Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3334383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Kjw8kgpjf2gyWZlgmJlbs8VSjUMnmj8ORglwb+a67bk=
Subject key identifier: 12:D7:64:87:1C:7D:32:83:93:0D:8A:49:EB:B7:75:3E:34:EB:AA:42
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2206495BD8B04BAA146D482CAF836D87B3978225
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:38 +0000
ROA not before: Mon 26 Sep 2022 10:55:38 +0000
ROA not after: Mon 25 Sep 2023 11:00:38 +0000
asID: 59282
IP address blocks: 2400:d680:348::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:06:49:5b:d8:b0:4b:aa:14:6d:48:2c:af:83:6d:87:b3:97:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:38 2022 GMT
Not After : Sep 25 11:00:38 2023 GMT
Subject: CN=12D764871C7D3283930D8A49EBB7753E34EBAA42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:df:23:91:61:47:24:e5:02:b1:9a:9c:04:
93:8c:f9:81:5f:c6:18:47:1c:7c:8d:b0:b8:b6:af:
56:03:f1:58:8c:6e:19:9a:39:b4:82:5a:ee:c9:eb:
5b:b0:4d:35:c4:0c:36:c7:65:ea:5a:57:a1:12:52:
bc:a0:58:ac:45:26:b8:a0:24:02:fa:2f:f2:68:8e:
d4:23:da:da:64:41:69:4b:65:b1:36:33:0c:50:9c:
bf:bb:5c:d8:af:a9:9b:a9:c6:d3:fa:9e:4e:30:d6:
c1:44:03:13:12:a5:a8:81:1f:9b:1d:3f:5b:68:38:
8c:1d:bb:fa:40:40:e7:06:41:dc:5d:e9:50:17:51:
df:73:2b:a4:87:a7:d7:46:89:36:79:5f:12:e1:f5:
8b:51:73:17:3c:e8:ef:1c:54:80:7a:83:6b:a1:e7:
48:d5:02:18:6e:1a:ff:c6:d3:35:75:1d:5e:59:95:
12:28:88:68:7a:ca:18:88:83:57:64:fe:a9:a6:b4:
db:f4:83:61:16:cd:8b:d2:30:78:c6:8d:9e:b8:5e:
27:2a:80:c5:4e:f4:ce:5a:41:02:68:b4:32:e3:9c:
1a:63:14:c4:16:e6:d4:e6:01:3a:93:19:13:3d:5b:
8a:32:00:94:2d:50:e7:1b:c1:61:3a:7b:c2:ec:dd:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:64:87:1C:7D:32:83:93:0D:8A:49:EB:B7:75:3E:34:EB:AA:42
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3334383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:348::/48
Signature Algorithm: sha256WithRSAEncryption
4d:b1:6d:63:62:4f:ed:cf:4d:b7:c5:16:1a:d4:54:c1:cf:8e:
38:1b:a5:e0:46:ef:72:80:11:50:e2:00:ee:67:db:3a:48:e7:
dd:a1:fe:38:88:14:e5:5c:5e:24:ba:a2:8f:0f:6a:18:ef:91:
91:71:f7:e1:b6:75:85:21:9f:a4:6f:ec:52:53:c3:10:42:11:
6c:75:50:56:e7:f6:e9:6d:b2:25:11:78:2c:cf:d3:32:c3:58:
39:f9:6a:99:f7:df:37:5a:56:b4:fc:a2:b5:31:69:c6:a7:54:
8e:1c:01:63:e7:17:14:01:82:b8:8a:b3:92:0d:87:e1:d2:8a:
76:2d:eb:5d:ec:fa:00:69:99:89:e2:92:a9:81:11:c4:9d:5b:
67:e9:5f:d6:68:7d:5e:00:36:9f:99:36:b0:71:f8:59:da:a5:
17:8f:1f:4b:cb:29:35:19:ad:c4:c7:f3:7b:85:85:08:e9:65:
06:d5:81:0f:52:6b:7b:06:ad:e9:a1:d5:2c:99:7d:90:7b:65:
ec:07:d0:27:e1:b2:f6:3d:4d:89:d9:da:36:f4:93:c2:8e:d7:
6c:33:fb:0e:ed:eb:87:0e:0e:87:bd:4e:43:a9:6a:5f:fa:82:
7e:3c:b5:05:8a:16:b5:4d:ae:36:05:29:f0:66:f5:96:9f:1d:
58:c3:d2:fc
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUIgZJW9iwS6oUbUgsr4Nth7OXgiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1MzhaFw0yMzA5MjUxMTAwMzhaMDMxMTAvBgNV
BAMTKDEyRDc2NDg3MUM3RDMyODM5MzBEOEE0OUVCQjc3NTNFMzRFQkFBNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbd8jkWFHJOUCsZqcBJOM+YFf
xhhHHHyNsLi2r1YD8ViMbhmaObSCWu7J61uwTTXEDDbHZepaV6ESUrygWKxFJrig
JAL6L/JojtQj2tpkQWlLZbE2MwxQnL+7XNivqZupxtP6nk4w1sFEAxMSpaiBH5sd
P1toOIwdu/pAQOcGQdxd6VAXUd9zK6SHp9dGiTZ5XxLh9YtRcxc86O8cVIB6g2uh
50jVAhhuGv/G0zV1HV5ZlRIoiGh6yhiIg1dk/qmmtNv0g2EWzYvSMHjGjZ64Xicq
gMVO9M5aQQJotDLjnBpjFMQW5tTmATqTGRM9W4oyAJQtUOcbwWE6e8Ls3eV5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUEtdkhxx9MoOTDYpJ67d1PjTrqkIwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzNDM4M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
SDANBgkqhkiG9w0BAQsFAAOCAQEATbFtY2JP7c9Nt8UWGtRUwc+OOBul4EbvcoAR
UOIA7mfbOkjn3aH+OIgU5VxeJLqijw9qGO+RkXH34bZ1hSGfpG/sUlPDEEIRbHVQ
Vuf26W2yJRF4LM/TMsNYOflqmfffN1pWtPyitTFpxqdUjhwBY+cXFAGCuIqzkg2H
4dKKdi3rXez6AGmZieKSqYERxJ1bZ+lf1mh9XgA2n5k2sHH4WdqlF48fS8spNRmt
xMfze4WFCOllBtWBD1Jrewat6aHVLJl9kHtl7AfQJ+Gy9j1NidnaNvSTwo7XbDP7
Du3rhw4Oh71OQ6lqX/qCfjy1BYoWtU2uNgUp8Gb1lp8dWMPS/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org