufrl0mm4YL82tZxfiBZ20XCbkjQ62
h/cfIUIEQFYopdF7zIA25ubIdyGNBuOwrn6WnarI6ynTUQAgr7/9lw/rOY41tJ1k
aUPdxYnx3tpTSvsKHwD55jlrHdEsHEsJnMhj4NOk1B4yGKT1TQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org