Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336353a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3336353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: U4MZXOM4FJr5SGTh1pageYrWa1hV8CiVwnb1DVji14A=
Subject key identifier: EA:48:03:FA:54:2C:29:94:46:C8:55:7B:26:3F:4C:1C:E8:DA:8E:57
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3E87FD615CD576DCFD5F24A0A83A008E23C58D03
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336353a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:48 +0000
ROA not before: Mon 26 Sep 2022 10:55:48 +0000
ROA not after: Mon 25 Sep 2023 11:00:48 +0000
asID: 59282
IP address blocks: 2400:d680:365::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:87:fd:61:5c:d5:76:dc:fd:5f:24:a0:a8:3a:00:8e:23:c5:8d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:48 2022 GMT
Not After : Sep 25 11:00:48 2023 GMT
Subject: CN=EA4803FA542C299446C8557B263F4C1CE8DA8E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:0a:7d:5e:9e:9f:cd:23:ae:40:ef:79:b4:
4c:ec:82:d5:4d:f8:9f:96:ba:41:2d:74:8f:57:11:
91:85:ad:eb:72:ee:43:54:d6:d0:fc:de:fb:62:d7:
b5:e3:c0:48:f1:90:5b:fe:b6:12:c7:b7:fc:e5:49:
46:b1:f5:6e:bd:ae:12:a4:5a:c7:f8:98:ee:9e:e6:
b8:25:9f:a0:8f:c2:04:37:90:b7:a8:f3:bd:65:d1:
be:7b:dd:15:d7:ed:f1:27:9b:24:9f:ab:2f:34:34:
59:0c:30:bb:88:3a:9d:f0:11:a6:93:25:f5:75:ea:
7d:92:59:91:d8:35:4f:49:91:98:fa:5a:ed:af:2f:
2c:d0:d3:1b:86:7b:18:ff:3d:b8:cc:0e:f3:9f:b7:
0c:eb:f0:27:bc:a8:36:3c:bd:cd:0d:85:1c:31:61:
9b:db:86:ed:f1:94:a1:eb:f1:00:f3:84:56:3f:e8:
92:52:b3:b6:1f:3d:0e:19:0a:87:14:35:69:1a:ae:
17:50:ee:d6:76:b3:6d:9f:48:62:c7:61:89:21:52:
fe:09:24:8b:5a:2b:3e:cd:75:6a:43:ab:32:24:c9:
4a:7c:44:3e:77:78:29:bb:71:d0:07:6c:9e:df:8c:
bf:f1:3a:33:99:51:6e:8f:5d:39:43:44:0c:38:91:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:48:03:FA:54:2C:29:94:46:C8:55:7B:26:3F:4C:1C:E8:DA:8E:57
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336353a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:365::/48
Signature Algorithm: sha256WithRSAEncryption
c8:07:7f:13:d7:75:0b:5e:ee:03:26:71:fc:5a:56:9d:9a:f2:
b7:27:08:f7:69:88:89:95:2d:28:26:0d:97:b8:48:01:a4:a7:
98:fe:bf:18:32:c4:07:ba:1e:74:c7:f9:b8:25:ec:c3:60:e1:
f8:08:09:74:1a:fa:74:76:df:fa:4a:03:f9:cb:02:22:d4:ec:
ae:06:7d:00:8b:b9:ed:83:b1:dc:e8:c0:3b:1e:7a:87:8f:af:
b1:07:9b:72:51:f4:f1:00:c7:12:19:b8:b9:e5:f7:70:45:e9:
71:2d:69:5a:e1:5e:7c:8a:f5:8b:5a:c3:52:e4:a1:86:81:9a:
79:13:77:58:e1:50:be:1c:a2:c5:df:e3:f4:3f:af:40:0f:02:
9e:87:8a:b9:b7:e8:3f:45:02:0a:6b:d1:0b:a9:d2:6e:89:bc:
e1:36:df:ea:f5:66:93:1a:30:5b:b9:57:79:71:3f:38:4e:81:
1a:47:2f:fc:81:56:40:ff:63:c9:89:60:ad:23:19:db:6a:f7:
77:17:0d:71:37:1f:e1:3b:f4:24:4a:65:98:79:e0:78:05:2a:
4e:b0:e0:26:5c:d1:8c:91:a6:ce:61:8d:56:07:8f:8d:b3:56:
0b:97:d6:9a:f6:4f:f0:28:9c:8a:e7:32:57:88:61:72:61:a4:
b7:9d:0d:16
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUPof9YVzVdtz9XySgqDoAjiPFjQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1NDhaFw0yMzA5MjUxMTAwNDhaMDMxMTAvBgNV
BAMTKEVBNDgwM0ZBNTQyQzI5OTQ0NkM4NTU3QjI2M0Y0QzFDRThEQThFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoYQp9Xp6fzSOuQO95tEzsgtVN
+J+WukEtdI9XEZGFrety7kNU1tD83vti17XjwEjxkFv+thLHt/zlSUax9W69rhKk
Wsf4mO6e5rgln6CPwgQ3kLeo871l0b573RXX7fEnmySfqy80NFkMMLuIOp3wEaaT
JfV16n2SWZHYNU9JkZj6Wu2vLyzQ0xuGexj/PbjMDvOftwzr8Ce8qDY8vc0NhRwx
YZvbhu3xlKHr8QDzhFY/6JJSs7YfPQ4ZCocUNWkarhdQ7tZ2s22fSGLHYYkhUv4J
JItaKz7NdWpDqzIkyUp8RD53eCm7cdAHbJ7fjL/xOjOZUW6PXTlDRAw4kbpRAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6kgD+lQsKZRGyFV7Jj9MHOjajlcwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzNjM1M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
ZTANBgkqhkiG9w0BAQsFAAOCAQEAyAd/E9d1C17uAyZx/FpWnZrytycI92mIiZUt
KCYNl7hIAaSnmP6/GDLEB7oedMf5uCXsw2Dh+AgJdBr6dHbf+koD+csCItTsrgZ9
AIu57YOx3OjAOx56h4+vsQebclH08QDHEhm4ueX3cEXpcS1pWuFefIr1i1rDUuSh
hoGaeRN3WOFQvhyixd/j9D+vQA8CnoeKubfoP0UCCmvRC6nSbom84Tbf6vVmkxow
W7lXeXE/OE6BGkcv/IFWQP9jyYlgrSMZ22r3dxcNcTcf4Tv0JEplmHngeAUqTrDg
JlzRjJGmzmGNVgePjbNWC5fWmvZP8CiciucyV4hhcmGkt50NFg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org