Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS48.roa
File: AS48.roa (raw, json)
Hash identifier: tnIHiyydMBODQZAGAIWJ55BdRFMyohaiaQfvZCTRwvM=
Subject key identifier: 6F:12:90:88:60:F3:63:CC:22:60:10:0C:8D:EE:80:6C:41:B7:55:66
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 52A4686DF9898DE87076BEBC15BDC62E469868F5
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS48.roa
Signing time: Sun 13 Apr 2025 07:00:01 +0000
ROA not before: Sun 13 Apr 2025 06:55:01 +0000
ROA not after: Sun 12 Apr 2026 07:00:01 +0000
asID: 48
IP address blocks: 2400:d680:1f3::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 20 Jul 2025 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a4:68:6d:f9:89:8d:e8:70:76:be:bc:15:bd:c6:2e:46:98:68:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Apr 13 06:55:01 2025 GMT
Not After : Apr 12 07:00:01 2026 GMT
Subject: CN=6F12908860F363CC2260100C8DEE806C41B75566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:81:87:3a:bb:43:80:32:1d:6d:bf:27:06:
c2:78:12:a2:a2:25:b0:42:2b:c1:c9:92:5d:57:88:
dd:a8:67:47:40:c6:21:6b:93:54:a9:62:72:5e:12:
c1:eb:f1:63:c2:94:ff:78:88:18:39:94:11:86:47:
ff:82:de:c3:fb:b5:46:e6:3d:52:29:aa:f9:0f:56:
36:1b:0d:de:af:85:4e:c3:24:a7:7a:b6:cf:a5:db:
f9:11:be:6a:46:94:37:04:4e:af:29:f1:13:8e:fb:
8e:4b:a2:97:59:d8:0c:eb:62:80:1a:a2:48:d4:16:
33:92:c7:55:08:ba:1e:e1:5a:24:29:28:e2:d0:1a:
b6:48:04:5f:d3:1d:6c:67:38:31:50:d4:56:16:67:
59:e0:4e:a1:c8:a9:99:ee:6e:7f:34:0a:4e:61:16:
ba:9c:1d:32:d2:fd:20:3d:3c:51:cc:86:d8:d9:be:
5f:4b:30:51:e1:26:b6:9a:4a:57:95:e6:40:85:ff:
1d:53:75:f8:6f:2a:e3:40:db:94:26:dc:69:92:66:
76:16:78:51:a2:25:29:79:cd:b5:85:5f:6a:f7:05:
23:65:64:b2:d6:7a:cc:6b:07:ba:d7:df:14:80:60:
d5:33:25:8a:63:73:1a:da:93:d0:33:f2:cb:ca:05:
2a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:90:88:60:F3:63:CC:22:60:10:0C:8D:EE:80:6C:41:B7:55:66
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS48.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:1f3::/48
Signature Algorithm: sha256WithRSAEncryption
1d:44:58:5c:d0:35:7a:9b:1c:eb:80:b3:28:46:5a:6b:a2:63:
aa:c1:ee:00:e3:6a:fb:f1:0a:b1:6c:d4:a5:cd:2a:30:47:d2:
ff:68:37:c3:b5:23:92:44:20:ec:af:6f:a6:df:a3:02:af:5b:
2f:fd:74:fe:fc:85:cb:9c:eb:e4:2a:c1:37:b2:7f:8d:54:87:
4d:81:34:7a:ff:32:b7:02:01:73:fb:8d:8b:71:c1:f5:79:5c:
3d:68:e6:ae:9b:b3:ae:c1:6a:32:c5:b0:bc:33:6f:d9:cd:74:
12:17:ad:b0:f3:d4:21:d0:fe:08:c0:43:a9:a8:a1:c2:2b:d4:
e9:9f:d2:81:d0:95:29:76:43:37:a1:86:de:42:4a:e4:e6:54:
0a:08:4f:31:7c:8d:30:37:75:fc:dc:6a:e5:11:bd:30:6f:ea:
9d:7a:99:bc:71:ca:81:e2:48:6e:9d:b2:1d:5d:54:e2:91:20:
b2:30:74:46:7f:41:3a:59:66:15:1b:d9:6f:86:8c:a7:cb:bf:
94:6b:30:f1:88:a2:20:fc:ca:b0:2e:91:8a:59:f2:b0:5d:08:
ee:8f:da:62:6a:32:27:96:89:63:e4:81:2e:36:5a:56:f9:68:
ac:43:0b:f2:f1:88:ee:9f:0d:4c:67:94:91:53:c9:e2:76:b2:
9d:ec:2f:2c
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIUUqRobfmJjehwdr68Fb3GLkaYaPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yNTA0MTMwNjU1MDFaFw0yNjA0MTIwNzAwMDFaMDMxMTAvBgNV
BAMTKDZGMTI5MDg4NjBGMzYzQ0MyMjYwMTAwQzhERUU4MDZDNDFCNzU1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsYGHOrtDgDIdbb8nBsJ4EqKi
JbBCK8HJkl1XiN2oZ0dAxiFrk1SpYnJeEsHr8WPClP94iBg5lBGGR/+C3sP7tUbm
PVIpqvkPVjYbDd6vhU7DJKd6ts+l2/kRvmpGlDcETq8p8ROO+45LopdZ2AzrYoAa
okjUFjOSx1UIuh7hWiQpKOLQGrZIBF/THWxnODFQ1FYWZ1ngTqHIqZnubn80Ck5h
FrqcHTLS/SA9PFHMhtjZvl9LMFHhJraaSleV5kCF/x1TdfhvKuNA25Qm3GmSZnYW
eFGiJSl5zbWFX2r3BSNlZLLWesxrB7rX3xSAYNUzJYpjcxrak9Az8svKBSprAgMB
AAGjggH+MIIB+jAdBgNVHQ4EFgQUbxKQiGDzY8wiYBAMje6AbEG3VWYwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3luYzovL3Jl
cG8tcnBraS5pZG5pYy5uZXQvcmVwby9hODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02
OGQyYmQ2M2M5YzMvMC9BUzQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJADWgAHzMA0GCSqGSIb3DQEB
CwUAA4IBAQAdRFhc0DV6mxzrgLMoRlpromOqwe4A42r78QqxbNSlzSowR9L/aDfD
tSOSRCDsr2+m36MCr1sv/XT+/IXLnOvkKsE3sn+NVIdNgTR6/zK3AgFz+42LccH1
eVw9aOaum7OuwWoyxbC8M2/ZzXQSF62w89Qh0P4IwEOpqKHCK9Tpn9KB0JUpdkM3
oYbeQkrk5lQKCE8xfI0wN3X83GrlEb0wb+qdepm8ccqB4khunbIdXVTikSCyMHRG
f0E6WWYVG9lvhoyny7+UazDxiKIg/MqwLpGKWfKwXQjuj9piajInlolj5IEuNlpW
+WisQwvy8Yjunw1MZ5SRU8nidrKd7C8s
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:03:22 2025 by rpki-client