Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a64363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: +0xdYJ7vVL4RzH0YI9FRw2Lj55sgGV5J1OrSNCEMctc=
Subject key identifier: 88:E1:C2:07:D4:32:30:95:4D:4F:75:52:71:F8:ED:C8:15:35:42:C7
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 607D358C650B2F4CDE15D322F4D06EF1A24F67BA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:47 +0000
ROA not before: Mon 26 Sep 2022 07:56:47 +0000
ROA not after: Mon 25 Sep 2023 08:01:47 +0000
asID: 59282
IP address blocks: 2400:d680:d6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:7d:35:8c:65:0b:2f:4c:de:15:d3:22:f4:d0:6e:f1:a2:4f:67:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:47 2022 GMT
Not After : Sep 25 08:01:47 2023 GMT
Subject: CN=88E1C207D43230954D4F755271F8EDC8153542C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:c1:6b:f6:64:d7:6f:39:8f:bf:4e:10:05:
f3:b7:2e:72:c5:d5:25:fa:a7:9d:23:ce:86:8b:e9:
b9:25:71:7b:f2:0b:2b:a1:ea:25:ed:60:40:43:9a:
ea:54:74:c1:d6:70:dc:a9:ab:19:81:3e:93:7c:48:
35:87:83:64:3c:07:80:65:46:b4:05:03:6c:2e:d6:
28:09:9a:85:76:80:a9:cd:22:32:33:27:d0:2f:19:
49:0d:fa:56:17:14:c9:ac:b2:ce:cb:dd:19:53:fe:
29:05:6c:7e:80:9b:72:29:23:95:c6:19:bd:36:32:
43:93:1b:66:60:b2:0a:70:31:34:04:62:ee:2e:ec:
d0:14:76:84:15:0d:53:83:17:47:e6:f4:c3:49:bf:
88:f1:1b:cd:bd:3a:d0:1a:6e:a1:56:f7:e3:db:5d:
5b:fd:39:71:d7:e6:4c:07:b8:55:41:e2:f5:cb:b7:
11:05:c7:b1:a3:f2:06:1e:6b:5d:bd:56:61:6c:22:
68:90:45:58:e9:27:4e:0c:ef:0f:ef:21:8c:3c:6e:
63:4b:ac:2c:41:41:11:02:6a:da:2a:8c:38:a3:5e:
57:a1:92:22:fc:4d:5e:d5:c0:8c:77:66:3e:71:5c:
2a:5c:84:8c:ac:06:35:0d:2f:b8:2f:bf:29:08:55:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E1:C2:07:D4:32:30:95:4D:4F:75:52:71:F8:ED:C8:15:35:42:C7
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:d6::/48
Signature Algorithm: sha256WithRSAEncryption
10:d6:d9:8e:a4:ac:a2:9a:d1:a3:78:1d:1f:57:40:97:5a:9e:
4b:df:ce:3e:3c:ee:d4:ea:78:ec:cc:33:54:52:3c:a9:e0:c2:
0c:ab:8f:41:c4:46:8e:15:ef:ac:52:69:e0:59:2b:df:88:84:
bf:ff:23:44:62:11:21:9a:de:d0:1d:07:11:9a:4d:26:0c:f9:
6d:24:a9:2b:87:5f:6e:7d:30:0c:17:92:93:85:7c:ba:3f:14:
3b:cd:93:43:1c:ae:7d:67:ef:b7:60:bc:77:0b:ab:19:93:a4:
bc:cb:28:4d:5a:e9:2b:bf:05:07:06:5d:6f:70:2a:31:eb:38:
7f:e2:b2:73:a0:a9:29:70:4e:36:87:39:de:0a:d6:ae:7a:6c:
f4:c6:7e:78:a5:01:4c:f9:e0:70:36:7c:66:52:46:24:56:14:
5e:c0:4b:89:cb:0b:85:e6:69:7f:fb:82:be:c8:bf:87:6c:6b:
14:bd:9a:c4:39:3e:00:0e:dc:1e:ad:c7:a5:82:67:1c:25:dd:
d0:90:de:2d:84:e9:2e:6a:99:e8:7a:76:3b:19:84:54:f9:09:
47:c1:f9:ed:56:8a:7d:2a:d8:08:e4:69:40:b4:10:0a:e5:d1:
d9:70:4a:64:f8:e3:2c:3b:84:2a:58:e1:66:05:81:a6:1c:4a:
d7:11:ae:0c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUYH01jGULL0zeFdMi9NBu8aJPZ7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU2NDdaFw0yMzA5MjUwODAxNDdaMDMxMTAvBgNV
BAMTKDg4RTFDMjA3RDQzMjMwOTU0RDRGNzU1MjcxRjhFREM4MTUzNTQyQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHK8Fr9mTXbzmPv04QBfO3LnLF
1SX6p50jzoaL6bklcXvyCyuh6iXtYEBDmupUdMHWcNypqxmBPpN8SDWHg2Q8B4Bl
RrQFA2wu1igJmoV2gKnNIjIzJ9AvGUkN+lYXFMmsss7L3RlT/ikFbH6Am3IpI5XG
Gb02MkOTG2ZgsgpwMTQEYu4u7NAUdoQVDVODF0fm9MNJv4jxG829OtAabqFW9+Pb
XVv9OXHX5kwHuFVB4vXLtxEFx7Gj8gYea129VmFsImiQRVjpJ04M7w/vIYw8bmNL
rCxBQRECatoqjDijXlehkiL8TV7VwIx3Zj5xXCpchIysBjUNL7gvvykIVaIDAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUiOHCB9QyMJVNT3VScfjtyBU1QscwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhNjQzNjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAANYw
DQYJKoZIhvcNAQELBQADggEBABDW2Y6krKKa0aN4HR9XQJdankvfzj487tTqeOzM
M1RSPKngwgyrj0HERo4V76xSaeBZK9+IhL//I0RiESGa3tAdBxGaTSYM+W0kqSuH
X259MAwXkpOFfLo/FDvNk0Mcrn1n77dgvHcLqxmTpLzLKE1a6Su/BQcGXW9wKjHr
OH/isnOgqSlwTjaHOd4K1q56bPTGfnilAUz54HA2fGZSRiRWFF7AS4nLC4XmaX/7
gr7Iv4dsaxS9msQ5PgAO3B6tx6WCZxwl3dCQ3i2E6S5qmeh6djsZhFT5CUfB+e1W
in0q2AjkaUC0EArl0dlwSmT44yw7hCpY4WYFgaYcStcRrgw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org