Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3363363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: +YsgypxZqTCKMstWno2TIoiPyNAsAzUxxKXTAVfoSjY=
Subject key identifier: D5:4C:04:A4:23:B4:0C:BF:63:7A:28:82:B4:69:85:43:1A:68:7C:FF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 0BF61D22397804CEBB47696E79C3749759383410
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:42 +0000
ROA not before: Mon 26 Sep 2022 10:55:42 +0000
ROA not after: Mon 25 Sep 2023 11:00:42 +0000
asID: 59282
IP address blocks: 2400:d680:3c6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f6:1d:22:39:78:04:ce:bb:47:69:6e:79:c3:74:97:59:38:34:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:42 2022 GMT
Not After : Sep 25 11:00:42 2023 GMT
Subject: CN=D54C04A423B40CBF637A2882B46985431A687CFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:7c:07:c3:93:1b:43:d0:07:31:c0:72:a8:
2a:8b:54:8c:63:e4:c1:fb:37:fc:6b:69:bc:01:6f:
ab:62:b6:64:74:f4:f5:78:07:83:bf:f5:fe:ca:5a:
e4:08:73:b8:a4:7b:f9:5b:df:4f:00:00:dd:d3:d1:
0a:ed:1e:ff:1f:c6:16:68:41:71:67:0a:b2:c5:3d:
ff:7c:00:2e:71:d1:70:de:68:55:fa:a3:e1:ce:f2:
52:e4:eb:8f:ee:18:a2:3b:97:dc:b7:75:80:29:6f:
1b:e6:59:81:d1:23:c1:47:10:87:d3:83:94:8b:49:
99:0e:9e:f8:35:af:9a:c3:56:18:40:7e:46:6e:a3:
8c:7b:aa:cc:18:fd:a6:06:60:0e:df:8d:15:eb:fa:
85:49:73:c7:ec:0f:04:e2:ea:65:cd:10:9d:59:9c:
0d:6d:8a:58:08:1d:cd:38:9f:91:89:80:d3:25:ec:
4b:f5:64:31:5c:8c:71:1b:bf:f7:8e:5d:81:bb:c5:
53:2f:f0:b8:7f:fe:eb:2f:74:28:85:e2:9b:90:9e:
c4:f3:5c:5b:db:9c:10:d1:84:20:86:83:5b:ce:50:
3b:8d:4c:ca:1b:aa:0c:3e:43:19:97:75:4e:e3:6e:
3f:81:e2:9e:5f:a2:cc:4d:ad:75:4b:7a:c4:80:1e:
76:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4C:04:A4:23:B4:0C:BF:63:7A:28:82:B4:69:85:43:1A:68:7C:FF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3c6::/48
Signature Algorithm: sha256WithRSAEncryption
58:34:88:ce:55:5a:30:2b:b4:4a:77:54:0a:7d:31:1a:29:f8:
e5:a8:3f:cc:33:93:a9:f7:11:af:84:f8:02:f1:f0:47:f1:92:
68:6d:5a:26:fd:d0:05:2e:0a:f7:55:f1:c9:83:00:95:de:59:
a1:b7:49:71:4f:46:c5:39:21:9f:66:c8:d8:4c:0e:33:96:fa:
1c:11:7c:b8:76:1c:bf:cd:85:08:13:4d:15:60:b1:ac:c1:5a:
e7:a5:cf:79:77:3a:b6:79:be:30:e6:5f:65:9c:23:48:b3:33:
b7:61:89:41:44:4f:3a:1d:6d:94:0f:40:ae:87:42:90:16:6f:
7e:6f:50:94:d3:e1:d5:55:5f:e6:f9:e5:fc:ec:38:41:3a:04:
2a:2c:05:b9:f9:ce:28:2c:48:53:b6:36:38:8e:fb:21:8b:b5:
a3:87:5f:99:95:a7:97:f6:d0:9e:bd:43:09:3d:b5:5b:d6:eb:
f5:3d:71:60:6d:c6:32:40:23:df:d0:16:c7:36:87:92:6d:06:
57:22:ac:11:3d:31:ee:ce:69:f0:87:3d:f7:80:c4:3c:cc:75:
f1:f3:f4:1a:ea:58:1d:80:9b:76:27:52:35:2c:79:fe:ee:1e:
78:1c:30:c4:63:d2:d1:05:39:9f:a7:b2:f5:ed:ea:fe:fa:0f:
c2:fb:eb:e8
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUC/YdIjl4BM67R2luecN0l1k4NBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1NDJaFw0yMzA5MjUxMTAwNDJaMDMxMTAvBgNV
BAMTKEQ1NEMwNEE0MjNCNDBDQkY2MzdBMjg4MkI0Njk4NTQzMUE2ODdDRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9BnwHw5MbQ9AHMcByqCqLVIxj
5MH7N/xrabwBb6titmR09PV4B4O/9f7KWuQIc7ike/lb308AAN3T0QrtHv8fxhZo
QXFnCrLFPf98AC5x0XDeaFX6o+HO8lLk64/uGKI7l9y3dYApbxvmWYHRI8FHEIfT
g5SLSZkOnvg1r5rDVhhAfkZuo4x7qswY/aYGYA7fjRXr+oVJc8fsDwTi6mXNEJ1Z
nA1tilgIHc04n5GJgNMl7Ev1ZDFcjHEbv/eOXYG7xVMv8Lh//usvdCiF4puQnsTz
XFvbnBDRhCCGg1vOUDuNTMobqgw+QxmXdU7jbj+B4p5fosxNrXVLesSAHnbHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU1UwEpCO0DL9jeiiCtGmFQxpofP8wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzM2MzM2M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
xjANBgkqhkiG9w0BAQsFAAOCAQEAWDSIzlVaMCu0SndUCn0xGin45ag/zDOTqfcR
r4T4AvHwR/GSaG1aJv3QBS4K91XxyYMAld5ZobdJcU9GxTkhn2bI2EwOM5b6HBF8
uHYcv82FCBNNFWCxrMFa56XPeXc6tnm+MOZfZZwjSLMzt2GJQURPOh1tlA9ArodC
kBZvfm9QlNPh1VVf5vnl/Ow4QToEKiwFufnOKCxIU7Y2OI77IYu1o4dfmZWnl/bQ
nr1DCT21W9br9T1xYG3GMkAj39AWxzaHkm0GVyKsET0x7s5p8Ic994DEPMx18fP0
GupYHYCbdidSNSx5/u4eeBwwxGPS0QU5n6ey9e3q/voPwvvr6A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org