Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361623a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3361623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 6V+DzOAxBpRvY3vDoc6uf+MmTTk/k6zbQeNv5jxRrxc=
Subject key identifier: 1B:9A:36:89:F4:95:9B:36:3A:19:3D:30:D0:96:EB:47:5D:75:B9:07
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5B5EFD3E470CF4FE5780A5DA3F372D1F0EAE889D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361623a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:44 +0000
ROA not before: Mon 26 Sep 2022 10:55:44 +0000
ROA not after: Mon 25 Sep 2023 11:00:44 +0000
asID: 59282
IP address blocks: 2400:d680:3ab::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5e:fd:3e:47:0c:f4:fe:57:80:a5:da:3f:37:2d:1f:0e:ae:88:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:44 2022 GMT
Not After : Sep 25 11:00:44 2023 GMT
Subject: CN=1B9A3689F4959B363A193D30D096EB475D75B907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:1c:f5:53:35:66:4a:80:4e:bb:78:07:71:
e5:33:d7:6d:e9:cd:f2:e8:42:fb:52:7b:7b:7b:47:
e0:f9:76:32:8c:50:34:12:7e:5e:1a:9b:90:8c:bd:
b1:d6:24:4a:e0:24:89:68:b3:71:21:30:7d:06:12:
69:90:aa:8e:18:33:cd:ae:7f:34:c7:c4:88:4c:4d:
8e:32:d5:75:68:ba:64:c1:5d:42:b7:23:e2:04:b4:
5d:f0:a5:33:5c:85:a4:6c:1f:62:62:01:de:17:31:
47:89:7b:82:89:f8:e2:ea:9e:ee:0a:9b:72:eb:b5:
8b:a8:53:91:68:62:18:0d:fd:b3:ac:e7:b9:2d:16:
2f:a9:02:eb:f5:87:24:6a:ff:20:e8:8a:b8:e3:7d:
39:2f:87:6d:6d:89:ce:5c:5b:16:f1:29:3a:54:3d:
1b:19:f4:b9:15:0d:c1:9e:68:6a:7b:03:77:58:be:
c4:43:3d:d5:a9:4c:ae:de:e1:8b:b0:3c:63:83:82:
00:a2:1b:11:e4:3c:fd:7a:b6:b2:44:49:7a:1e:22:
9b:25:d8:9f:63:71:c0:3d:be:2d:cf:47:03:3a:0c:
5b:40:41:a3:7c:0f:3b:75:af:6f:23:1b:6a:80:fa:
ee:7c:43:59:b5:55:ac:16:f1:08:ec:6c:ca:79:a7:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9A:36:89:F4:95:9B:36:3A:19:3D:30:D0:96:EB:47:5D:75:B9:07
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3361623a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3ab::/48
Signature Algorithm: sha256WithRSAEncryption
56:44:ed:d0:7d:61:15:0a:e1:1b:22:dc:02:14:ef:66:84:1b:
4d:d0:c5:4b:dd:fb:5c:9f:fc:3e:7b:c5:cd:96:92:d4:4d:80:
b0:66:8f:e2:f9:bf:07:55:ee:cd:b5:83:f1:b1:03:75:af:fc:
8d:8b:8d:cd:95:25:11:82:34:8d:0f:57:50:80:6b:4b:df:ac:
d7:d6:14:b1:28:c3:33:00:0c:a7:d2:7f:d7:a5:3d:dd:64:89:
f8:bc:09:f5:c5:ea:ad:03:92:6a:fa:c6:1e:ae:22:fc:d0:04:
53:67:a7:e9:b4:e7:4a:f7:f8:47:5a:5b:70:18:44:93:e1:0b:
4c:54:a8:d9:d5:29:a9:c3:cc:07:81:6d:17:fb:7d:49:fb:21:
f9:84:d2:8a:e6:dc:db:51:d1:6a:be:56:44:63:59:eb:5f:74:
fe:9b:03:29:f2:70:b2:e5:c6:dc:31:83:e0:5b:ff:5b:00:33:
90:b1:d3:53:b2:b5:93:7d:60:17:c7:a2:f7:40:99:9c:3c:67:
83:99:db:3d:bf:74:c9:61:75:21:fc:8c:86:d5:b9:ce:11:b8:
82:81:af:5e:71:1b:3a:02:11:5d:4b:cf:6d:d6:3d:17:52:cd:
88:29:5d:09:56:32:ab:96:11:bb:f7:ce:0f:af:36:40:72:41:
df:25:b8:dc
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUW179PkcM9P5XgKXaPzctHw6uiJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1NDRaFw0yMzA5MjUxMTAwNDRaMDMxMTAvBgNV
BAMTKDFCOUEzNjg5RjQ5NTlCMzYzQTE5M0QzMEQwOTZFQjQ3NUQ3NUI5MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDSRz1UzVmSoBOu3gHceUz123p
zfLoQvtSe3t7R+D5djKMUDQSfl4am5CMvbHWJErgJIlos3EhMH0GEmmQqo4YM82u
fzTHxIhMTY4y1XVoumTBXUK3I+IEtF3wpTNchaRsH2JiAd4XMUeJe4KJ+OLqnu4K
m3LrtYuoU5FoYhgN/bOs57ktFi+pAuv1hyRq/yDoirjjfTkvh21tic5cWxbxKTpU
PRsZ9LkVDcGeaGp7A3dYvsRDPdWpTK7e4YuwPGODggCiGxHkPP16trJESXoeIpsl
2J9jccA9vi3PRwM6DFtAQaN8Dzt1r28jG2qA+u58Q1m1VawW8QjsbMp5p5phAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUG5o2ifSVmzY6GT0w0JbrR111uQcwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzM2MTYyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
qzANBgkqhkiG9w0BAQsFAAOCAQEAVkTt0H1hFQrhGyLcAhTvZoQbTdDFS937XJ/8
PnvFzZaS1E2AsGaP4vm/B1XuzbWD8bEDda/8jYuNzZUlEYI0jQ9XUIBrS9+s19YU
sSjDMwAMp9J/16U93WSJ+LwJ9cXqrQOSavrGHq4i/NAEU2en6bTnSvf4R1pbcBhE
k+ELTFSo2dUpqcPMB4FtF/t9Sfsh+YTSiubc21HRar5WRGNZ6190/psDKfJwsuXG
3DGD4Fv/WwAzkLHTU7K1k31gF8ei90CZnDxng5nbPb90yWF1IfyMhtW5zhG4goGv
XnEbOgIRXUvPbdY9F1LNiCldCVYyq5YRu/fOD682QHJB3yW43A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org