Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338303a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3338303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: DTHBB+i8t8eaIkW/88cRpofnlpXTILnZdnrHiOM+rN8=
Subject key identifier: 26:7B:23:80:62:A1:95:F8:94:50:E0:8A:64:7B:16:A1:FE:65:B2:6C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 56D1F46B1876D1FD248B5D5BFAC6FA15395BCBBB
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338303a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:45 +0000
ROA not before: Mon 26 Sep 2022 10:55:45 +0000
ROA not after: Mon 25 Sep 2023 11:00:45 +0000
asID: 59282
IP address blocks: 2400:d680:380::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d1:f4:6b:18:76:d1:fd:24:8b:5d:5b:fa:c6:fa:15:39:5b:cb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:45 2022 GMT
Not After : Sep 25 11:00:45 2023 GMT
Subject: CN=267B238062A195F89450E08A647B16A1FE65B26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:78:92:a1:7d:74:52:58:1f:67:56:7d:70:
ce:d0:67:bf:07:38:61:e4:5d:8e:b2:71:76:67:46:
33:1d:9f:8c:8f:d1:f0:3f:e2:d4:64:d0:b6:b9:1b:
dd:0d:ba:ea:40:43:cb:da:64:77:be:18:fc:e8:68:
12:d8:38:0b:1c:83:f2:0a:3e:17:99:88:ce:69:25:
62:0a:9b:d8:7f:2a:36:fc:f4:37:ed:4a:a3:72:39:
44:c7:42:93:dd:83:0c:a8:fa:51:40:8e:56:76:01:
26:4f:d1:01:2d:b8:91:a2:a9:df:7b:6b:19:db:d6:
4c:d2:f7:d8:ee:49:bd:b8:9a:cc:c8:da:5b:07:8f:
03:d2:69:6c:3d:a3:62:15:ee:52:fa:ad:ff:0f:76:
b3:af:28:88:8e:f8:b9:a5:17:8e:8a:88:f4:4a:d6:
ee:7f:ea:4c:32:90:15:5b:4e:cf:4a:a5:5a:95:9e:
04:37:57:7f:70:c7:1c:42:00:e9:b0:57:c3:1c:4b:
b9:a1:eb:7b:d9:2b:ae:86:0d:24:5a:e8:d9:1c:1b:
4d:73:10:59:3e:0d:98:b7:bd:34:43:93:c2:88:bb:
df:52:d2:61:2d:63:86:a4:6c:26:f4:91:86:2a:9a:
2f:61:2e:83:64:97:d6:35:7c:e6:6a:6f:55:05:6f:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7B:23:80:62:A1:95:F8:94:50:E0:8A:64:7B:16:A1:FE:65:B2:6C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338303a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:380::/48
Signature Algorithm: sha256WithRSAEncryption
30:7d:5b:36:a6:65:1b:e3:0c:2d:99:db:c1:5d:7c:e8:53:cb:
a6:eb:13:b5:41:3e:23:d9:e5:66:46:f6:04:fa:9c:8a:cc:06:
25:64:70:3c:d0:d3:17:dd:2a:1b:38:f9:8c:d5:af:79:cd:f6:
9b:0a:ab:e3:53:dd:c1:04:14:90:d7:3d:57:3b:91:0c:98:ab:
da:e8:c2:6b:09:9b:af:18:fa:4b:74:0f:9d:81:f7:44:9b:40:
16:c1:a2:4d:39:31:7e:f6:23:83:ba:09:b1:26:f6:0a:5f:8f:
9d:b0:9a:08:31:52:70:ee:4a:45:85:ce:76:e3:49:8e:d1:2c:
97:c3:0b:79:53:34:46:e4:85:db:95:df:82:0e:a8:17:cd:a5:
9f:c1:7b:5d:1b:bc:31:91:1c:0a:60:21:97:c4:ec:55:dc:d9:
98:63:71:97:e7:4a:a3:da:b0:c7:0e:f7:09:96:f0:ba:f7:06:
55:ca:75:d1:68:7c:23:49:69:0e:16:61:30:c9:1c:40:c2:0c:
3e:70:b9:05:ae:33:17:4f:4d:26:25:44:60:76:d9:ef:bd:7e:
4a:05:01:fe:eb:33:55:a9:84:f4:f8:2f:77:33:db:a1:d2:de:
9d:82:f6:dc:03:aa:2a:dd:89:7d:28:30:b9:33:51:35:ef:53:
f0:b9:f8:8c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVtH0axh20f0ki11b+sb6FTlby7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1NDVaFw0yMzA5MjUxMTAwNDVaMDMxMTAvBgNV
BAMTKDI2N0IyMzgwNjJBMTk1Rjg5NDUwRTA4QTY0N0IxNkExRkU2NUIyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9G3iSoX10UlgfZ1Z9cM7QZ78H
OGHkXY6ycXZnRjMdn4yP0fA/4tRk0La5G90NuupAQ8vaZHe+GPzoaBLYOAscg/IK
PheZiM5pJWIKm9h/Kjb89DftSqNyOUTHQpPdgwyo+lFAjlZ2ASZP0QEtuJGiqd97
axnb1kzS99juSb24mszI2lsHjwPSaWw9o2IV7lL6rf8PdrOvKIiO+LmlF46KiPRK
1u5/6kwykBVbTs9KpVqVngQ3V39wxxxCAOmwV8McS7mh63vZK66GDSRa6NkcG01z
EFk+DZi3vTRDk8KIu99S0mEtY4akbCb0kYYqmi9hLoNkl9Y1fOZqb1UFb4LrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUJnsjgGKhlfiUUOCKZHsWof5lsmwwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzODMwM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
gDANBgkqhkiG9w0BAQsFAAOCAQEAMH1bNqZlG+MMLZnbwV186FPLpusTtUE+I9nl
Zkb2BPqciswGJWRwPNDTF90qGzj5jNWvec32mwqr41PdwQQUkNc9VzuRDJir2ujC
awmbrxj6S3QPnYH3RJtAFsGiTTkxfvYjg7oJsSb2Cl+PnbCaCDFScO5KRYXOduNJ
jtEsl8MLeVM0RuSF25Xfgg6oF82ln8F7XRu8MZEcCmAhl8TsVdzZmGNxl+dKo9qw
xw73CZbwuvcGVcp10Wh8I0lpDhZhMMkcQMIMPnC5Ba4zF09NJiVEYHbZ771+SgUB
/uszVamE9PgvdzPbodLenYL23AOqKt2JfSgwuTNRNe9T8Ln4jA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org