Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3337363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: o+lq6Px8MNufcYZjCMMmexNLxZrsWuenyoEGfgbXclk=
Subject key identifier: C4:A2:5D:ED:03:1E:C4:B5:6B:62:F6:CE:42:ED:C2:25:F9:F2:01:A5
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4D6E6E771C32F801C54D530567BBAE48F8ADAFDF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:32 +0000
ROA not before: Mon 26 Sep 2022 10:55:32 +0000
ROA not after: Mon 25 Sep 2023 11:00:32 +0000
asID: 59282
IP address blocks: 2400:d680:376::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6e:6e:77:1c:32:f8:01:c5:4d:53:05:67:bb:ae:48:f8:ad:af:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:32 2022 GMT
Not After : Sep 25 11:00:32 2023 GMT
Subject: CN=C4A25DED031EC4B56B62F6CE42EDC225F9F201A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:3c:59:a7:08:90:d4:2b:70:4f:db:55:c8:
7b:c0:bf:6f:1b:5e:f5:3f:d5:f8:76:5e:93:af:17:
45:07:db:b8:df:b0:4a:96:d3:c9:a0:e5:80:50:b8:
5d:cb:83:83:4d:e5:67:bf:82:32:e0:09:70:33:f2:
b8:fa:bb:34:1b:66:55:50:52:9c:84:c5:8d:53:c5:
3f:76:09:4c:f0:05:02:76:39:b6:45:90:7b:cb:40:
aa:34:71:e1:86:d5:36:56:7f:90:f8:a4:9e:e0:ac:
a6:a8:1e:63:6a:e8:62:54:32:08:f7:8b:14:8a:63:
03:0e:ba:36:b3:2b:d5:b2:74:92:6b:9a:1c:55:87:
b6:07:0b:06:74:d3:9f:64:25:86:4b:8a:41:d6:e7:
ed:52:13:43:e5:b5:03:24:b1:28:4b:5e:60:7e:ed:
4d:b9:34:c2:64:0f:0c:be:20:9a:be:d5:dd:f3:54:
c8:81:98:ff:03:ac:ca:ee:7f:be:12:06:72:97:33:
65:c9:9b:5d:64:eb:4d:d9:ad:62:93:33:55:1a:92:
fe:86:c6:da:55:d2:50:b7:20:c9:05:4d:8e:ab:ab:
00:fc:07:5e:87:dc:da:75:51:be:11:ec:f8:2d:e2:
b8:00:ab:fc:d2:a6:90:2f:f1:74:d9:e1:57:4d:1a:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A2:5D:ED:03:1E:C4:B5:6B:62:F6:CE:42:ED:C2:25:F9:F2:01:A5
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:376::/48
Signature Algorithm: sha256WithRSAEncryption
4a:45:46:8e:04:e2:ca:a5:ee:9e:dd:05:7a:95:78:9b:bd:ec:
ee:63:2b:59:16:ea:38:5c:6f:e0:1c:8f:b7:dd:74:89:4c:34:
d3:2b:07:07:0a:65:cf:30:b3:c3:24:c7:07:0a:75:2b:db:46:
fd:6f:31:cd:dc:11:54:7a:1d:06:21:1e:7f:6f:67:a1:83:24:
25:d0:70:e8:02:ab:e4:82:e1:02:19:27:64:5c:34:af:f0:c5:
65:20:57:62:32:c9:6b:61:61:c4:6b:79:4a:3f:c8:11:35:51:
f0:c8:8e:d1:7e:22:07:2a:a9:4e:16:63:96:39:83:27:8c:e7:
65:1e:91:c0:80:f4:a3:48:30:57:a1:35:34:57:33:4e:f0:e5:
ab:e7:86:df:c7:08:c9:92:9b:77:45:3c:14:8f:03:01:94:bd:
1d:7f:98:3b:59:45:28:d0:2b:26:a0:cd:4b:7c:d2:b3:4d:04:
55:94:19:fa:a0:15:86:82:54:1c:07:61:32:a4:cd:6a:a3:fa:
84:d5:f7:9c:17:5d:4a:5e:7b:9d:f1:14:3a:47:42:fd:b1:1f:
e2:a8:0c:0f:03:fe:5c:fe:61:9c:3d:73:86:6b:03:17:8a:38:
5f:f6:ca:6b:13:ee:8e:a1:86:65:fb:4f:9a:2d:ca:00:2d:56:
37:a7:bd:98
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUTW5udxwy+AHFTVMFZ7uuSPitr98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1MzJaFw0yMzA5MjUxMTAwMzJaMDMxMTAvBgNV
BAMTKEM0QTI1REVEMDMxRUM0QjU2QjYyRjZDRTQyRURDMjI1RjlGMjAxQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CTxZpwiQ1CtwT9tVyHvAv28b
XvU/1fh2XpOvF0UH27jfsEqW08mg5YBQuF3Lg4NN5We/gjLgCXAz8rj6uzQbZlVQ
UpyExY1TxT92CUzwBQJ2ObZFkHvLQKo0ceGG1TZWf5D4pJ7grKaoHmNq6GJUMgj3
ixSKYwMOujazK9WydJJrmhxVh7YHCwZ0059kJYZLikHW5+1SE0PltQMksShLXmB+
7U25NMJkDwy+IJq+1d3zVMiBmP8DrMruf74SBnKXM2XJm11k603ZrWKTM1Uakv6G
xtpV0lC3IMkFTY6rqwD8B16H3Np1Ub4R7Pgt4rgAq/zSppAv8XTZ4VdNGnQnAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUxKJd7QMexLVrYvbOQu3CJfnyAaUwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzNzM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
djANBgkqhkiG9w0BAQsFAAOCAQEASkVGjgTiyqXunt0FepV4m73s7mMrWRbqOFxv
4ByPt910iUw00ysHBwplzzCzwyTHBwp1K9tG/W8xzdwRVHodBiEef29noYMkJdBw
6AKr5ILhAhknZFw0r/DFZSBXYjLJa2FhxGt5Sj/IETVR8MiO0X4iByqpThZjljmD
J4znZR6RwID0o0gwV6E1NFczTvDlq+eG38cIyZKbd0U8FI8DAZS9HX+YO1lFKNAr
JqDNS3zSs00EVZQZ+qAVhoJUHAdhMqTNaqP6hNX3nBddSl57nfEUOkdC/bEf4qgM
DwP+XP5hnD1zhmsDF4o4X/bKaxPujqGGZftPmi3KAC1WN6e9mA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org