Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33322d3332203d3e20313430343233.roa
File: 323430363a323063303a3a2f33322d3332203d3e20313430343233.roa (raw, json)
Hash identifier: t7Cb5fqqpC3XA8+Bje9B9m7574kHx9J/dyjgzwg7IzI=
Subject key identifier: D5:03:32:55:01:6D:9C:65:AC:C7:F1:E3:A1:75:D4:44:E5:BB:8B:6C
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 0670C2093291EE03D219A3071558700101CF88D5
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33322d3332203d3e20313430343233.roa
Signing time: Thu 08 Sep 2022 04:26:29 +0000
ROA not before: Thu 08 Sep 2022 04:21:29 +0000
ROA not after: Thu 07 Sep 2023 04:26:29 +0000
asID: 140423
IP address blocks: 2406:20c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:70:c2:09:32:91:ee:03:d2:19:a3:07:15:58:70:01:01:cf:88:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Sep 8 04:21:29 2022 GMT
Not After : Sep 7 04:26:29 2023 GMT
Subject: CN=D5033255016D9C65ACC7F1E3A175D444E5BB8B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:48:6c:7c:a5:58:04:33:37:81:1e:df:b8:
92:3b:57:4e:f6:7d:f6:5b:b4:39:f7:c8:3d:36:e7:
1e:9e:ad:69:32:c5:6c:c8:e8:8b:76:b7:3a:42:18:
08:f1:0d:3e:6d:26:f5:5b:e6:73:e7:30:20:a1:58:
db:b6:e6:57:99:9f:a5:b3:0b:e8:bd:dc:d5:1c:b0:
72:2b:f3:c9:c0:29:72:ec:d4:e8:e5:84:57:c2:d1:
bd:9a:10:81:e5:94:26:c6:35:be:21:2b:65:58:2e:
77:e1:39:2a:29:f2:9b:43:ed:7e:13:9a:2a:3d:f4:
0f:25:2a:de:5b:d4:27:ec:b7:dd:0d:07:fa:33:cd:
84:ba:fd:e2:2f:3f:9e:74:6f:12:c3:31:7c:11:7d:
84:b7:62:09:3b:52:7b:4d:ad:2f:f0:80:61:f8:7e:
85:63:8b:9b:40:2c:8d:55:76:08:c0:7a:2c:b7:2b:
83:03:1e:7f:70:bd:0f:a3:9b:f7:81:92:89:a9:6a:
8f:01:76:8a:d4:73:d5:f2:b4:2c:88:1c:db:7d:3e:
76:07:a5:5e:fb:a1:38:e0:e9:d6:ab:0a:e1:02:d1:
cb:a1:f1:e5:04:de:85:8d:a2:fa:ff:35:76:94:9a:
02:99:c1:16:5e:2f:e5:80:02:ce:47:34:8b:70:c0:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:03:32:55:01:6D:9C:65:AC:C7:F1:E3:A1:75:D4:44:E5:BB:8B:6C
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33322d3332203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0::/32
Signature Algorithm: sha256WithRSAEncryption
73:54:08:3c:88:e2:b1:d9:d2:a8:76:d5:f6:9a:3d:64:c6:65:
d7:97:e9:b2:31:e8:de:c5:3b:d2:da:cc:79:ca:79:5c:0e:99:
19:19:f7:af:ff:0e:cf:32:42:6f:52:99:44:17:86:1a:15:01:
f5:b2:ea:0a:cc:98:21:5c:b6:8f:1c:f8:77:28:d0:be:a3:f2:
f3:37:08:ea:b1:a4:f4:5a:f0:01:c2:32:dd:ab:84:eb:ae:78:
0b:98:dc:0e:62:8f:b6:3b:a8:93:31:28:61:af:52:d1:45:bd:
7a:b3:00:55:1f:61:38:f6:3a:7f:de:9a:78:73:c3:0e:bb:05:
b7:60:41:f4:10:f8:96:e8:8b:8f:54:51:aa:b1:4d:ca:07:11:
70:79:05:fd:5b:d7:e4:2c:a1:d3:bb:1a:7a:1e:35:26:79:46:
c0:10:7c:50:4e:36:b5:88:7b:14:f4:5e:cb:d7:79:53:bf:de:
08:0f:7f:1d:08:7c:bd:7d:29:8d:80:1b:9b:b5:de:db:85:41:
89:37:d6:ab:86:7d:68:8f:33:93:2b:ed:7f:eb:27:a6:32:a3:
63:bd:de:52:3b:e7:50:2c:13:73:19:3f:37:51:6d:21:27:08:
99:e7:f7:e1:35:0b:b3:15:74:5d:b3:88:cc:cb:16:95:5d:b1:
9f:fd:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org