Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a633a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a633a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: /qKEUpzYt0MwbSyQWn6cBr6vrRoTPBHulo0+3k0W/hM=
Subject key identifier: 4A:53:9A:11:75:82:CA:EB:0A:CC:25:0D:94:C5:12:17:0B:49:49:C5
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 2900080BC6854C1FD6B17E090FE0C749FA4FD785
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a633a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:06 +0000
ROA not before: Mon 26 Sep 2022 06:55:06 +0000
ROA not after: Mon 25 Sep 2023 07:00:06 +0000
asID: 59282
IP address blocks: 2400:d680:c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:00:08:0b:c6:85:4c:1f:d6:b1:7e:09:0f:e0:c7:49:fa:4f:d7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:06 2022 GMT
Not After : Sep 25 07:00:06 2023 GMT
Subject: CN=4A539A117582CAEB0ACC250D94C512170B4949C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:54:b9:f8:ec:36:b6:c7:69:31:86:ff:92:
c2:db:15:92:d4:75:41:2c:32:7a:63:c4:35:8b:9b:
e2:2c:69:b1:b6:d6:29:31:54:de:c6:92:43:14:85:
f9:0c:85:ee:12:97:6c:61:1f:ae:66:ab:33:48:04:
4a:31:5d:b6:c7:d6:27:8d:83:f0:a9:b9:cf:5c:f4:
ac:e2:79:0d:08:fd:ee:3b:88:4b:56:bb:18:85:5b:
6c:21:a1:80:77:52:d6:bc:b6:7f:ef:2f:07:10:e1:
92:03:cf:19:8e:84:79:b7:25:dd:a3:19:84:35:81:
b3:6c:bc:70:f6:28:f5:89:37:a8:d4:12:4c:80:3d:
e6:29:67:69:b1:a1:a1:ea:04:e3:27:c4:57:ef:de:
77:17:93:ea:62:a4:f5:7e:18:a8:35:d8:58:10:10:
95:eb:43:6b:a0:2c:01:12:9c:a2:f1:f1:b9:e8:02:
1a:8e:0b:2c:2f:3e:90:7c:84:d8:8c:3e:c0:f0:25:
b9:c3:70:90:7b:ab:bc:f8:4d:d2:7a:e4:7e:bf:e9:
ae:09:59:87:36:c7:c9:d0:40:c8:82:03:6f:c6:83:
3d:09:42:3a:d5:cc:f5:db:3e:e4:e7:cf:a8:7b:a0:
51:80:f6:3a:f7:fd:10:fb:2a:9b:af:dc:d8:95:64:
49:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:9A:11:75:82:CA:EB:0A:CC:25:0D:94:C5:12:17:0B:49:49:C5
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a633a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:c::/48
Signature Algorithm: sha256WithRSAEncryption
59:06:6a:ef:f7:c8:d9:9f:52:0f:31:43:58:1c:46:25:0e:b5:
0e:ac:0d:c0:4d:33:b7:93:d9:bf:4b:79:c0:b5:2d:cd:0e:dd:
fa:9f:87:7b:64:cc:42:66:94:3c:7e:48:0d:b0:89:30:7b:b0:
c7:31:71:21:16:0f:73:81:56:f9:db:2b:bd:68:00:93:03:84:
04:2c:97:0d:4c:2b:22:21:32:18:b2:17:56:dd:e9:b3:00:49:
26:8a:b9:42:1c:9b:70:3b:be:b3:57:22:7f:d6:42:d2:51:fc:
6d:89:45:b2:9e:f4:b9:a0:2e:06:f5:4d:64:1e:d1:07:a1:47:
34:52:2e:01:87:54:d4:e8:51:1d:96:61:b2:e6:ae:7e:36:29:
18:66:30:c0:74:57:f5:f6:e7:67:67:8b:86:6a:ff:07:55:ad:
18:21:ee:9c:7f:7d:73:d2:5d:96:e8:c4:85:1e:69:2d:a1:55:
56:c9:64:a5:ee:92:8b:73:35:80:8b:2d:c4:fa:59:c3:06:4a:
18:1d:79:55:a6:e6:30:e7:9c:d0:d3:65:cc:09:39:41:7c:bb:
b1:23:c1:4f:c8:db:67:08:e1:cd:11:16:84:f6:52:15:94:b5:
60:ba:8e:46:e7:4d:82:3f:ff:29:f1:d3:34:69:bd:17:37:dd:
d4:45:50:1d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUKQAIC8aFTB/WsX4JD+DHSfpP14UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNjU1MDZaFw0yMzA5MjUwNzAwMDZaMDMxMTAvBgNV
BAMTKDRBNTM5QTExNzU4MkNBRUIwQUNDMjUwRDk0QzUxMjE3MEI0OTQ5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC631S5+Ow2tsdpMYb/ksLbFZLU
dUEsMnpjxDWLm+IsabG21ikxVN7GkkMUhfkMhe4Sl2xhH65mqzNIBEoxXbbH1ieN
g/Cpuc9c9KzieQ0I/e47iEtWuxiFW2whoYB3Uta8tn/vLwcQ4ZIDzxmOhHm3Jd2j
GYQ1gbNsvHD2KPWJN6jUEkyAPeYpZ2mxoaHqBOMnxFfv3ncXk+pipPV+GKg12FgQ
EJXrQ2ugLAESnKLx8bnoAhqOCywvPpB8hNiMPsDwJbnDcJB7q7z4TdJ65H6/6a4J
WYc2x8nQQMiCA2/Ggz0JQjrVzPXbPuTnz6h7oFGA9jr3/RD7Kpuv3NiVZEmxAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUSlOaEXWCyusKzCUNlMUSFwtJScUwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhNjMzYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADWgAAMMA0G
CSqGSIb3DQEBCwUAA4IBAQBZBmrv98jZn1IPMUNYHEYlDrUOrA3ATTO3k9m/S3nA
tS3NDt36n4d7ZMxCZpQ8fkgNsIkwe7DHMXEhFg9zgVb52yu9aACTA4QELJcNTCsi
ITIYshdW3emzAEkmirlCHJtwO76zVyJ/1kLSUfxtiUWynvS5oC4G9U1kHtEHoUc0
Ui4Bh1TU6FEdlmGy5q5+NikYZjDAdFf19udnZ4uGav8HVa0YIe6cf31z0l2W6MSF
HmktoVVWyWSl7pKLczWAiy3E+lnDBkoYHXlVpuYw55zQ02XMCTlBfLuxI8FPyNtn
COHNERaE9lIVlLVguo5G502CP/8p8dM0ab0XN93URVAd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org