Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3335363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 63I95lcTqyQJQP1F8NkVO043UzACL7O5URft4ujX924=
Subject key identifier: 11:C5:9A:8D:9E:F6:71:95:95:3C:D6:8D:BC:9D:11:EC:54:1E:B1:F4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 338F6B8743F946876DFB82E1387ADFB5871733E7
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:38 +0000
ROA not before: Mon 26 Sep 2022 10:55:38 +0000
ROA not after: Mon 25 Sep 2023 11:00:38 +0000
asID: 59282
IP address blocks: 2400:d680:356::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:8f:6b:87:43:f9:46:87:6d:fb:82:e1:38:7a:df:b5:87:17:33:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:38 2022 GMT
Not After : Sep 25 11:00:38 2023 GMT
Subject: CN=11C59A8D9EF67195953CD68DBC9D11EC541EB1F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:fc:a9:fb:c2:6e:a0:58:93:c1:b2:38:e9:
9c:f0:74:ce:dd:2b:b8:99:28:d4:69:e1:a8:a6:18:
f0:da:b6:5e:10:ae:49:f1:a3:52:88:e8:66:cf:db:
6d:08:9f:ad:1f:8f:cc:07:89:ee:bb:24:a6:ef:b3:
d9:5b:ea:c6:f5:03:d1:0d:3d:af:49:98:0e:d4:03:
a3:0b:54:e5:b2:da:72:72:1e:76:53:2f:fc:cc:48:
e5:9c:1d:c7:cf:06:cf:a4:19:35:50:b5:e6:6f:be:
00:74:77:e5:00:c9:f6:18:da:f3:5e:ba:bf:b4:3d:
11:57:cc:f1:13:51:39:f2:ef:29:04:fb:ac:19:d3:
fe:3a:7f:a2:08:f9:5a:5b:21:10:be:ac:94:81:de:
31:23:f8:b8:93:c2:47:17:8c:d7:b1:83:9c:d7:67:
67:3b:51:f9:24:58:3a:e0:ff:6d:a5:51:06:a0:30:
91:84:28:3a:2b:ad:25:9e:18:49:11:b8:15:3e:71:
88:f6:a3:e7:71:b6:0a:01:20:f2:be:4c:ba:e3:90:
41:48:ea:ad:df:87:32:99:23:3a:00:a0:97:0b:2f:
f8:3a:f8:9b:7e:56:3c:bb:29:f6:c2:0d:d6:9d:77:
8e:9e:3a:2d:56:71:21:3a:a5:4c:68:dc:3d:28:63:
42:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:9A:8D:9E:F6:71:95:95:3C:D6:8D:BC:9D:11:EC:54:1E:B1:F4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3335363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:356::/48
Signature Algorithm: sha256WithRSAEncryption
4a:b3:b5:c9:86:9b:c8:b1:9c:62:70:ae:88:1a:08:e7:a9:43:
a8:42:73:9d:1e:72:32:20:0a:33:81:c9:28:82:0a:34:84:a3:
3c:03:34:0f:26:0d:7b:a6:a6:ba:da:a5:f9:1c:c1:dc:86:16:
f7:51:85:81:79:06:c7:d5:a0:c5:19:e3:2d:13:ea:58:1f:b1:
92:64:74:7c:42:94:d0:ee:5e:bd:77:d8:d4:66:65:be:86:52:
31:0b:c8:e5:bc:47:b2:49:e7:74:66:3c:90:9a:1c:93:bf:94:
b4:a5:f5:df:12:ef:6c:1d:ba:ab:88:9b:02:b2:ff:41:43:49:
10:a2:3a:6d:b4:6d:90:ae:9b:b9:1f:a7:53:ce:80:09:70:16:
af:eb:e9:a8:c9:d1:5d:87:a2:b8:1b:b6:f3:8b:39:e0:09:7c:
e3:42:bd:c5:7c:c1:3b:1b:9c:91:85:fa:2f:73:ce:96:c0:01:
98:e4:5f:99:b7:cc:15:90:95:28:73:55:55:69:4e:0b:bb:9b:
97:09:ec:f9:bb:72:3d:10:36:bf:be:49:1d:4d:4c:98:b3:1a:
e0:1e:44:b3:5f:77:4d:8d:88:e7:9c:ad:8a:ea:c6:84:ac:48:
aa:c3:f0:6a:24:40:ea:50:d6:46:51:d2:da:43:d5:bf:37:67:
ab:e6:2e:1c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUM49rh0P5Rodt+4LhOHrftYcXM+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1MzhaFw0yMzA5MjUxMTAwMzhaMDMxMTAvBgNV
BAMTKDExQzU5QThEOUVGNjcxOTU5NTNDRDY4REJDOUQxMUVDNTQxRUIxRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7vyp+8JuoFiTwbI46ZzwdM7d
K7iZKNRp4aimGPDatl4Qrknxo1KI6GbP220In60fj8wHie67JKbvs9lb6sb1A9EN
Pa9JmA7UA6MLVOWy2nJyHnZTL/zMSOWcHcfPBs+kGTVQteZvvgB0d+UAyfYY2vNe
ur+0PRFXzPETUTny7ykE+6wZ0/46f6II+VpbIRC+rJSB3jEj+LiTwkcXjNexg5zX
Z2c7UfkkWDrg/22lUQagMJGEKDorrSWeGEkRuBU+cYj2o+dxtgoBIPK+TLrjkEFI
6q3fhzKZIzoAoJcLL/g6+Jt+Vjy7KfbCDdadd46eOi1WcSE6pUxo3D0oY0LlAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUEcWajZ72cZWVPNaNvJ0R7FQesfQwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzNTM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
VjANBgkqhkiG9w0BAQsFAAOCAQEASrO1yYabyLGcYnCuiBoI56lDqEJznR5yMiAK
M4HJKIIKNISjPAM0DyYNe6amutql+RzB3IYW91GFgXkGx9WgxRnjLRPqWB+xkmR0
fEKU0O5evXfY1GZlvoZSMQvI5bxHsknndGY8kJock7+UtKX13xLvbB26q4ibArL/
QUNJEKI6bbRtkK6buR+nU86ACXAWr+vpqMnRXYeiuBu284s54Al840K9xXzBOxuc
kYX6L3POlsABmORfmbfMFZCVKHNVVWlOC7ublwns+btyPRA2v75JHU1MmLMa4B5E
s193TY2I55ytiurGhKxIqsPwaiRA6lDWRlHS2kPVvzdnq+YuHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org