Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a62363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: d21OrHQGM0Vr/Iu2wJH88DKWwm+w9FxVCNTwYbd98BE=
Subject key identifier: 26:E4:7F:37:FA:55:03:04:E6:59:CD:A5:AB:CB:7A:6F:1D:1D:30:1E
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6BFB1B87CAC2CBA45E11A00762492FDD121F7377
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:22 +0000
ROA not before: Mon 26 Sep 2022 07:57:22 +0000
ROA not after: Mon 25 Sep 2023 08:02:22 +0000
asID: 59282
IP address blocks: 2400:d680:b6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:fb:1b:87:ca:c2:cb:a4:5e:11:a0:07:62:49:2f:dd:12:1f:73:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:22 2022 GMT
Not After : Sep 25 08:02:22 2023 GMT
Subject: CN=26E47F37FA550304E659CDA5ABCB7A6F1D1D301E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:68:89:e4:f9:37:1e:88:a7:b1:c9:c7:06:
36:4f:03:50:8f:59:92:c8:48:09:fd:1c:97:7b:ef:
9c:45:4e:00:bd:65:5c:42:09:bc:ea:33:a9:bb:ad:
73:56:40:8c:fe:0f:59:f6:c7:82:40:c6:8a:28:88:
ca:f8:f8:55:3e:3c:c8:70:9b:90:ea:2c:b7:e7:14:
3a:17:95:0a:f1:65:87:8a:93:fd:fa:32:0c:76:49:
af:7b:af:15:09:10:19:c7:b7:e9:67:d5:8c:49:94:
3d:e8:d1:c4:87:16:a1:79:65:4c:b6:32:8f:a5:49:
ff:17:da:06:15:20:73:61:ec:e7:ba:ae:34:e8:37:
e7:6b:0d:b1:83:a8:f4:f7:5d:b2:f8:89:e5:a9:e1:
19:60:8c:da:61:71:d0:5e:92:25:1d:7f:c5:60:25:
ed:0a:47:22:22:df:28:d6:2f:65:8e:61:b5:1d:2b:
cb:d6:15:66:40:b4:37:4a:37:82:68:29:25:29:6e:
a2:5e:2d:ec:d0:95:b1:e1:b4:b2:e3:64:2e:58:a1:
40:8d:30:37:d5:f2:a4:cd:3c:7a:8b:77:8e:f8:7c:
33:85:2c:a0:55:bc:da:9d:2a:1b:21:ae:e0:db:a5:
22:6d:0a:b2:7a:5a:84:ae:4e:28:db:10:7b:e0:f7:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E4:7F:37:FA:55:03:04:E6:59:CD:A5:AB:CB:7A:6F:1D:1D:30:1E
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a62363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:b6::/48
Signature Algorithm: sha256WithRSAEncryption
71:5e:c9:12:ce:11:1e:39:36:de:15:10:7a:c0:16:47:52:1d:
da:a7:0b:a1:7a:1e:a8:88:f3:99:b3:87:2e:bb:d5:81:9f:9b:
11:9e:37:91:62:9e:2c:cb:b5:93:1a:34:3a:5e:36:34:9a:52:
16:55:52:a7:56:f5:be:14:70:9f:7a:5b:d3:98:5e:cd:36:26:
99:1f:6b:ca:fa:4b:5c:46:e2:3a:07:da:ea:7d:00:be:1b:ac:
17:ac:db:c3:ae:49:87:49:b7:4e:70:2c:67:11:ac:d9:3a:21:
b3:9a:fa:26:be:6e:17:73:92:b1:92:26:c6:81:51:c7:b7:a8:
66:47:d2:cc:3b:af:be:fe:7f:a4:85:ac:8d:80:6b:85:8e:a4:
f4:3e:a0:3b:70:3f:35:24:45:62:ec:ed:e7:b3:89:42:60:ac:
57:28:49:88:e0:e7:48:2e:b8:3b:3c:df:9f:c1:c9:e2:0f:b6:
8b:58:cb:99:b1:60:69:84:9a:ee:a6:70:1a:d4:18:07:ba:c8:
a7:1c:7a:65:22:e4:c4:e3:e4:e6:01:6d:58:59:0b:74:74:dd:
17:f1:f3:e2:1a:2e:6c:28:49:81:5f:66:e3:e7:ab:84:d6:c2:
c5:72:26:53:6b:92:d7:22:a8:19:34:87:11:3e:57:c3:90:4f:
75:61:4f:a9
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUa/sbh8rCy6ReEaAHYkkv3RIfc3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MjJaFw0yMzA5MjUwODAyMjJaMDMxMTAvBgNV
BAMTKDI2RTQ3RjM3RkE1NTAzMDRFNjU5Q0RBNUFCQ0I3QTZGMUQxRDMwMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZmiJ5Pk3HoinscnHBjZPA1CP
WZLISAn9HJd775xFTgC9ZVxCCbzqM6m7rXNWQIz+D1n2x4JAxoooiMr4+FU+PMhw
m5DqLLfnFDoXlQrxZYeKk/36Mgx2Sa97rxUJEBnHt+ln1YxJlD3o0cSHFqF5ZUy2
Mo+lSf8X2gYVIHNh7Oe6rjToN+drDbGDqPT3XbL4ieWp4RlgjNphcdBekiUdf8Vg
Je0KRyIi3yjWL2WOYbUdK8vWFWZAtDdKN4JoKSUpbqJeLezQlbHhtLLjZC5YoUCN
MDfV8qTNPHqLd474fDOFLKBVvNqdKhshruDbpSJtCrJ6WoSuTijbEHvg95P7AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUJuR/N/pVAwTmWc2lq8t6bx0dMB4wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhNjIzNjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAALYw
DQYJKoZIhvcNAQELBQADggEBAHFeyRLOER45Nt4VEHrAFkdSHdqnC6F6HqiI85mz
hy671YGfmxGeN5FinizLtZMaNDpeNjSaUhZVUqdW9b4UcJ96W9OYXs02Jpkfa8r6
S1xG4joH2up9AL4brBes28OuSYdJt05wLGcRrNk6IbOa+ia+bhdzkrGSJsaBUce3
qGZH0sw7r77+f6SFrI2Aa4WOpPQ+oDtwPzUkRWLs7eeziUJgrFcoSYjg50guuDs8
35/ByeIPtotYy5mxYGmEmu6mcBrUGAe6yKccemUi5MTj5OYBbVhZC3R03Rfx8+Ia
LmwoSYFfZuPnq4TWwsVyJlNrktciqBk0hxE+V8OQT3VhT6k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org