Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338663a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3338663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: XNrTPJ7vnvX9LbJTVwhAIjI0Mf/8cJ3rZVg/fzUBrbI=
Subject key identifier: 2B:9E:01:99:10:8F:D3:A0:47:F5:BB:99:25:BF:35:9E:CA:A2:8D:5B
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 72472F427FC68DF55A57C949CC186BCAC2F9D844
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338663a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:43 +0000
ROA not before: Mon 26 Sep 2022 10:55:43 +0000
ROA not after: Mon 25 Sep 2023 11:00:43 +0000
asID: 59282
IP address blocks: 2400:d680:38f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:47:2f:42:7f:c6:8d:f5:5a:57:c9:49:cc:18:6b:ca:c2:f9:d8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:43 2022 GMT
Not After : Sep 25 11:00:43 2023 GMT
Subject: CN=2B9E0199108FD3A047F5BB9925BF359ECAA28D5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:00:e0:dd:ed:74:9e:42:9c:99:b0:b4:4a:
16:31:c6:51:72:a8:0b:4a:7c:99:09:05:df:cf:b0:
47:12:0c:ce:ce:29:01:55:d1:cc:bd:ca:66:7f:d5:
9f:5a:f1:9a:84:5b:e7:71:a2:f8:bb:07:5e:f8:cf:
02:68:41:04:01:77:03:17:09:69:47:a5:65:67:bf:
5a:66:b8:76:52:66:79:68:66:83:1d:1c:b1:1e:a5:
f4:d3:a7:6e:53:62:c9:20:c5:5d:de:e0:ce:6f:e1:
c3:90:a5:f8:be:a3:3f:ee:ae:02:fd:97:1b:91:56:
26:a9:79:f6:10:a6:c7:28:62:3d:c4:26:05:ec:9c:
21:33:08:87:0f:78:69:d2:96:03:5e:3d:1c:0e:79:
f7:6d:ac:7a:5e:3c:7d:d7:32:b4:cf:0e:38:88:44:
2a:f6:3d:a3:9a:4e:7f:33:17:04:1a:9f:46:0b:d9:
0e:de:a9:a3:f1:1f:3e:7d:ec:20:05:6f:15:fd:e5:
b2:67:7f:93:64:04:31:e7:bb:56:4e:6a:f7:4c:eb:
15:9d:b9:06:c7:59:21:16:b1:7d:75:db:90:2e:53:
3a:5b:6c:69:04:bf:42:8a:42:c4:51:8e:fe:ff:f9:
b3:15:aa:19:ac:99:88:77:8a:38:82:27:eb:47:74:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9E:01:99:10:8F:D3:A0:47:F5:BB:99:25:BF:35:9E:CA:A2:8D:5B
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3338663a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:38f::/48
Signature Algorithm: sha256WithRSAEncryption
6b:0a:8c:2b:7c:af:80:84:29:e8:52:fc:b6:ff:bb:1b:18:c7:
75:a9:a3:5d:4d:d0:f1:0b:bd:04:39:b5:96:f0:30:e7:35:ad:
c6:e2:e4:95:16:f7:a5:ae:0e:1f:08:16:da:5b:cc:43:df:cb:
ad:6b:66:76:b4:77:ba:ec:0d:72:17:ad:49:ba:e1:69:e3:b1:
c6:3d:6a:28:23:e5:4d:41:49:3a:27:0a:95:21:e6:f6:44:2f:
ec:49:20:b8:7a:7e:6a:bb:c3:e7:ab:e0:bc:ce:a0:b3:c3:be:
74:18:3b:f7:e7:e3:4c:24:60:95:59:3d:49:b3:bd:62:05:0d:
b0:00:ff:d5:2f:e1:6d:e6:48:88:1d:38:b1:78:03:8e:09:2f:
4d:b3:01:c9:22:75:bf:7e:d6:41:a3:c2:4d:b5:58:a8:38:f7:
69:8b:1d:e4:fa:ab:9e:80:fc:76:22:84:39:21:f5:4f:d8:ce:
1c:7b:7a:af:76:90:2c:e8:55:83:63:1a:59:03:3a:89:60:eb:
5c:0c:2e:01:65:6c:1a:ec:24:32:ed:b2:ec:78:66:f6:a6:37:
87:dd:58:c0:90:71:3b:86:dc:47:a8:3f:e9:b2:49:d0:78:50:
e4:54:84:44:86:d6:c1:8a:b7:84:15:0b:ab:f0:ce:0b:8d:18:
66:82:8f:08
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUckcvQn/GjfVaV8lJzBhrysL52EQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1NDNaFw0yMzA5MjUxMTAwNDNaMDMxMTAvBgNV
BAMTKDJCOUUwMTk5MTA4RkQzQTA0N0Y1QkI5OTI1QkYzNTlFQ0FBMjhENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5QDg3e10nkKcmbC0ShYxxlFy
qAtKfJkJBd/PsEcSDM7OKQFV0cy9ymZ/1Z9a8ZqEW+dxovi7B174zwJoQQQBdwMX
CWlHpWVnv1pmuHZSZnloZoMdHLEepfTTp25TYskgxV3e4M5v4cOQpfi+oz/urgL9
lxuRViapefYQpscoYj3EJgXsnCEzCIcPeGnSlgNePRwOefdtrHpePH3XMrTPDjiI
RCr2PaOaTn8zFwQan0YL2Q7eqaPxHz597CAFbxX95bJnf5NkBDHnu1ZOavdM6xWd
uQbHWSEWsX1125AuUzpbbGkEv0KKQsRRjv7/+bMVqhmsmYh3ijiCJ+tHdABbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUK54BmRCP06BH9buZJb81nsqijVswHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzODY2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
jzANBgkqhkiG9w0BAQsFAAOCAQEAawqMK3yvgIQp6FL8tv+7GxjHdamjXU3Q8Qu9
BDm1lvAw5zWtxuLklRb3pa4OHwgW2lvMQ9/LrWtmdrR3uuwNchetSbrhaeOxxj1q
KCPlTUFJOicKlSHm9kQv7EkguHp+arvD56vgvM6gs8O+dBg79+fjTCRglVk9SbO9
YgUNsAD/1S/hbeZIiB04sXgDjgkvTbMBySJ1v37WQaPCTbVYqDj3aYsd5PqrnoD8
diKEOSH1T9jOHHt6r3aQLOhVg2MaWQM6iWDrXAwuAWVsGuwkMu2y7Hhm9qY3h91Y
wJBxO4bcR6g/6bJJ0HhQ5FSERIbWwYq3hBULq/DOC40YZoKPCA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org