Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a33633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: KFz3S/VEvBWSUtdViYQNmAaB+/0NJwCHKNGFsGJM310=
Subject key identifier: 82:FE:12:0F:D7:35:00:CE:3E:08:23:70:8F:7B:CC:78:AD:1A:B6:4C
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4F352F46A67C106295883BC2400B38B2C32D8BA7
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:48 +0000
ROA not before: Mon 26 Sep 2022 07:56:48 +0000
ROA not after: Mon 25 Sep 2023 08:01:48 +0000
asID: 59282
IP address blocks: 2400:d680:3c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:35:2f:46:a6:7c:10:62:95:88:3b:c2:40:0b:38:b2:c3:2d:8b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:48 2022 GMT
Not After : Sep 25 08:01:48 2023 GMT
Subject: CN=82FE120FD73500CE3E0823708F7BCC78AD1AB64C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:f8:23:63:e8:84:4a:72:9c:fa:26:44:ae:
df:4e:85:d7:4e:55:a2:d1:29:36:8f:26:dd:8e:b6:
d8:2c:bb:c2:62:db:58:6d:27:79:a2:3f:66:94:99:
02:f7:70:fe:6e:b0:2e:0c:61:e8:9f:c4:c2:36:3b:
45:f3:3a:e6:7f:68:ac:d2:f4:76:0c:3d:94:aa:a1:
e3:86:1d:7c:c4:9b:71:1f:7c:5b:b2:35:62:72:49:
6a:e2:cb:70:e1:b2:86:4f:d0:fb:52:a2:3c:fd:df:
eb:03:7e:45:23:6b:3d:97:b1:56:b4:06:a8:0b:34:
f4:30:50:86:cc:65:cc:93:89:a5:60:2e:a2:c5:72:
16:f6:5e:df:f9:55:4c:95:44:08:28:fd:60:55:9d:
35:c6:e3:57:d5:cd:94:35:4a:89:3b:ab:9b:15:07:
43:6e:7f:5b:14:90:60:66:12:a0:f4:ed:fa:24:e1:
3d:55:19:35:5b:4e:d2:0b:41:02:5c:45:c3:6b:fd:
82:46:5b:97:c1:56:b9:74:70:37:3e:63:26:be:c3:
c3:d7:30:63:e1:14:3d:72:34:e8:32:e2:ca:2b:00:
3d:b0:f2:9a:1c:f6:0a:94:ba:95:f2:f0:de:83:9e:
d6:fe:f8:fd:38:1e:59:5e:c1:6d:72:7a:70:6a:a6:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FE:12:0F:D7:35:00:CE:3E:08:23:70:8F:7B:CC:78:AD:1A:B6:4C
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a33633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3c::/48
Signature Algorithm: sha256WithRSAEncryption
86:35:03:90:c7:42:e6:fc:0b:96:bd:bc:20:9f:9b:13:9a:11:
36:1f:6b:f5:cd:5e:9d:11:72:16:38:e6:e8:0e:9c:99:0b:1d:
77:6c:dd:75:0d:b7:07:36:d8:8b:7e:ad:7c:ec:d3:63:fe:4f:
44:dc:b8:f1:fd:4e:22:82:f4:b0:cc:5f:c3:26:30:8f:4d:37:
2c:34:4d:fc:45:b1:3b:dd:75:d1:3a:99:84:c9:5d:11:70:66:
69:ca:bf:33:59:53:79:ab:be:d7:a1:6a:08:09:23:f9:b6:17:
75:b4:15:b5:a3:f9:3b:49:97:db:22:a9:f5:95:22:d9:a7:23:
77:11:1c:38:01:54:d6:6a:bc:a6:9c:b9:7f:d5:a4:21:a6:7a:
b6:18:a0:d6:d7:66:d5:9b:5c:3c:e6:43:34:3a:48:e1:9f:44:
0e:46:3b:ca:47:ce:7d:4d:c5:1f:46:ea:6a:d0:76:02:cb:42:
01:c9:f9:d5:3e:cc:f1:5d:a4:8f:e7:45:fd:d4:af:98:30:8c:
7f:89:c9:c9:72:63:dd:ee:de:25:58:95:48:4e:3e:fd:e9:43:
80:e8:19:70:20:e7:d7:69:c1:26:e6:97:72:38:4c:a4:93:58:
8c:5f:bc:44:e7:6e:a8:00:13:44:26:02:52:7c:3c:0a:39:f0:
67:3d:d7:a6
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUTzUvRqZ8EGKViDvCQAs4ssMti6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2NDhaFw0yMzA5MjUwODAxNDhaMDMxMTAvBgNV
BAMTKDgyRkUxMjBGRDczNTAwQ0UzRTA4MjM3MDhGN0JDQzc4QUQxQUI2NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbvgjY+iESnKc+iZErt9OhddO
VaLRKTaPJt2Ottgsu8Ji21htJ3miP2aUmQL3cP5usC4MYeifxMI2O0XzOuZ/aKzS
9HYMPZSqoeOGHXzEm3EffFuyNWJySWriy3DhsoZP0PtSojz93+sDfkUjaz2XsVa0
BqgLNPQwUIbMZcyTiaVgLqLFchb2Xt/5VUyVRAgo/WBVnTXG41fVzZQ1Sok7q5sV
B0Nuf1sUkGBmEqD07fok4T1VGTVbTtILQQJcRcNr/YJGW5fBVrl0cDc+Yya+w8PX
MGPhFD1yNOgy4sorAD2w8poc9gqUupXy8N6Dntb++P04HllewW1yenBqpsCjAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUgv4SD9c1AM4+CCNwj3vMeK0atkwwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzM2MzNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAADww
DQYJKoZIhvcNAQELBQADggEBAIY1A5DHQub8C5a9vCCfmxOaETYfa/XNXp0RchY4
5ugOnJkLHXds3XUNtwc22It+rXzs02P+T0TcuPH9TiKC9LDMX8MmMI9NNyw0TfxF
sTvdddE6mYTJXRFwZmnKvzNZU3mrvtehaggJI/m2F3W0FbWj+TtJl9siqfWVItmn
I3cRHDgBVNZqvKacuX/VpCGmerYYoNbXZtWbXDzmQzQ6SOGfRA5GO8pHzn1NxR9G
6mrQdgLLQgHJ+dU+zPFdpI/nRf3Ur5gwjH+JyclyY93u3iVYlUhOPv3pQ4DoGXAg
59dpwSbml3I4TKSTWIxfvETnbqgAE0QmAlJ8PAo58Gc916Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org