Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a34383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0X8gNVWz3yzesudLOV2FdHJmuD+PxTwPgcf51S75KYU=
Subject key identifier: 47:33:B4:DA:6D:32:1A:CF:D7:63:B3:B4:E0:06:E3:B0:F8:AA:D6:AF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6FF71A80563EB1C61F83B8954FB0B68058496FBF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34383a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:05 +0000
ROA not before: Mon 26 Sep 2022 07:57:05 +0000
ROA not after: Mon 25 Sep 2023 08:02:05 +0000
asID: 59282
IP address blocks: 2400:d680:48::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f7:1a:80:56:3e:b1:c6:1f:83:b8:95:4f:b0:b6:80:58:49:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:05 2022 GMT
Not After : Sep 25 08:02:05 2023 GMT
Subject: CN=4733B4DA6D321ACFD763B3B4E006E3B0F8AAD6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:79:f4:6c:fd:1b:79:8d:29:1f:2c:64:bd:
06:d1:c1:2f:50:7a:9c:5d:ec:b6:a4:fb:c9:70:af:
7e:ab:fc:2a:9e:18:43:02:dc:26:29:19:c3:36:65:
fb:24:d4:ce:36:3b:f4:6b:56:29:59:9c:db:7d:a5:
40:75:0f:81:93:fc:25:01:1e:8e:bc:be:e7:22:8c:
77:0d:21:22:a5:93:67:0d:df:4d:b2:aa:87:ef:58:
1c:4d:c8:4d:3c:24:f4:c6:cf:64:d3:2c:9a:cf:5f:
ec:6e:c1:1e:cb:10:c3:93:fb:e8:83:d8:ed:23:9e:
7f:db:12:9f:bd:f5:48:76:5a:00:4c:e6:92:67:7a:
6e:a2:28:38:c1:b2:29:5f:ca:1e:13:c5:b1:3c:33:
ba:b2:72:06:28:85:0a:17:c2:84:b3:01:55:d4:bd:
a0:08:cb:08:bb:d8:57:b4:19:d9:c1:e8:ee:48:5c:
b5:07:b3:7f:b0:df:9b:24:53:96:59:bd:a5:9c:c6:
3e:ce:e9:7c:5d:31:55:de:8f:34:6f:b3:b0:3d:ee:
bf:bb:cd:66:8e:be:20:ae:35:f8:1d:0b:95:96:d5:
22:be:b5:94:35:0c:fd:9a:61:06:14:56:b9:74:4f:
f4:8a:ac:92:e3:56:4f:4b:d1:57:ad:00:38:fc:0d:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:33:B4:DA:6D:32:1A:CF:D7:63:B3:B4:E0:06:E3:B0:F8:AA:D6:AF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a34383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:48::/48
Signature Algorithm: sha256WithRSAEncryption
c0:1f:e3:9b:e7:38:ec:30:62:66:2d:81:a6:c8:a6:12:48:ed:
ad:60:4c:3c:0d:65:ae:27:ec:f9:4e:ab:6a:2a:af:4e:27:3a:
48:64:af:d3:27:4e:c7:f0:bb:43:90:98:25:8c:c5:c9:6e:c9:
d3:c8:6d:f8:2e:a1:8f:6b:da:b7:eb:4d:7a:00:4a:b0:44:a6:
cb:c9:fc:29:6f:fb:7b:c3:d9:15:c0:bd:d1:20:ba:44:5e:d6:
af:08:2f:b7:80:76:e0:92:a3:af:cc:3e:ac:6f:cd:ee:56:a8:
fe:8a:cf:10:14:a5:de:43:9e:78:47:c6:9a:73:72:95:54:12:
91:d6:e1:33:ee:09:9c:b4:30:a8:23:e6:fe:c1:96:16:a3:ac:
f1:76:09:3d:82:6f:c7:61:7f:4f:61:a3:2d:18:bc:24:c8:f7:
f6:17:c9:e4:2f:20:ab:ff:58:8d:21:05:e2:44:7b:1a:11:73:
d0:3f:84:a9:7f:68:3c:29:eb:d4:3a:c8:2a:e6:29:3e:c0:16:
c2:e3:6a:67:fa:30:41:e1:17:2b:fe:31:b4:61:c0:87:7e:a7:
bd:b9:c9:e3:91:79:ee:71:ef:c8:fa:d4:fe:08:d1:87:cf:1e:
39:13:9e:ec:6c:d7:f7:b9:df:bd:c2:96:5a:2d:29:1b:29:6f:
04:06:56:f5
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUb/cagFY+scYfg7iVT7C2gFhJb78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MDVaFw0yMzA5MjUwODAyMDVaMDMxMTAvBgNV
BAMTKDQ3MzNCNERBNkQzMjFBQ0ZENzYzQjNCNEUwMDZFM0IwRjhBQUQ2QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54Hn0bP0beY0pHyxkvQbRwS9Q
epxd7Lak+8lwr36r/CqeGEMC3CYpGcM2Zfsk1M42O/RrVilZnNt9pUB1D4GT/CUB
Ho68vucijHcNISKlk2cN302yqofvWBxNyE08JPTGz2TTLJrPX+xuwR7LEMOT++iD
2O0jnn/bEp+99Uh2WgBM5pJnem6iKDjBsilfyh4TxbE8M7qycgYohQoXwoSzAVXU
vaAIywi72Fe0GdnB6O5IXLUHs3+w35skU5ZZvaWcxj7O6XxdMVXejzRvs7A97r+7
zWaOviCuNfgdC5WW1SK+tZQ1DP2aYQYUVrl0T/SKrJLjVk9L0VetADj8DVctAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQURzO02m0yGs/XY7O04AbjsPiq1q8wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzQzODNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAEgw
DQYJKoZIhvcNAQELBQADggEBAMAf45vnOOwwYmYtgabIphJI7a1gTDwNZa4n7PlO
q2oqr04nOkhkr9MnTsfwu0OQmCWMxcluydPIbfguoY9r2rfrTXoASrBEpsvJ/Clv
+3vD2RXAvdEgukRe1q8IL7eAduCSo6/MPqxvze5WqP6KzxAUpd5DnnhHxppzcpVU
EpHW4TPuCZy0MKgj5v7BlhajrPF2CT2Cb8dhf09hoy0YvCTI9/YXyeQvIKv/WI0h
BeJEexoRc9A/hKl/aDwp69Q6yCrmKT7AFsLjamf6MEHhFyv+MbRhwId+p725yeOR
ee5x78j61P4I0YfPHjkTnuxs1/e5373CllotKRspbwQGVvU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org