Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34373a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a34373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: gGm91PE/RHBVHLqYVkyg9Zx47OlZCuJkviPLGbo3pAo=
Subject key identifier: 95:6B:9A:3D:3A:CD:17:BC:60:0E:0A:8F:F3:09:D2:1C:93:DA:47:51
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 3F5EE2D973BE4443D6D5EB1453BE35F103AD1249
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34373a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:35 +0000
ROA not before: Mon 26 Sep 2022 07:56:35 +0000
ROA not after: Mon 25 Sep 2023 08:01:35 +0000
asID: 59282
IP address blocks: 2400:d680:47::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:5e:e2:d9:73:be:44:43:d6:d5:eb:14:53:be:35:f1:03:ad:12:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:35 2022 GMT
Not After : Sep 25 08:01:35 2023 GMT
Subject: CN=956B9A3D3ACD17BC600E0A8FF309D21C93DA4751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:a8:29:32:8e:34:db:41:4c:6a:c3:f9:a9:
a5:8c:f7:f8:be:35:e6:36:fc:65:75:04:08:b8:f4:
e6:79:4a:d2:46:da:32:98:27:7c:4f:0c:0a:1f:c9:
59:4f:e8:84:17:b6:74:a5:87:31:0d:e0:1a:17:00:
98:1d:87:e0:b0:29:07:46:65:ac:0d:20:6d:aa:81:
36:19:1b:80:1d:8b:90:46:8e:ae:a4:3a:60:29:55:
cc:50:2f:a3:48:68:15:2c:7b:0a:e5:47:f2:2a:04:
91:a0:76:20:62:54:07:ec:1d:f2:81:69:87:2e:80:
73:f1:64:b0:92:df:d0:ef:b0:b3:cd:47:22:d1:47:
27:d2:82:a2:e3:f4:97:3c:52:eb:a6:b4:54:11:d7:
04:35:2c:bf:b2:23:6e:ee:53:0d:62:67:34:39:76:
5c:3e:cf:8b:2b:40:08:e2:d4:8d:c4:7a:a9:b6:28:
a4:7f:5d:05:7f:93:41:62:c1:99:df:78:33:49:71:
9d:dc:76:0f:f4:14:cc:3e:e5:83:fe:ac:64:08:48:
51:e8:47:ed:fd:48:31:a1:91:7d:07:88:8e:c2:ee:
1f:3a:c3:d7:f9:ab:29:08:68:88:34:3a:d9:65:5a:
79:21:0f:0a:33:b4:0a:a0:09:eb:21:62:b7:15:e6:
89:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6B:9A:3D:3A:CD:17:BC:60:0E:0A:8F:F3:09:D2:1C:93:DA:47:51
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34373a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:47::/48
Signature Algorithm: sha256WithRSAEncryption
7a:a8:44:d2:96:fd:84:df:10:88:30:71:72:4d:cb:58:de:17:
fe:1f:30:32:9d:f8:ef:6a:3d:ab:ec:cc:15:ef:e3:bf:ef:10:
5c:a1:53:3c:9d:a2:61:ef:64:eb:4f:67:97:78:dd:95:2e:bd:
65:e4:42:68:ac:b0:c0:95:df:7d:10:5b:bf:d8:70:53:36:97:
d8:3a:7f:eb:a3:ae:5e:ea:3d:37:b3:7f:2f:4f:ca:58:eb:db:
90:00:a5:45:4d:4f:14:4b:d5:63:32:bc:7c:90:a3:ee:1e:e0:
f4:ec:f2:8b:4f:09:a5:32:d8:38:01:5e:97:21:9d:30:07:c4:
57:fd:58:d7:ac:bd:9b:72:3d:bc:b7:60:31:9b:91:fb:b8:2a:
aa:8b:12:2a:5a:02:ad:6a:e3:6e:17:d9:2b:96:95:7a:87:af:
d7:7e:12:be:5d:e8:4f:30:5a:de:fe:01:43:0a:cb:e1:da:82:
26:df:b9:5f:d8:b4:a3:d1:a5:b8:2f:c4:7a:a7:9a:5a:6a:27:
e3:dd:40:36:c4:8e:75:fa:21:66:30:64:e1:36:f4:f6:4f:c8:
1e:99:31:09:07:66:23:0b:cc:11:4d:da:d7:48:4e:16:80:6d:
c9:0f:40:9c:93:56:fa:bb:c6:57:d3:12:ce:24:e3:cd:fa:b7:
ca:e5:31:1e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUP17i2XO+REPW1esUU7418QOtEkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2MzVaFw0yMzA5MjUwODAxMzVaMDMxMTAvBgNV
BAMTKDk1NkI5QTNEM0FDRDE3QkM2MDBFMEE4RkYzMDlEMjFDOTNEQTQ3NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYV6gpMo4020FMasP5qaWM9/i+
NeY2/GV1BAi49OZ5StJG2jKYJ3xPDAofyVlP6IQXtnSlhzEN4BoXAJgdh+CwKQdG
ZawNIG2qgTYZG4Adi5BGjq6kOmApVcxQL6NIaBUsewrlR/IqBJGgdiBiVAfsHfKB
aYcugHPxZLCS39DvsLPNRyLRRyfSgqLj9Jc8UuumtFQR1wQ1LL+yI27uUw1iZzQ5
dlw+z4srQAji1I3Eeqm2KKR/XQV/k0FiwZnfeDNJcZ3cdg/0FMw+5YP+rGQISFHo
R+39SDGhkX0HiI7C7h86w9f5qykIaIg0OtllWnkhDwoztAqgCeshYrcV5onJAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUlWuaPTrNF7xgDgqP8wnSHJPaR1EwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzQzNzNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAEcw
DQYJKoZIhvcNAQELBQADggEBAHqoRNKW/YTfEIgwcXJNy1jeF/4fMDKd+O9qPavs
zBXv47/vEFyhUzydomHvZOtPZ5d43ZUuvWXkQmissMCV330QW7/YcFM2l9g6f+uj
rl7qPTezfy9Pyljr25AApUVNTxRL1WMyvHyQo+4e4PTs8otPCaUy2DgBXpchnTAH
xFf9WNesvZtyPby3YDGbkfu4KqqLEipaAq1q424X2SuWlXqHr9d+Er5d6E8wWt7+
AUMKy+HagibfuV/YtKPRpbgvxHqnmlpqJ+PdQDbEjnX6IWYwZOE29PZPyB6ZMQkH
ZiMLzBFN2tdIThaAbckPQJyTVvq7xlfTEs4k4836t8rlMR4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org