Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: OUysi7LErYhAQdPsQkhWSK9oKITWBEwfOHIlBITo5n4=
Subject key identifier: D9:80:39:9C:C7:A0:F1:99:1C:75:A8:65:EF:82:F9:55:96:01:68:F2
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 516DDF4CF8302E0FB55DB13351B1279CB6136873
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66363a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:02:20 +0000
ROA not before: Mon 26 Sep 2022 07:57:20 +0000
ROA not after: Mon 25 Sep 2023 08:02:20 +0000
asID: 59282
IP address blocks: 2400:d680:f6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:6d:df:4c:f8:30:2e:0f:b5:5d:b1:33:51:b1:27:9c:b6:13:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:57:20 2022 GMT
Not After : Sep 25 08:02:20 2023 GMT
Subject: CN=D980399CC7A0F1991C75A865EF82F955960168F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:18:7d:e7:e8:48:22:0c:1e:a2:50:9e:c8:
83:8d:a4:a2:e4:6d:3d:15:4b:90:12:c2:01:2e:72:
66:f0:b2:13:49:77:68:8c:71:ab:89:20:04:30:58:
63:f3:1e:24:0e:01:dc:1a:87:01:36:c3:6a:6f:71:
8b:8a:45:a3:54:04:0f:7c:d8:98:8c:71:3d:7e:be:
9f:8b:41:24:27:e3:5d:90:ed:56:1f:cf:da:89:49:
cb:1c:f5:de:c0:c9:d4:e6:42:e6:50:22:46:d3:db:
19:92:0a:1c:55:9e:be:17:c8:f3:67:aa:e7:46:43:
f4:04:2a:c8:e5:ba:06:25:94:bf:42:2e:59:dc:f1:
c0:71:1a:71:e0:aa:15:62:e3:99:d0:78:a1:39:7d:
4b:0b:72:c1:ab:89:34:68:81:d9:9b:ee:2e:a1:00:
d5:c3:f1:d3:3c:4c:ca:22:3e:b4:e6:79:12:c6:01:
06:f8:97:b3:15:61:b0:7e:e8:d9:96:ab:a6:5a:3c:
4b:21:26:04:bf:0d:1d:73:d6:11:4e:0a:c5:27:6b:
ad:07:22:b6:3b:b0:9c:18:99:82:50:3f:23:74:d6:
d9:5c:ca:3b:e3:2c:a6:6b:ad:d7:fe:2d:af:1b:1b:
cb:88:9c:0e:92:29:12:cf:97:d9:7d:7b:91:c1:2a:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:80:39:9C:C7:A0:F1:99:1C:75:A8:65:EF:82:F9:55:96:01:68:F2
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:f6::/48
Signature Algorithm: sha256WithRSAEncryption
36:61:d6:c6:f5:41:fa:49:6f:9e:d4:cd:79:a4:6d:82:13:2f:
9d:b7:cb:2c:e2:d3:76:4a:7c:19:24:c6:be:39:29:6a:1b:dd:
8f:65:b8:89:c3:91:d4:a2:7d:8e:b0:54:95:cc:cc:73:11:10:
32:36:74:65:b5:31:af:2f:8d:fd:c8:8c:48:5a:b4:d7:cc:d2:
47:bb:e1:2e:b3:59:8d:85:b7:f7:7a:59:c5:c2:d1:55:a4:8b:
31:dc:b9:e9:a2:03:87:5b:d3:60:5f:5d:ca:84:36:13:31:36:
ab:63:62:d8:74:11:8b:0f:0b:03:d7:7d:8c:f4:55:f0:54:f8:
5f:f7:6f:7e:ea:3b:d6:0e:29:b7:40:75:46:a3:d2:6a:ab:14:
8c:8f:a8:71:12:98:b8:34:21:fb:62:59:82:36:97:c7:dd:e5:
83:77:9d:b0:48:02:41:ce:9d:b2:a5:1b:6e:53:f4:6e:42:ad:
7c:3d:39:9d:f4:6e:e9:ba:85:92:b6:27:ff:26:e3:8d:a8:5c:
25:a8:95:da:8e:68:df:3d:94:5b:06:2e:62:09:9a:d1:34:9a:
c1:84:13:4b:7d:59:ff:ca:36:ab:92:1f:a7:b2:48:76:3b:c3:
dd:fd:04:53:de:6b:ad:53:8d:f6:da:fb:37:b4:bd:09:ed:a5:
40:9f:f9:60
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUUW3fTPgwLg+1XbEzUbEnnLYTaHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MjBaFw0yMzA5MjUwODAyMjBaMDMxMTAvBgNV
BAMTKEQ5ODAzOTlDQzdBMEYxOTkxQzc1QTg2NUVGODJGOTU1OTYwMTY4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71xh95+hIIgweolCeyIONpKLk
bT0VS5ASwgEucmbwshNJd2iMcauJIAQwWGPzHiQOAdwahwE2w2pvcYuKRaNUBA98
2JiMcT1+vp+LQSQn412Q7VYfz9qJScsc9d7AydTmQuZQIkbT2xmSChxVnr4XyPNn
qudGQ/QEKsjlugYllL9CLlnc8cBxGnHgqhVi45nQeKE5fUsLcsGriTRogdmb7i6h
ANXD8dM8TMoiPrTmeRLGAQb4l7MVYbB+6NmWq6ZaPEshJgS/DR1z1hFOCsUna60H
IrY7sJwYmYJQPyN01tlcyjvjLKZrrdf+La8bG8uInA6SKRLPl9l9e5HBKhgNAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU2YA5nMeg8Zkcdahl74L5VZYBaPIwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhNjYzNjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAPYw
DQYJKoZIhvcNAQELBQADggEBADZh1sb1QfpJb57UzXmkbYITL523yyzi03ZKfBkk
xr45KWob3Y9luInDkdSifY6wVJXMzHMREDI2dGW1Ma8vjf3IjEhatNfM0ke74S6z
WY2Ft/d6WcXC0VWkizHcuemiA4db02BfXcqENhMxNqtjYth0EYsPCwPXfYz0VfBU
+F/3b37qO9YOKbdAdUaj0mqrFIyPqHESmLg0IftiWYI2l8fd5YN3nbBIAkHOnbKl
G25T9G5CrXw9OZ30bum6hZK2J/8m442oXCWoldqOaN89lFsGLmIJmtE0msGEE0t9
Wf/KNquSH6eySHY7w939BFPea61Tjfba+ze0vQntpUCf+WA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org