Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a36633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: FgP1O1xI+Acj5R+Hv1cPkzroVdFgim11kKV7RS5rFHY=
Subject key identifier: C6:4A:2A:C4:0F:10:95:EE:95:CE:20:C4:0A:61:3D:5F:67:98:FC:98
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 46F0598B08E7B3E4192CB9DB2C1976436796589B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:02 +0000
ROA not before: Mon 26 Sep 2022 07:57:02 +0000
ROA not after: Mon 25 Sep 2023 08:02:02 +0000
asID: 59282
IP address blocks: 2400:d680:6c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:f0:59:8b:08:e7:b3:e4:19:2c:b9:db:2c:19:76:43:67:96:58:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:02 2022 GMT
Not After : Sep 25 08:02:02 2023 GMT
Subject: CN=C64A2AC40F1095EE95CE20C40A613D5F6798FC98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:f1:f8:49:e7:28:47:10:83:4b:4d:48:26:
2e:5b:90:d1:cf:a0:0f:0e:0b:2c:3b:c0:46:59:c4:
30:0b:d5:b5:53:5b:25:89:ac:16:90:fc:d0:86:3b:
30:9d:86:4d:43:50:11:9f:06:61:ae:90:5c:6b:21:
81:38:54:84:13:44:2e:8e:cb:d7:35:20:99:2c:27:
a5:c4:cb:e1:cf:ab:14:36:45:8a:d4:b9:ff:92:eb:
b0:c3:15:85:01:7e:0b:5b:8b:f0:47:99:42:ee:6c:
13:1a:97:b4:4b:b3:58:58:18:f5:9d:62:87:1a:56:
fd:3e:7d:a0:e8:93:85:0e:90:07:98:b1:f3:4e:d5:
34:b9:af:ce:16:30:5f:b6:7a:46:c9:79:0e:b6:df:
37:1a:f9:20:10:8a:ea:26:70:25:fd:30:ac:2a:2c:
65:15:ce:8c:6d:61:d1:94:8e:ec:b9:63:83:c2:06:
89:6a:d2:f5:0f:84:ec:81:18:cf:1e:66:47:ce:79:
ae:72:b1:d6:10:d6:cd:95:0d:60:da:8d:8c:00:f8:
87:be:bb:6e:30:16:09:6f:96:cf:d1:4d:7c:67:fa:
0a:31:92:ad:64:d8:34:7e:40:20:90:47:2e:f7:f0:
a5:e0:3c:40:17:52:62:b7:5d:6d:02:5b:ee:bc:51:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:2A:C4:0F:10:95:EE:95:CE:20:C4:0A:61:3D:5F:67:98:FC:98
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:6c::/48
Signature Algorithm: sha256WithRSAEncryption
9a:61:ca:6e:78:2b:ff:01:07:8b:c9:98:4d:ef:e5:0a:ba:13:
59:e9:09:9e:92:29:8a:b4:d8:02:60:1e:c0:53:bd:6f:b0:1e:
25:c3:32:46:08:76:03:d9:cf:8f:7d:ba:20:dd:b2:e4:67:09:
33:e6:22:8f:ac:15:f6:42:71:84:53:35:a6:0e:70:bd:90:bf:
22:18:10:69:bb:3c:02:ba:90:4f:9e:b7:be:5e:ba:c7:8c:7b:
60:75:36:e5:c9:e3:2e:13:48:c4:73:ea:c6:74:39:7d:5f:a6:
23:3f:83:af:0f:a2:a0:63:d8:63:6a:c5:06:f3:50:50:18:ee:
f3:e4:b6:2f:de:c6:45:54:3b:35:cf:1f:ef:d8:27:0e:72:a1:
bd:96:40:11:f6:60:74:1e:70:86:e2:6e:94:44:55:4a:fa:d6:
97:99:51:cb:d9:b2:93:f4:fc:1b:af:d3:99:1f:03:79:37:33:
d0:42:66:87:59:68:bb:21:dd:c5:d1:52:71:d2:b1:03:42:1e:
4d:7f:de:89:2e:cc:f4:df:2a:ca:27:bd:3b:13:0c:da:56:66:
b2:25:2d:44:44:6b:74:39:57:6b:8f:75:d6:23:92:91:b3:77:
e8:06:f8:2c:2f:c6:b6:b9:1e:a7:7c:db:87:fa:0d:7f:46:fc:
f3:bb:b7:7d
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURvBZiwjns+QZLLnbLBl2Q2eWWJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MDJaFw0yMzA5MjUwODAyMDJaMDMxMTAvBgNV
BAMTKEM2NEEyQUM0MEYxMDk1RUU5NUNFMjBDNDBBNjEzRDVGNjc5OEZDOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFq/H4SecoRxCDS01IJi5bkNHP
oA8OCyw7wEZZxDAL1bVTWyWJrBaQ/NCGOzCdhk1DUBGfBmGukFxrIYE4VIQTRC6O
y9c1IJksJ6XEy+HPqxQ2RYrUuf+S67DDFYUBfgtbi/BHmULubBMal7RLs1hYGPWd
YocaVv0+faDok4UOkAeYsfNO1TS5r84WMF+2ekbJeQ623zca+SAQiuomcCX9MKwq
LGUVzoxtYdGUjuy5Y4PCBolq0vUPhOyBGM8eZkfOea5ysdYQ1s2VDWDajYwA+Ie+
u24wFglvls/RTXxn+goxkq1k2DR+QCCQRy738KXgPEAXUmK3XW0CW+68UcPBAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUxkoqxA8Qle6VziDECmE9X2eY/JgwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzY2MzNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAGww
DQYJKoZIhvcNAQELBQADggEBAJphym54K/8BB4vJmE3v5Qq6E1npCZ6SKYq02AJg
HsBTvW+wHiXDMkYIdgPZz499uiDdsuRnCTPmIo+sFfZCcYRTNaYOcL2QvyIYEGm7
PAK6kE+et75euseMe2B1NuXJ4y4TSMRz6sZ0OX1fpiM/g68PoqBj2GNqxQbzUFAY
7vPkti/exkVUOzXPH+/YJw5yob2WQBH2YHQecIbibpREVUr61peZUcvZspP0/Buv
05kfA3k3M9BCZodZaLsh3cXRUnHSsQNCHk1/3okuzPTfKsonvTsTDNpWZrIlLURE
a3Q5V2uPddYjkpGzd+gG+Cwvxra5Hqd824f6DX9G/PO7t30=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org