Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361313a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3361313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: mPXJyxxEj+xdcWiW9FI5gMt+a8HM6HFeb1IO3/dQcs4=
Subject key identifier: 6A:AE:BD:F4:1C:B4:98:3D:16:90:20:FE:48:A8:9D:AA:BB:A4:C6:D4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 781DEE3A7BA5AEF82E15C7BCEB3E6FB2C4907DEE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361313a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:25 +0000
ROA not before: Mon 26 Sep 2022 10:55:25 +0000
ROA not after: Mon 25 Sep 2023 11:00:25 +0000
asID: 59282
IP address blocks: 2400:d680:3a1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:1d:ee:3a:7b:a5:ae:f8:2e:15:c7:bc:eb:3e:6f:b2:c4:90:7d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:25 2022 GMT
Not After : Sep 25 11:00:25 2023 GMT
Subject: CN=6AAEBDF41CB4983D169020FE48A89DAABBA4C6D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:37:f7:88:04:0c:4b:52:3e:c9:8f:d7:2b:51:
0e:c0:b7:d7:61:d7:9d:f4:00:64:d4:4a:e0:0a:c5:
ad:96:8a:5c:21:a9:9a:49:eb:7e:a5:00:f1:1e:d1:
e4:d9:95:9b:17:82:d9:84:d9:4f:f2:6e:09:68:65:
fe:ee:8c:13:9f:ea:a3:91:17:0d:bf:0c:3f:57:ff:
f9:b8:c7:bb:a9:12:1d:2c:4b:d9:38:9a:64:de:5c:
08:14:d7:28:07:a7:6e:b7:22:d3:c6:1b:55:a6:7a:
66:a0:c8:ba:57:53:fa:93:f3:c5:cc:47:02:01:1f:
cd:2f:1b:42:37:4e:9e:27:aa:88:9c:b6:ab:d2:ab:
9a:dc:55:e6:b2:7c:d3:45:eb:0e:eb:e0:6f:c7:4c:
59:09:11:fa:4c:5f:03:95:5d:08:20:af:2c:ee:6b:
a6:5f:4e:94:3e:4e:25:fa:d3:ab:52:7d:d1:c5:ce:
d8:15:3b:06:4f:35:17:b9:26:78:53:5c:74:06:dd:
d5:fc:09:e5:f3:99:cc:06:b7:9c:e9:4a:09:42:39:
2c:53:32:7a:51:bf:d3:09:f8:28:9b:99:49:c1:ce:
e5:6b:f8:1c:35:6a:d1:70:01:bb:f8:fb:ac:0a:e4:
02:1c:75:cf:d8:51:16:fa:d8:66:38:5f:89:9b:a3:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:BD:F4:1C:B4:98:3D:16:90:20:FE:48:A8:9D:AA:BB:A4:C6:D4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361313a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3a1::/48
Signature Algorithm: sha256WithRSAEncryption
af:99:28:0b:69:f7:45:d5:ec:4f:c2:23:3a:04:a0:fe:9b:a7:
47:08:6a:1f:6d:92:4a:f5:99:18:90:25:2a:f1:cf:a6:c2:c2:
83:ac:b8:f8:ee:57:70:d4:8d:b5:b7:e0:cc:29:3d:d2:4f:c3:
04:76:ad:ed:48:9e:93:53:5a:8c:d1:df:71:15:00:73:85:4d:
c0:af:e6:db:41:0f:f1:ee:49:60:72:1e:fe:4c:eb:ca:40:70:
53:25:61:3f:e9:21:03:01:09:59:27:f0:2c:01:8c:a3:9c:74:
66:76:1c:61:85:94:31:39:38:3b:26:03:55:6d:16:17:39:2c:
ae:f2:c9:96:cd:21:95:64:a3:bd:2a:99:70:6a:45:72:b8:c2:
17:43:cd:28:59:98:e8:79:d3:4b:e0:9d:fc:08:13:d5:99:d1:
93:8f:2c:8f:f0:03:39:ec:01:90:d3:5f:9d:23:ad:c2:f8:5c:
1d:41:00:ac:e5:80:11:d5:2d:4e:6d:04:19:91:ea:dc:9b:d9:
a2:65:2a:40:3a:ac:26:0e:f3:88:1f:66:0c:95:08:fb:0d:75:
da:5b:31:c4:91:ca:00:2c:b0:4e:fd:04:b1:85:01:ee:01:4f:
d7:aa:dd:8b:6c:cf:8b:87:7d:5d:c3:b3:4c:2c:bc:d4:b6:96:
17:9d:19:c1
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUeB3uOnulrvguFce86z5vssSQfe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1MjVaFw0yMzA5MjUxMTAwMjVaMDMxMTAvBgNV
BAMTKDZBQUVCREY0MUNCNDk4M0QxNjkwMjBGRTQ4QTg5REFBQkJBNEM2RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkN/eIBAxLUj7Jj9crUQ7At9dh
1530AGTUSuAKxa2WilwhqZpJ636lAPEe0eTZlZsXgtmE2U/ybgloZf7ujBOf6qOR
Fw2/DD9X//m4x7upEh0sS9k4mmTeXAgU1ygHp263ItPGG1WmemagyLpXU/qT88XM
RwIBH80vG0I3Tp4nqoictqvSq5rcVeayfNNF6w7r4G/HTFkJEfpMXwOVXQggryzu
a6ZfTpQ+TiX606tSfdHFztgVOwZPNRe5JnhTXHQG3dX8CeXzmcwGt5zpSglCOSxT
MnpRv9MJ+CibmUnBzuVr+Bw1atFwAbv4+6wK5AIcdc/YURb62GY4X4mbo/YpAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUaq699By0mD0WkCD+SKidqrukxtQwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzM2MTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
oTANBgkqhkiG9w0BAQsFAAOCAQEAr5koC2n3RdXsT8IjOgSg/punRwhqH22SSvWZ
GJAlKvHPpsLCg6y4+O5XcNSNtbfgzCk90k/DBHat7Uiek1NajNHfcRUAc4VNwK/m
20EP8e5JYHIe/kzrykBwUyVhP+khAwEJWSfwLAGMo5x0ZnYcYYWUMTk4OyYDVW0W
FzksrvLJls0hlWSjvSqZcGpFcrjCF0PNKFmY6HnTS+Cd/AgT1ZnRk48sj/ADOewB
kNNfnSOtwvhcHUEArOWAEdUtTm0EGZHq3JvZomUqQDqsJg7ziB9mDJUI+w112lsx
xJHKACywTv0EsYUB7gFP16rdi2zPi4d9XcOzTCy81LaWF50ZwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org