Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a39613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: 0VU3A2CwCDRBOdctPR0BgMTcTjOuxHt7FHYfNBgeqD4=
Subject key identifier: 42:F9:AA:58:77:77:4E:A2:F7:BA:A4:75:9C:ED:F0:44:C2:CB:E2:59
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 61D3419B48E418E433228178193A46287D338EBE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:57 +0000
ROA not before: Mon 26 Sep 2022 07:56:57 +0000
ROA not after: Mon 25 Sep 2023 08:01:57 +0000
asID: 59282
IP address blocks: 2400:d680:9a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d3:41:9b:48:e4:18:e4:33:22:81:78:19:3a:46:28:7d:33:8e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:57 2022 GMT
Not After : Sep 25 08:01:57 2023 GMT
Subject: CN=42F9AA5877774EA2F7BAA4759CEDF044C2CBE259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:83:14:ad:fe:ac:b1:a9:20:19:93:97:4d:
74:0b:e3:73:31:90:d6:da:bd:96:09:5e:6a:4d:d5:
dd:9f:a9:59:d3:98:3f:c0:53:53:78:58:ff:3b:68:
7a:f5:93:f8:f1:8f:3c:d9:fe:38:17:20:e5:6d:40:
7d:3f:c8:1b:c8:db:d0:4d:a8:66:c5:da:46:7c:fe:
01:d3:b3:2a:18:4e:ba:51:8a:3e:27:38:f9:86:93:
8c:e5:38:4a:f8:2b:ec:8a:06:36:3b:ce:1d:86:78:
42:53:d7:0c:cb:ab:81:1b:fb:54:45:02:bd:ef:58:
8e:79:e3:a1:c0:ea:00:4b:bf:b2:63:ce:94:69:13:
73:93:0a:58:6c:7c:da:86:c9:30:c4:f4:73:f0:c3:
c2:4e:ca:11:50:89:65:9f:22:9b:3c:09:14:ef:77:
74:d7:de:b5:ee:4e:1c:fa:ea:c6:7f:30:ff:c0:d9:
95:63:7d:1e:44:79:5e:1b:35:3c:cc:60:eb:52:06:
de:69:27:f4:c3:d2:82:36:99:d8:7e:54:88:e2:25:
80:62:95:6d:e6:dd:0e:6d:af:a5:c6:93:45:bf:a1:
d1:5f:84:ae:01:47:a1:c0:79:00:52:8e:7a:f3:b0:
b0:2e:07:17:fd:56:82:8b:3f:27:b5:92:88:1c:8e:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F9:AA:58:77:77:4E:A2:F7:BA:A4:75:9C:ED:F0:44:C2:CB:E2:59
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:9a::/48
Signature Algorithm: sha256WithRSAEncryption
27:56:b1:81:d9:9c:25:ab:9e:e6:cd:63:dd:17:64:42:06:53:
8d:16:ac:90:72:36:99:75:df:14:a5:b7:48:0c:a1:e1:cc:73:
f7:7d:2c:c3:f0:56:45:0a:ca:43:32:27:41:d6:92:67:9a:ae:
f9:4e:b1:94:a7:0f:b5:41:43:69:7a:11:03:63:24:35:42:8c:
2c:84:d8:ef:01:e9:29:f1:3e:bb:e7:de:e7:52:46:c3:79:17:
7a:8a:95:1f:27:be:1d:59:f8:ca:69:3f:91:d9:e2:1b:69:3a:
02:a0:c7:9d:33:75:fa:db:ec:20:55:6b:78:7f:d3:4b:68:40:
94:52:60:74:a7:18:05:e4:94:1a:e5:14:e2:ad:c0:26:87:0b:
b7:66:2f:60:7c:7c:f3:1e:5d:8e:93:6a:de:67:0a:26:d7:48:
d0:60:9e:04:e8:2b:30:4a:32:d8:0d:b0:53:0d:15:ff:69:f9:
a7:49:b4:ca:c8:42:a5:45:17:28:bc:b7:a7:f9:f0:47:92:cf:
2b:6f:54:ee:4d:59:42:65:ba:a5:8a:1c:8c:72:b5:b2:80:83:
61:1a:22:d6:f4:54:50:44:f4:57:17:42:03:7a:da:52:65:44:
f1:ae:42:3d:3f:47:c7:0b:39:53:3b:ca:40:88:d0:7c:3a:8e:
02:5b:32:7f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUYdNBm0jkGOQzIoF4GTpGKH0zjr4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2NTdaFw0yMzA5MjUwODAxNTdaMDMxMTAvBgNV
BAMTKDQyRjlBQTU4Nzc3NzRFQTJGN0JBQTQ3NTlDRURGMDQ0QzJDQkUyNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8IMUrf6ssakgGZOXTXQL43Mx
kNbavZYJXmpN1d2fqVnTmD/AU1N4WP87aHr1k/jxjzzZ/jgXIOVtQH0/yBvI29BN
qGbF2kZ8/gHTsyoYTrpRij4nOPmGk4zlOEr4K+yKBjY7zh2GeEJT1wzLq4Eb+1RF
Ar3vWI5546HA6gBLv7JjzpRpE3OTClhsfNqGyTDE9HPww8JOyhFQiWWfIps8CRTv
d3TX3rXuThz66sZ/MP/A2ZVjfR5EeV4bNTzMYOtSBt5pJ/TD0oI2mdh+VIjiJYBi
lW3m3Q5tr6XGk0W/odFfhK4BR6HAeQBSjnrzsLAuBxf9VoKLPye1kogcjiN1AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUQvmqWHd3TqL3uqR1nO3wRMLL4lkwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzk2MTNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAJow
DQYJKoZIhvcNAQELBQADggEBACdWsYHZnCWrnubNY90XZEIGU40WrJByNpl13xSl
t0gMoeHMc/d9LMPwVkUKykMyJ0HWkmearvlOsZSnD7VBQ2l6EQNjJDVCjCyE2O8B
6SnxPrvn3udSRsN5F3qKlR8nvh1Z+MppP5HZ4htpOgKgx50zdfrb7CBVa3h/00to
QJRSYHSnGAXklBrlFOKtwCaHC7dmL2B8fPMeXY6Tat5nCibXSNBgngToKzBKMtgN
sFMNFf9p+adJtMrIQqVFFyi8t6f58EeSzytvVO5NWUJluqWKHIxytbKAg2EaItb0
VFBE9FcXQgN62lJlRPGuQj0/R8cLOVM7ykCI0Hw6jgJbMn8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org