Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3337373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: AsFanza63JOswA6wyQKwGY5BXItTop8AHu8qA/hBrYg=
Subject key identifier: B0:AD:8E:C2:5B:55:98:37:61:38:D9:16:8B:8D:FA:3C:58:C6:01:D8
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3E60E54946922EFAF4283C9E830AB258B32EA122
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:25 +0000
ROA not before: Mon 26 Sep 2022 10:55:25 +0000
ROA not after: Mon 25 Sep 2023 11:00:25 +0000
asID: 59282
IP address blocks: 2400:d680:377::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:60:e5:49:46:92:2e:fa:f4:28:3c:9e:83:0a:b2:58:b3:2e:a1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:25 2022 GMT
Not After : Sep 25 11:00:25 2023 GMT
Subject: CN=B0AD8EC25B5598376138D9168B8DFA3C58C601D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:a1:e6:db:7a:06:a0:87:3b:cd:bf:cb:c4:
83:dc:b3:fe:3d:61:1c:a7:ed:4b:76:11:54:ca:56:
5b:ae:3a:b1:bf:8a:ed:37:78:4f:6d:5a:15:4b:12:
5b:12:55:e6:1e:c4:ba:5c:23:2f:70:38:34:ab:72:
8c:ba:b9:12:df:3a:0f:a6:69:78:53:a3:7a:65:07:
de:62:e8:b7:a0:f1:35:6f:0e:dc:f4:f5:89:fe:99:
11:a0:11:23:59:2a:0e:73:2f:22:e8:5e:56:9a:70:
b1:13:6b:98:09:3b:dd:89:5d:ed:87:dc:1e:97:30:
9c:11:d2:b1:3c:67:99:cd:ba:a2:3f:83:d4:a4:dc:
80:c3:bf:2a:1a:f7:62:8e:ff:2d:1f:f7:d4:0b:53:
64:04:35:0c:6a:57:d6:65:75:b4:60:72:ed:65:93:
89:00:cd:7d:49:7b:55:ae:1e:41:c0:9d:39:27:97:
9b:78:5a:44:3a:41:57:d3:b7:62:dd:41:e6:fa:9f:
55:b9:88:7e:aa:16:b5:2c:76:e8:92:5d:97:93:95:
b8:c4:bb:06:e2:88:85:7a:08:8e:92:86:16:80:eb:
f3:e4:ad:e9:86:89:62:85:5b:46:02:82:c8:85:e9:
d7:b6:c1:0d:c9:bd:f2:06:a4:bb:73:7c:ea:ef:89:
be:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AD:8E:C2:5B:55:98:37:61:38:D9:16:8B:8D:FA:3C:58:C6:01:D8
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3337373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:377::/48
Signature Algorithm: sha256WithRSAEncryption
7a:4f:37:b6:6c:4f:d2:e7:66:0a:a4:cc:4e:6f:10:f5:8a:b9:
94:27:ff:2b:e0:64:f8:ac:df:65:d9:74:0b:df:00:1f:d1:84:
83:d2:c2:d7:31:57:4f:68:fb:37:69:6f:a3:0b:d8:88:a6:ee:
05:e2:58:06:95:1a:f7:da:a6:00:2b:8f:17:b3:96:62:9b:b4:
27:dc:1b:0e:6f:40:56:4b:11:e1:dc:b2:18:1e:e0:6b:b2:85:
14:b2:83:e9:86:48:2f:3d:66:9a:b7:98:59:e0:1b:48:bb:e2:
09:5c:de:d7:e5:e1:bb:b7:d8:f7:15:39:d6:40:f4:74:fd:b7:
38:34:43:8f:2b:37:ca:c1:9a:e1:ad:65:b0:88:f8:e0:52:ef:
66:c7:90:10:c2:4f:79:b8:99:32:58:ea:e1:52:b2:f0:b5:dd:
07:dd:60:ed:98:83:d6:93:bf:6a:95:25:9d:e4:5a:f7:ee:e1:
ca:0c:89:61:f7:96:2b:ff:7f:7f:97:47:ad:37:38:02:b9:bb:
4f:49:f1:e8:47:7e:c7:9f:41:37:53:16:21:ae:a1:57:1e:b2:
f5:ab:30:26:63:95:38:a3:57:ac:da:6e:a4:5c:2c:80:ad:83:
8c:90:ba:f2:6f:59:a7:65:7d:68:e1:43:6a:29:14:b7:80:8d:
66:85:6c:ce
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUPmDlSUaSLvr0KDyegwqyWLMuoSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1MjVaFw0yMzA5MjUxMTAwMjVaMDMxMTAvBgNV
BAMTKEIwQUQ4RUMyNUI1NTk4Mzc2MTM4RDkxNjhCOERGQTNDNThDNjAxRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCquaHm23oGoIc7zb/LxIPcs/49
YRyn7Ut2EVTKVluuOrG/iu03eE9tWhVLElsSVeYexLpcIy9wODSrcoy6uRLfOg+m
aXhTo3plB95i6Leg8TVvDtz09Yn+mRGgESNZKg5zLyLoXlaacLETa5gJO92JXe2H
3B6XMJwR0rE8Z5nNuqI/g9Sk3IDDvyoa92KO/y0f99QLU2QENQxqV9ZldbRgcu1l
k4kAzX1Je1WuHkHAnTknl5t4WkQ6QVfTt2LdQeb6n1W5iH6qFrUsduiSXZeTlbjE
uwbiiIV6CI6ShhaA6/PkremGiWKFW0YCgsiF6de2wQ3JvfIGpLtzfOrvib4ZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUsK2OwltVmDdhONkWi436PFjGAdgwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzNzM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
dzANBgkqhkiG9w0BAQsFAAOCAQEAek83tmxP0udmCqTMTm8Q9Yq5lCf/K+Bk+Kzf
Zdl0C98AH9GEg9LC1zFXT2j7N2lvowvYiKbuBeJYBpUa99qmACuPF7OWYpu0J9wb
Dm9AVksR4dyyGB7ga7KFFLKD6YZILz1mmreYWeAbSLviCVze1+Xhu7fY9xU51kD0
dP23ODRDjys3ysGa4a1lsIj44FLvZseQEMJPebiZMljq4VKy8LXdB91g7ZiD1pO/
apUlneRa9+7hygyJYfeWK/9/f5dHrTc4Arm7T0nx6Ed+x59BN1MWIa6hVx6y9asw
JmOVOKNXrNpupFwsgK2DjJC68m9Zp2V9aOFDaikUt4CNZoVszg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org