Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a3363633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: OrDExvh5IkqIXkTyt2hnz//uQP2D4iKinAVm1vyP2FY=
Subject key identifier: 5E:DB:0C:A7:BE:A4:5C:78:19:6F:F7:70:F1:AF:15:23:B4:89:23:8E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 120251C4C996539A2CF4678C52D2912E21067A3E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 11:00:46 +0000
ROA not before: Mon 26 Sep 2022 10:55:46 +0000
ROA not after: Mon 25 Sep 2023 11:00:46 +0000
asID: 59282
IP address blocks: 2400:d680:3cc::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:02:51:c4:c9:96:53:9a:2c:f4:67:8c:52:d2:91:2e:21:06:7a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 10:55:46 2022 GMT
Not After : Sep 25 11:00:46 2023 GMT
Subject: CN=5EDB0CA7BEA45C78196FF770F1AF1523B489238E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:bc:2b:d3:9f:50:91:ad:5b:a3:e6:db:a6:
ff:50:3e:f3:58:9d:53:ad:44:0d:81:93:f5:04:1b:
2d:7c:3d:d5:2b:64:2d:a2:1c:be:ce:81:9e:38:2d:
18:04:ae:bc:e6:27:6f:33:dd:cd:45:8a:2f:7a:92:
82:ec:15:ba:17:f6:be:8a:84:bc:e8:ed:a8:83:43:
3b:57:77:ae:95:4b:1d:b4:5d:2d:5c:40:89:79:a4:
e5:d5:a3:6c:85:6b:32:f2:1e:f9:c9:51:4e:50:64:
99:dd:9b:99:7f:58:b7:93:b4:86:65:8c:d4:1f:83:
65:fd:7f:2b:52:8d:d6:cd:bf:6d:3e:06:c7:be:72:
e9:39:c8:c1:3e:83:cc:20:7b:5b:ae:e6:5a:d4:22:
6e:78:c7:0d:d9:33:ce:8e:15:0b:72:ca:48:30:b7:
50:67:1b:46:2a:2d:ce:39:b6:eb:bb:79:d3:59:6f:
f0:a0:8f:84:02:ad:e6:d3:8d:10:11:54:be:67:6d:
02:30:58:08:84:f3:d5:3b:24:de:f9:59:94:02:07:
d2:4e:3a:15:74:86:2e:a9:c2:de:cc:84:59:da:52:
4c:ab:d0:dd:1a:6a:40:f1:3f:42:a2:12:98:dc:2b:
9d:51:e6:2e:9a:b4:57:91:2f:3d:f0:f4:be:23:7f:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DB:0C:A7:BE:A4:5C:78:19:6F:F7:70:F1:AF:15:23:B4:89:23:8E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3363633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:3cc::/48
Signature Algorithm: sha256WithRSAEncryption
6d:74:0c:2e:c9:ec:d7:37:c5:1f:d6:71:15:c4:c9:dc:f8:17:
f9:9b:c9:1d:ff:3d:a2:e5:d1:f9:46:f0:28:c3:60:69:e4:6b:
27:9b:2a:43:bd:cd:21:1c:5c:c9:8e:0b:98:d3:b3:dd:3d:39:
0a:3b:bf:00:31:a3:45:fd:48:37:eb:a7:f3:4d:fd:74:77:70:
17:ae:cf:8f:da:8b:9d:9f:5c:41:36:48:06:1e:7e:b8:b6:3d:
08:87:73:3c:47:ab:a8:93:54:c6:78:af:46:b5:ea:f5:2f:cc:
68:dd:66:84:d9:1c:4b:35:71:74:88:25:79:c8:10:6b:01:7a:
56:a2:77:45:c4:9d:15:69:34:48:e1:97:7a:6a:b0:e5:8c:07:
16:1e:a8:f9:a7:2a:2d:6d:7c:d9:4a:c1:0a:81:15:3f:6e:d2:
39:ef:9a:23:d8:64:dc:31:70:c8:7a:fb:e2:ea:53:c0:80:71:
bd:68:a1:3d:38:0e:67:2b:8f:2c:6a:1c:92:60:fa:a2:31:d3:
64:02:d3:fd:7e:de:82:42:a7:88:f8:44:a0:d9:1d:04:80:a6:
58:6a:65:21:36:10:e8:9b:3f:a1:7c:4b:19:66:9c:1f:83:4e:
7e:10:0d:b9:79:84:a6:8a:ec:2f:5a:38:84:05:a6:01:16:2f:
a3:fc:ff:53
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUEgJRxMmWU5os9GeMUtKRLiEGej4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMDU1NDZaFw0yMzA5MjUxMTAwNDZaMDMxMTAvBgNV
BAMTKDVFREIwQ0E3QkVBNDVDNzgxOTZGRjc3MEYxQUYxNTIzQjQ4OTIzOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnE7wr059Qka1bo+bbpv9QPvNY
nVOtRA2Bk/UEGy18PdUrZC2iHL7OgZ44LRgErrzmJ28z3c1Fii96koLsFboX9r6K
hLzo7aiDQztXd66VSx20XS1cQIl5pOXVo2yFazLyHvnJUU5QZJndm5l/WLeTtIZl
jNQfg2X9fytSjdbNv20+Bse+cuk5yME+g8wge1uu5lrUIm54xw3ZM86OFQtyykgw
t1BnG0YqLc45tuu7edNZb/Cgj4QCrebTjRARVL5nbQIwWAiE89U7JN75WZQCB9JO
OhV0hi6pwt7MhFnaUkyr0N0aakDxP0KiEpjcK51R5i6atFeRLz3w9L4jf6y/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUXtsMp76kXHgZb/dw8a8VI7SJI44wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzM2MzYzM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
zDANBgkqhkiG9w0BAQsFAAOCAQEAbXQMLsns1zfFH9ZxFcTJ3PgX+ZvJHf89ouXR
+UbwKMNgaeRrJ5sqQ73NIRxcyY4LmNOz3T05Cju/ADGjRf1IN+un8039dHdwF67P
j9qLnZ9cQTZIBh5+uLY9CIdzPEerqJNUxnivRrXq9S/MaN1mhNkcSzVxdIglecgQ
awF6VqJ3RcSdFWk0SOGXemqw5YwHFh6o+acqLW182UrBCoEVP27SOe+aI9hk3DFw
yHr74upTwIBxvWihPTgOZyuPLGockmD6ojHTZALT/X7egkKniPhEoNkdBICmWGpl
ITYQ6Js/oXxLGWacH4NOfhANuXmEporsL1o4hAWmARYvo/z/Uw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org