Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a35643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: F9mP37AdhQD7Vf+bZClmHwYmZS3v+8L0hJQeFafosJQ=
Subject key identifier: EE:CE:00:F4:9B:C0:6F:0F:54:2B:C8:0D:7D:EB:4C:C9:84:28:96:EF
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1FA3A31E8564940843D0FE0EA12B346B2AE604ED
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:33 +0000
ROA not before: Mon 26 Sep 2022 07:56:33 +0000
ROA not after: Mon 25 Sep 2023 08:01:33 +0000
asID: 59282
IP address blocks: 2400:d680:5d::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a3:a3:1e:85:64:94:08:43:d0:fe:0e:a1:2b:34:6b:2a:e6:04:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:33 2022 GMT
Not After : Sep 25 08:01:33 2023 GMT
Subject: CN=EECE00F49BC06F0F542BC80D7DEB4CC9842896EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:9b:96:06:b7:2d:c8:ee:ff:e5:b5:28:28:
6b:d3:27:31:ac:1a:2f:d7:cb:76:f4:47:1d:0f:9d:
ae:25:1c:d8:d1:48:a4:75:c1:31:29:b8:1b:d9:ae:
7c:30:71:60:4d:15:bd:e7:3a:53:0d:63:21:78:9c:
4a:b1:c9:6b:fc:3b:5a:df:93:25:e1:2e:e7:c8:6b:
d4:25:fe:ba:f6:39:d1:c2:1d:4f:26:74:fb:d6:3e:
ea:b9:ee:79:d4:8e:07:f1:14:4a:a5:43:a4:0b:5a:
8c:b4:43:0d:51:c3:5e:c0:15:44:27:56:bd:80:5c:
64:56:ee:c4:3d:e8:f8:20:73:51:96:ea:36:07:47:
5d:c0:f8:bd:a7:f1:83:a8:13:88:33:a1:95:36:22:
9d:1a:69:06:10:ca:52:1d:b6:29:1c:5a:0f:89:57:
8a:ff:61:10:0d:71:46:26:a8:7a:e0:96:6c:19:1f:
76:8c:81:de:4f:de:7c:92:31:99:a5:e3:c6:ba:4a:
c6:c5:b4:8a:c4:53:ff:a0:71:d0:af:e4:e1:00:c4:
ab:cc:99:64:27:c3:26:fd:c6:db:83:6a:de:df:13:
a8:04:ef:1d:cf:fb:c1:44:04:07:0b:89:41:14:84:
21:0f:04:26:80:94:48:72:1e:3a:dc:0c:1a:05:16:
81:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CE:00:F4:9B:C0:6F:0F:54:2B:C8:0D:7D:EB:4C:C9:84:28:96:EF
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:5d::/48
Signature Algorithm: sha256WithRSAEncryption
02:0e:e1:c7:4a:3c:09:7b:99:83:1a:53:69:be:ef:ed:f9:b7:
fb:f4:a4:44:f6:1f:41:e2:71:ae:84:57:f8:1d:b5:45:d5:58:
d0:8d:9b:bc:76:21:49:a8:3d:6b:23:2a:9b:ec:50:bb:47:17:
97:e2:b9:61:10:38:c7:c9:93:b4:1d:bb:e2:6f:fc:68:51:45:
38:33:b1:ed:00:c3:bd:ce:c6:68:44:a9:05:95:7e:6f:ca:cb:
9a:6f:fe:8e:f0:05:d0:2f:06:35:63:17:ba:00:5a:4e:1a:ba:
ed:a6:29:f5:6c:db:28:c9:45:c0:e3:83:c1:6d:dd:9d:a1:a5:
89:54:ee:a1:ea:e2:f8:4f:26:5b:7b:e9:af:59:cb:a9:ea:9e:
b8:40:aa:7b:18:53:21:0c:e2:cb:4d:24:26:a3:43:93:20:8f:
31:d3:20:8b:ba:4f:ef:ae:bd:2b:2c:7b:60:bb:1f:90:c2:75:
1d:e9:27:9d:24:db:7d:cb:9c:b2:7b:e2:4c:a2:e7:9a:95:a5:
d7:1b:f9:74:b9:19:13:7a:86:6d:f3:d9:b9:fb:cc:7c:86:fc:
ae:6a:a2:4e:61:3c:0f:ff:16:54:d4:f0:52:14:ee:8d:8d:4f:
f6:37:fc:e2:c6:24:91:df:77:2a:df:0f:56:cb:c2:b4:de:ed:
64:51:e0:05
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUH6OjHoVklAhD0P4OoSs0ayrmBO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2MzNaFw0yMzA5MjUwODAxMzNaMDMxMTAvBgNV
BAMTKEVFQ0UwMEY0OUJDMDZGMEY1NDJCQzgwRDdERUI0Q0M5ODQyODk2RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2D5uWBrctyO7/5bUoKGvTJzGs
Gi/Xy3b0Rx0Pna4lHNjRSKR1wTEpuBvZrnwwcWBNFb3nOlMNYyF4nEqxyWv8O1rf
kyXhLufIa9Ql/rr2OdHCHU8mdPvWPuq57nnUjgfxFEqlQ6QLWoy0Qw1Rw17AFUQn
Vr2AXGRW7sQ96Pggc1GW6jYHR13A+L2n8YOoE4gzoZU2Ip0aaQYQylIdtikcWg+J
V4r/YRANcUYmqHrglmwZH3aMgd5P3nySMZml48a6SsbFtIrEU/+gcdCv5OEAxKvM
mWQnwyb9xtuDat7fE6gE7x3P+8FEBAcLiUEUhCEPBCaAlEhyHjrcDBoFFoF/AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU7s4A9JvAbw9UK8gNfetMyYQolu8wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzU2NDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAF0w
DQYJKoZIhvcNAQELBQADggEBAAIO4cdKPAl7mYMaU2m+7+35t/v0pET2H0Hica6E
V/gdtUXVWNCNm7x2IUmoPWsjKpvsULtHF5fiuWEQOMfJk7Qdu+Jv/GhRRTgzse0A
w73OxmhEqQWVfm/Ky5pv/o7wBdAvBjVjF7oAWk4auu2mKfVs2yjJRcDjg8Ft3Z2h
pYlU7qHq4vhPJlt76a9Zy6nqnrhAqnsYUyEM4stNJCajQ5MgjzHTIIu6T++uvSss
e2C7H5DCdR3pJ50k233LnLJ74kyi55qVpdcb+XS5GRN6hm3z2bn7zHyG/K5qok5h
PA//FlTU8FIU7o2NT/Y3/OLGJJHfdyrfD1bLwrTe7WRR4AU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org