Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338653a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3338653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: Ev2nNn9B9xKfdf/gLxnuG2vT73485i4vgkCo3xH2MZY=
Subject key identifier: 81:76:D9:7C:B2:32:D8:ED:F7:31:2D:E8:5E:DC:6A:0D:0D:A0:40:2A
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 590CEA938D19E607411B9E077702663C411C328B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338653a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:41 +0000
ROA not before: Mon 26 Sep 2022 10:55:41 +0000
ROA not after: Mon 25 Sep 2023 11:00:41 +0000
asID: 59282
IP address blocks: 2400:d680:38e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0c:ea:93:8d:19:e6:07:41:1b:9e:07:77:02:66:3c:41:1c:32:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:41 2022 GMT
Not After : Sep 25 11:00:41 2023 GMT
Subject: CN=8176D97CB232D8EDF7312DE85EDC6A0D0DA0402A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:71:11:2a:26:2e:3b:8d:5a:a2:bf:d9:45:
9b:22:6a:90:b0:6d:98:c8:e7:fe:11:6c:b9:97:00:
bb:17:c3:62:3a:1d:b3:4c:02:4d:88:5d:7c:d2:44:
39:87:b6:85:d2:ac:86:e8:ba:2e:0c:c5:e0:ec:c7:
22:cc:80:90:7e:a7:b5:4f:83:8b:6a:34:2c:0a:54:
c8:18:87:03:fc:53:b6:97:79:fd:3a:d4:6a:96:de:
f1:c7:2a:e0:d9:a9:ca:3b:62:54:ce:f6:5d:7a:d5:
b2:0d:01:b7:79:ee:0c:f9:7b:65:81:00:2f:a9:1a:
3c:0c:25:4a:8b:43:87:10:48:d4:00:15:55:d3:08:
7a:46:e6:36:fe:c1:01:a4:91:78:cc:b1:72:82:a9:
60:70:00:4b:4b:6c:b1:35:43:50:7c:58:f4:a2:c4:
e2:c4:bc:86:10:42:17:dc:96:59:e5:ad:d1:38:98:
ce:4d:4c:bd:6f:92:01:51:72:90:fe:96:d4:77:04:
18:0c:37:08:00:79:61:ff:c0:fd:6b:01:a3:6d:b2:
3f:75:74:62:83:22:e2:52:a5:85:b9:a2:44:b8:53:
8c:9f:02:b8:a7:ed:f5:03:e5:e8:48:a4:8d:17:c0:
19:fe:8a:35:d8:f8:e6:05:a4:11:fe:b2:21:e8:a1:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:76:D9:7C:B2:32:D8:ED:F7:31:2D:E8:5E:DC:6A:0D:0D:A0:40:2A
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338653a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:38e::/48
Signature Algorithm: sha256WithRSAEncryption
b2:20:db:2d:cc:b2:cf:62:f1:b8:82:98:25:65:d3:d1:81:39:
5c:c0:45:3f:8b:fc:cc:48:a8:8a:31:21:34:b9:00:70:a0:4f:
bc:b9:64:98:1e:1a:89:f4:22:5b:ed:0c:93:da:39:9d:8d:19:
30:e3:93:86:14:c3:58:3f:23:b6:85:16:c8:dc:89:88:57:4d:
3b:6b:5e:d9:c8:04:3f:79:7d:5c:fb:41:04:91:37:89:13:d3:
cf:ae:7d:a4:fa:d5:e0:1c:a3:8e:32:2b:7b:33:6d:b2:2f:d6:
64:06:00:88:aa:42:62:10:f4:16:a4:bd:82:5d:10:b9:21:94:
0d:ca:91:a8:e0:e2:69:aa:bc:6a:01:4f:3b:f3:e1:e4:de:a8:
4a:d9:c7:f9:a2:1b:aa:ec:86:2b:da:d3:89:6f:6f:a8:a0:cf:
35:13:cb:00:7e:f5:21:3c:a9:6c:6e:2a:5a:2d:5a:dc:f5:6e:
32:27:9a:af:bf:ba:f9:96:79:96:5e:30:b3:77:db:fb:44:56:
b9:f4:c5:83:b3:75:3f:54:76:64:98:16:d0:55:5c:53:93:fa:
b8:74:81:16:91:29:25:33:52:33:84:1a:a3:d4:6c:29:ce:5e:
e0:dc:03:0d:c0:d4:8a:d1:46:3b:8e:fd:9f:b6:67:da:27:de:
ab:da:73:eb
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUWQzqk40Z5gdBG54HdwJmPEEcMoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1NDFaFw0yMzA5MjUxMTAwNDFaMDMxMTAvBgNV
BAMTKDgxNzZEOTdDQjIzMkQ4RURGNzMxMkRFODVFREM2QTBEMERBMDQwMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7XERKiYuO41aor/ZRZsiapCw
bZjI5/4RbLmXALsXw2I6HbNMAk2IXXzSRDmHtoXSrIboui4MxeDsxyLMgJB+p7VP
g4tqNCwKVMgYhwP8U7aXef061GqW3vHHKuDZqco7YlTO9l161bINAbd57gz5e2WB
AC+pGjwMJUqLQ4cQSNQAFVXTCHpG5jb+wQGkkXjMsXKCqWBwAEtLbLE1Q1B8WPSi
xOLEvIYQQhfcllnlrdE4mM5NTL1vkgFRcpD+ltR3BBgMNwgAeWH/wP1rAaNtsj91
dGKDIuJSpYW5okS4U4yfArin7fUD5ehIpI0XwBn+ijXY+OYFpBH+siHooWw/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUgXbZfLIy2O33MS3oXtxqDQ2gQCowHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzODY1M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
jjANBgkqhkiG9w0BAQsFAAOCAQEAsiDbLcyyz2LxuIKYJWXT0YE5XMBFP4v8zEio
ijEhNLkAcKBPvLlkmB4aifQiW+0Mk9o5nY0ZMOOThhTDWD8jtoUWyNyJiFdNO2te
2cgEP3l9XPtBBJE3iRPTz659pPrV4ByjjjIrezNtsi/WZAYAiKpCYhD0FqS9gl0Q
uSGUDcqRqODiaaq8agFPO/Ph5N6oStnH+aIbquyGK9rTiW9vqKDPNRPLAH71ITyp
bG4qWi1a3PVuMiear7+6+ZZ5ll4ws3fb+0RWufTFg7N1P1R2ZJgW0FVcU5P6uHSB
FpEpJTNSM4Qao9RsKc5e4NwDDcDUitFGO479n7Zn2ifeq9pz6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org