Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336323a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3336323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: uqE0VXkiGL18nKgf/1KbLdT/q4xp9zerP7GuEZV5Y2U=
Subject key identifier: B3:D3:40:A2:AD:A8:9B:3F:71:FF:30:22:FA:43:1A:9B:B7:B2:63:72
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7C26CD5C75D1BCAE439B601B6C626B5827C9CBB0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336323a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:30 +0000
ROA not before: Mon 26 Sep 2022 10:55:30 +0000
ROA not after: Mon 25 Sep 2023 11:00:30 +0000
asID: 59282
IP address blocks: 2400:d680:362::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:26:cd:5c:75:d1:bc:ae:43:9b:60:1b:6c:62:6b:58:27:c9:cb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:30 2022 GMT
Not After : Sep 25 11:00:30 2023 GMT
Subject: CN=B3D340A2ADA89B3F71FF3022FA431A9BB7B26372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:96:00:2d:81:e1:b7:32:a2:c0:3a:35:d6:
01:54:ae:ba:cb:49:8e:15:22:97:64:ea:b2:ca:86:
f2:9f:67:0b:f9:60:87:35:a2:e9:87:8a:c7:1f:d8:
a0:85:3d:09:b7:b0:7d:8e:ab:0b:6e:9c:f7:1d:a5:
7a:9b:0f:bc:09:4b:ed:31:7b:18:8e:81:a4:b0:f3:
71:aa:a2:34:a7:15:3f:2b:97:67:b6:90:7f:57:96:
1f:34:39:33:da:49:d9:a4:ff:53:7c:e2:51:e3:89:
a7:8d:e8:5a:fb:88:f3:c5:77:37:a9:bf:0a:cc:5a:
5f:7c:6f:58:5c:3b:64:57:1f:65:5a:ad:05:c9:8a:
9a:14:a8:4d:50:5a:10:eb:c0:3f:de:97:7d:29:f9:
3a:ee:68:b6:e9:63:58:aa:a1:d0:ee:8a:67:a6:98:
d4:6c:b4:73:d5:ff:6e:a6:bf:54:22:a7:93:4b:4e:
89:ac:5c:73:71:78:19:93:68:1e:85:38:1a:1f:f2:
18:b1:b2:c1:07:cb:91:0a:db:0d:e8:74:01:8b:74:
21:6c:e3:c1:e1:f4:bb:12:8d:10:e9:77:8d:a6:32:
c3:f5:b7:7f:3b:02:14:d0:09:08:7b:53:0e:0c:b9:
c0:07:36:3c:aa:6f:ee:c8:b0:90:78:97:fa:83:fb:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:40:A2:AD:A8:9B:3F:71:FF:30:22:FA:43:1A:9B:B7:B2:63:72
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336323a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:362::/48
Signature Algorithm: sha256WithRSAEncryption
93:70:4c:da:43:c5:35:8c:9e:3d:45:8a:2e:59:6f:29:e0:65:
83:23:5f:f8:fb:63:1f:61:bc:d0:56:9e:78:86:d7:88:ac:a6:
7b:e2:06:85:b5:5d:1e:e7:78:1b:cf:2a:ee:48:ea:74:bb:00:
94:89:9b:d9:13:80:20:35:08:29:84:eb:4d:90:e2:26:5e:28:
08:1b:5d:8f:41:bf:39:01:8d:35:08:a3:b3:b6:db:b5:0b:15:
b5:f1:b4:1f:de:da:12:30:2a:f9:d7:21:a2:bb:2e:c7:ed:f9:
ed:29:95:fd:80:5d:cb:45:d1:04:2c:27:ba:82:2f:0f:a1:51:
ab:71:f5:ff:0b:d6:67:76:8a:fa:df:27:cb:ce:65:89:db:12:
02:8b:bb:52:a5:98:b6:55:f7:71:78:bf:64:35:ac:46:d7:3a:
ad:cc:ba:73:0f:88:5f:d0:6f:89:a5:a9:a7:70:c8:7b:e5:25:
e7:0a:97:d8:78:b2:81:6f:ad:1a:ec:09:ec:49:ea:6d:2a:fd:
5b:fe:8d:86:6b:c1:8c:1c:38:83:52:d3:87:62:1f:cd:61:2f:
bd:f3:e4:57:53:a6:ea:4c:d3:26:41:09:4f:5f:60:49:90:43:
96:3b:cf:b1:ea:c0:86:10:02:5e:3c:bb:55:68:1e:a8:1a:44:
f4:77:1c:9a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfCbNXHXRvK5Dm2AbbGJrWCfJy7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1MzBaFw0yMzA5MjUxMTAwMzBaMDMxMTAvBgNV
BAMTKEIzRDM0MEEyQURBODlCM0Y3MUZGMzAyMkZBNDMxQTlCQjdCMjYzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfx5YALYHhtzKiwDo11gFUrrrL
SY4VIpdk6rLKhvKfZwv5YIc1oumHiscf2KCFPQm3sH2OqwtunPcdpXqbD7wJS+0x
exiOgaSw83GqojSnFT8rl2e2kH9Xlh80OTPaSdmk/1N84lHjiaeN6Fr7iPPFdzep
vwrMWl98b1hcO2RXH2VarQXJipoUqE1QWhDrwD/el30p+TruaLbpY1iqodDuimem
mNRstHPV/26mv1Qip5NLTomsXHNxeBmTaB6FOBof8hixssEHy5EK2w3odAGLdCFs
48Hh9LsSjRDpd42mMsP1t387AhTQCQh7Uw4MucAHNjyqb+7IsJB4l/qD+8+TAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUs9NAoq2omz9x/zAi+kMam7eyY3IwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzNjMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
YjANBgkqhkiG9w0BAQsFAAOCAQEAk3BM2kPFNYyePUWKLllvKeBlgyNf+PtjH2G8
0FaeeIbXiKyme+IGhbVdHud4G88q7kjqdLsAlImb2ROAIDUIKYTrTZDiJl4oCBtd
j0G/OQGNNQijs7bbtQsVtfG0H97aEjAq+dchorsux+357SmV/YBdy0XRBCwnuoIv
D6FRq3H1/wvWZ3aK+t8ny85lidsSAou7UqWYtlX3cXi/ZDWsRtc6rcy6cw+IX9Bv
iaWpp3DIe+Ul5wqX2HiygW+tGuwJ7EnqbSr9W/6NhmvBjBw4g1LTh2IfzWEvvfPk
V1Om6kzTJkEJT19gSZBDljvPserAhhACXjy7VWgeqBpE9Hccmg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org