Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3334303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: DelTI5o+ZPEcMPfpfM6s6Vz1o6fHxDN71Bhy9fbXRpY=
Subject key identifier: C9:BB:D5:49:5E:73:83:5C:67:97:65:58:EB:EF:66:83:FD:20:E8:85
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 49CAC5418E5DC5CF451B3B992169FCA2ECDDE173
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:22 +0000
ROA not before: Mon 26 Sep 2022 10:55:22 +0000
ROA not after: Mon 25 Sep 2023 11:00:22 +0000
asID: 59282
IP address blocks: 2400:d680:340::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ca:c5:41:8e:5d:c5:cf:45:1b:3b:99:21:69:fc:a2:ec:dd:e1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:22 2022 GMT
Not After : Sep 25 11:00:22 2023 GMT
Subject: CN=C9BBD5495E73835C67976558EBEF6683FD20E885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:84:fd:54:16:df:1d:65:83:b6:05:e0:8a:
18:f7:32:5d:a7:46:a3:ca:f4:13:cd:6f:50:23:a3:
2f:27:a6:28:00:22:7e:13:64:00:da:e9:1e:bf:4b:
2a:b4:d5:ed:83:c2:c7:58:cc:ec:cc:24:1e:0b:d5:
80:5f:f8:31:f3:6f:14:3f:9d:d7:81:ab:c4:cb:0e:
0e:a9:ed:3d:1f:96:c3:45:10:6d:50:0a:10:a7:d9:
7f:08:fe:3c:13:93:19:6e:4c:b7:fa:c8:bb:b8:b8:
93:2d:4f:ff:8a:79:cc:91:22:6a:1d:dc:85:d6:61:
6e:54:07:6b:eb:82:fa:6b:a6:8f:e8:e0:8d:fd:c2:
d1:8a:5c:a5:e6:cc:1c:a5:24:89:14:f7:9a:04:bb:
4e:74:35:d0:07:38:bc:29:e3:86:bb:89:c0:f5:e0:
49:16:55:1b:fd:a4:03:57:86:49:12:17:8d:4d:be:
06:06:fb:0a:40:ba:07:35:39:75:b3:79:91:65:6a:
4a:4e:aa:72:72:9a:28:c0:c8:f7:d1:15:cf:e4:4a:
2d:28:ee:c7:2c:d8:e7:81:5f:78:c2:85:68:97:7c:
31:ce:10:7d:1e:f0:1d:1a:d4:6b:f5:9c:8f:c4:e5:
1d:f8:14:d5:4e:78:0a:8d:aa:bf:76:ad:32:61:ee:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:D5:49:5E:73:83:5C:67:97:65:58:EB:EF:66:83:FD:20:E8:85
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:340::/48
Signature Algorithm: sha256WithRSAEncryption
11:a6:62:9c:ea:d5:e0:ee:59:2a:e8:91:b1:d2:1a:2d:cf:da:
c8:77:b0:56:62:76:9a:2a:7d:fa:c4:7f:c5:57:81:0b:4d:47:
57:b6:c3:16:b9:cc:5b:91:bb:01:71:8e:25:76:35:71:12:56:
c6:4a:f2:22:0f:77:db:f8:26:32:6e:61:b7:84:64:80:ef:aa:
5b:68:11:9f:ee:1f:4c:88:61:2e:b3:81:d6:5f:7a:6d:20:91:
13:58:93:57:83:dc:03:6c:ef:02:aa:d7:8d:2c:f8:b4:9a:13:
c7:87:2d:40:52:55:4c:4d:1c:93:fb:6d:70:10:dc:dd:7d:1b:
09:50:f1:26:28:84:40:19:3e:84:a5:bd:a3:99:19:47:bc:2f:
f3:07:f6:f6:99:43:a9:ac:1b:39:94:60:70:39:30:94:51:d6:
70:c8:ea:c0:f0:f1:4c:8b:79:57:b7:b2:cb:d3:97:8b:94:10:
ed:5d:91:cf:a3:1c:49:6b:12:96:90:9f:b0:3a:b7:00:36:31:
4a:23:a2:f7:4b:36:48:fb:17:0c:d8:cd:a9:ee:18:94:62:cd:
8f:84:06:c8:0f:c2:66:6f:a8:66:44:92:2a:20:a7:2b:50:02:
9d:50:f0:92:0e:16:6f:92:55:87:b2:ae:98:6e:d0:d9:7f:d4:
d5:07:b0:1e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUScrFQY5dxc9FGzuZIWn8ouzd4XMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1MjJaFw0yMzA5MjUxMTAwMjJaMDMxMTAvBgNV
BAMTKEM5QkJENTQ5NUU3MzgzNUM2Nzk3NjU1OEVCRUY2NjgzRkQyMEU4ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvf4T9VBbfHWWDtgXgihj3Ml2n
RqPK9BPNb1Ajoy8npigAIn4TZADa6R6/Syq01e2DwsdYzOzMJB4L1YBf+DHzbxQ/
ndeBq8TLDg6p7T0flsNFEG1QChCn2X8I/jwTkxluTLf6yLu4uJMtT/+KecyRImod
3IXWYW5UB2vrgvprpo/o4I39wtGKXKXmzBylJIkU95oEu050NdAHOLwp44a7icD1
4EkWVRv9pANXhkkSF41NvgYG+wpAugc1OXWzeZFlakpOqnJymijAyPfRFc/kSi0o
7scs2OeBX3jChWiXfDHOEH0e8B0a1Gv1nI/E5R34FNVOeAqNqr92rTJh7o1hAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUybvVSV5zg1xnl2VY6+9mg/0g6IUwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzNDMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
QDANBgkqhkiG9w0BAQsFAAOCAQEAEaZinOrV4O5ZKuiRsdIaLc/ayHewVmJ2mip9
+sR/xVeBC01HV7bDFrnMW5G7AXGOJXY1cRJWxkryIg932/gmMm5ht4RkgO+qW2gR
n+4fTIhhLrOB1l96bSCRE1iTV4PcA2zvAqrXjSz4tJoTx4ctQFJVTE0ck/ttcBDc
3X0bCVDxJiiEQBk+hKW9o5kZR7wv8wf29plDqawbOZRgcDkwlFHWcMjqwPDxTIt5
V7eyy9OXi5QQ7V2Rz6McSWsSlpCfsDq3ADYxSiOi90s2SPsXDNjNqe4YlGLNj4QG
yA/CZm+oZkSSKiCnK1ACnVDwkg4Wb5JVh7KumG7Q2X/U1QewHg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org