Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64643a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a64643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: yEuUEvcdKn0DB3Gc+FX9TQM1Wr/JThw6EM6/XdBTppo=
Subject key identifier: 1E:70:F6:58:5F:6F:FA:CE:4B:3D:61:DE:29:66:6E:B0:75:F1:13:E3
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 4EA214F179B92C4800227960228A7BC88DBEEAB2
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64643a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:04 +0000
ROA not before: Mon 26 Sep 2022 07:57:04 +0000
ROA not after: Mon 25 Sep 2023 08:02:04 +0000
asID: 59282
IP address blocks: 2400:d680:dd::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:a2:14:f1:79:b9:2c:48:00:22:79:60:22:8a:7b:c8:8d:be:ea:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:04 2022 GMT
Not After : Sep 25 08:02:04 2023 GMT
Subject: CN=1E70F6585F6FFACE4B3D61DE29666EB075F113E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:26:1b:7d:55:c9:ed:11:93:9f:83:18:e8:49:
f3:0f:c5:37:dd:51:ca:4d:30:92:04:81:73:94:7e:
c0:c3:21:9a:d0:fa:8c:67:66:46:99:3d:a7:df:6e:
af:9a:6a:15:be:17:34:b3:0d:d4:5f:4a:61:ed:9f:
98:b3:50:e5:d4:11:23:09:f3:ac:b5:e8:2f:09:02:
87:49:96:d2:3d:5a:05:aa:3d:bb:04:b9:d1:18:17:
24:0a:9e:f2:f7:f2:d5:dd:be:50:35:e1:e8:75:a0:
41:67:ac:fb:7e:a1:a9:6e:c1:65:f9:0f:47:30:38:
ae:d9:92:55:a3:17:13:9c:86:b2:b5:97:46:99:37:
24:ce:d5:cb:cd:d9:dd:cf:f6:7b:e2:a7:a5:68:cc:
57:2b:8c:42:14:c6:eb:db:41:a2:79:7b:d8:d0:96:
f3:bf:8d:ac:64:d1:04:5f:d4:15:f8:df:ef:82:4c:
d5:b7:40:6f:4a:49:76:02:03:b6:56:05:55:8f:c7:
67:59:5d:77:e1:ef:e1:c7:08:9e:7e:04:27:a3:04:
c6:aa:5b:99:54:d0:9e:9d:f5:8c:ed:24:b1:95:bd:
25:37:d4:d1:89:34:83:1b:0e:ba:03:0b:a3:cc:35:
34:07:82:29:6a:12:ed:05:d1:d9:e6:95:b8:05:29:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:70:F6:58:5F:6F:FA:CE:4B:3D:61:DE:29:66:6E:B0:75:F1:13:E3
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a64643a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:dd::/48
Signature Algorithm: sha256WithRSAEncryption
a0:fb:c8:0f:c3:c9:f1:5d:83:e1:a3:db:0c:db:3a:09:51:b8:
c8:75:30:d8:64:64:56:13:25:dd:08:ac:20:18:75:10:be:bf:
2d:cd:fd:6c:0c:8e:9e:21:47:6e:73:c7:d6:53:98:a3:95:b7:
b6:a3:92:87:43:fe:8b:86:5b:9e:88:92:59:6c:3f:87:64:25:
3b:5c:0d:93:dd:2d:2a:b2:75:b3:9e:ba:0f:ca:d8:ed:d1:5c:
e7:58:c0:0f:7b:de:72:bc:9d:8e:30:76:a2:5e:bb:cb:fa:90:
20:fa:64:31:5e:67:12:1c:a6:aa:d2:ae:2a:a7:83:96:6d:16:
33:51:f8:c8:ad:e0:29:39:5f:ba:3a:85:98:de:c8:23:c4:91:
14:83:da:88:49:7c:bf:6e:08:7b:65:2f:e8:58:66:2d:5b:ee:
6f:6c:90:8a:55:e8:a3:62:8f:76:55:85:dd:2a:dd:fd:73:77:
6f:98:2a:dd:d2:e7:e8:e1:7f:b2:02:54:bd:39:97:98:f7:72:
a4:04:5c:ce:9e:50:36:58:3e:b1:66:10:be:eb:22:68:07:d6:
4c:07:74:81:c3:c1:59:e2:16:16:77:2c:3a:a2:44:26:e9:f0:
a6:db:ed:ee:30:0b:9c:e8:df:40:f4:28:64:3a:df:16:3e:53:
b4:9f:3a:de
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUTqIU8Xm5LEgAInlgIop7yI2+6rIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MDRaFw0yMzA5MjUwODAyMDRaMDMxMTAvBgNV
BAMTKDFFNzBGNjU4NUY2RkZBQ0U0QjNENjFERTI5NjY2RUIwNzVGMTEzRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJht9VcntEZOfgxjoSfMPxTfd
UcpNMJIEgXOUfsDDIZrQ+oxnZkaZPaffbq+aahW+FzSzDdRfSmHtn5izUOXUESMJ
86y16C8JAodJltI9WgWqPbsEudEYFyQKnvL38tXdvlA14eh1oEFnrPt+oaluwWX5
D0cwOK7ZklWjFxOchrK1l0aZNyTO1cvN2d3P9nvip6VozFcrjEIUxuvbQaJ5e9jQ
lvO/jaxk0QRf1BX43++CTNW3QG9KSXYCA7ZWBVWPx2dZXXfh7+HHCJ5+BCejBMaq
W5lU0J6d9YztJLGVvSU31NGJNIMbDroDC6PMNTQHgilqEu0F0dnmlbgFKVlVAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUHnD2WF9v+s5LPWHeKWZusHXxE+MwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhNjQ2NDNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAN0w
DQYJKoZIhvcNAQELBQADggEBAKD7yA/DyfFdg+Gj2wzbOglRuMh1MNhkZFYTJd0I
rCAYdRC+vy3N/WwMjp4hR25zx9ZTmKOVt7ajkodD/ouGW56IkllsP4dkJTtcDZPd
LSqydbOeug/K2O3RXOdYwA973nK8nY4wdqJeu8v6kCD6ZDFeZxIcpqrSriqng5Zt
FjNR+Mit4Ck5X7o6hZjeyCPEkRSD2ohJfL9uCHtlL+hYZi1b7m9skIpV6KNij3ZV
hd0q3f1zd2+YKt3S5+jhf7ICVL05l5j3cqQEXM6eUDZYPrFmEL7rImgH1kwHdIHD
wVniFhZ3LDqiRCbp8Kbb7e4wC5zo30D0KGQ63xY+U7SfOt4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org