Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/323430333a626130303a323030303a3a2f34302d3438203d3e20313332363531.roa
File: 323430333a626130303a323030303a3a2f34302d3438203d3e20313332363531.roa (raw, json)
Hash identifier: 7D2vY+F26S0Ck6BP2U8s1fSPxUU9ndKoKntWs0M+Gks=
Subject key identifier: 7F:B2:59:FF:6D:D5:32:2B:6C:FD:44:76:E4:B7:FC:44:D9:9F:22:73
Certificate issuer: /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial: 60950106D05EBB7F9392D36DF1A4AED2D96955BB
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/323430333a626130303a323030303a3a2f34302d3438203d3e20313332363531.roa
Signing time: Mon 01 Jul 2024 01:03:52 +0000
ROA not before: Mon 01 Jul 2024 00:58:52 +0000
ROA not after: Mon 30 Jun 2025 01:03:52 +0000
asID: 132651
IP address blocks: 2403:ba00:2000::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Oct 2024 00:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:95:01:06:d0:5e:bb:7f:93:92:d3:6d:f1:a4:ae:d2:d9:69:55:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Validity
Not Before: Jul 1 00:58:52 2024 GMT
Not After : Jun 30 01:03:52 2025 GMT
Subject: CN=7FB259FF6DD5322B6CFD4476E4B7FC44D99F2273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:21:3a:c6:99:8f:de:ba:31:52:c1:01:fb:
e4:d1:88:5e:cf:79:55:8e:37:da:25:1b:75:26:3a:
53:a6:82:b0:63:7a:de:4f:6f:a8:0d:9b:92:e8:25:
6f:52:c0:47:d2:f8:96:d8:42:37:7f:72:72:2a:5e:
95:c0:77:25:69:cd:f8:a4:7d:4f:c3:7a:64:c7:5a:
0b:2d:c5:99:58:22:1d:89:fb:92:b7:b4:64:d7:7f:
53:6b:d5:ab:f7:3e:80:7f:9b:f0:9e:27:0f:9d:0c:
29:db:e0:88:dc:04:c2:9f:6d:f1:2c:14:9d:9c:d3:
a7:c6:66:5a:b6:4e:be:45:43:ea:d2:10:e7:28:7e:
09:54:12:ca:d1:d5:0e:3e:24:19:27:c7:7e:a1:d9:
52:1c:4a:03:dd:a6:d3:25:1d:57:56:90:7e:cf:fe:
52:02:72:8c:3d:bd:45:74:3b:f4:ed:2e:11:55:db:
e7:ab:5b:fd:72:45:13:73:8a:69:b6:c0:82:95:27:
61:e6:7c:90:f1:19:a5:8e:e7:9d:ad:91:ba:9c:34:
63:10:e8:dc:af:3c:66:d7:62:84:fd:ed:e1:0a:fb:
1a:3f:c2:32:77:16:6a:00:07:af:2c:2b:c5:73:97:
27:40:38:2f:a5:07:18:27:77:5b:87:06:ad:3a:ac:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B2:59:FF:6D:D5:32:2B:6C:FD:44:76:E4:B7:FC:44:D9:9F:22:73
X509v3 Authority Key Identifier:
keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/323430333a626130303a323030303a3a2f34302d3438203d3e20313332363531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:ba00:2000::/40
Signature Algorithm: sha256WithRSAEncryption
b4:37:6c:6c:1f:9c:f0:6f:6a:b7:ff:d8:cb:69:fe:2e:60:8a:
ea:e3:e1:bc:3c:ac:9a:17:0d:70:cd:c4:f9:87:58:d1:d6:63:
6b:d9:50:34:2e:87:58:12:c3:1f:f0:b6:de:e1:5e:81:f5:5e:
83:7f:21:42:92:b2:cc:32:1d:15:14:56:29:46:14:be:8b:2e:
82:12:de:e9:88:e3:8f:f2:b0:c9:48:8b:cb:6c:b2:fa:06:75:
33:68:bd:da:62:61:2e:4c:ec:eb:f9:1d:bc:1c:5c:9e:75:9d:
a5:23:c4:c4:5b:e5:c0:ac:ba:d3:34:2a:f9:77:11:b0:27:59:
0b:6a:f8:b4:21:c4:c9:99:10:af:f0:b7:7f:76:e8:2f:0b:55:
db:32:15:3d:f0:2c:55:ba:61:7b:e2:69:e4:ef:7e:5c:21:f0:
87:ec:79:9c:41:18:2f:88:1c:d4:5d:7b:42:66:61:c9:e3:f7:
72:7e:52:c8:2f:e1:75:3a:3e:3c:ce:17:17:e8:32:66:07:5d:
18:ab:16:c3:01:bb:74:4e:ca:80:4d:c1:6a:34:0a:dc:22:f0:
0f:b3:35:d6:53:85:d4:b0:c1:a0:cc:2b:6c:38:ec:c9:b1:8e:
e6:38:e3:8e:b0:9d:ad:84:1b:1a:42:cd:01:de:d7:62:37:cd:
53:f3:24:a4
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUYJUBBtBeu3+TktNt8aSu0tlpVbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz
QjI3MUUzRTAeFw0yNDA3MDEwMDU4NTJaFw0yNTA2MzAwMTAzNTJaMDMxMTAvBgNV
BAMTKDdGQjI1OUZGNkRENTMyMkI2Q0ZENDQ3NkU0QjdGQzQ0RDk5RjIyNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRYyE6xpmP3roxUsEB++TRiF7P
eVWON9olG3UmOlOmgrBjet5Pb6gNm5LoJW9SwEfS+JbYQjd/cnIqXpXAdyVpzfik
fU/DemTHWgstxZlYIh2J+5K3tGTXf1Nr1av3PoB/m/CeJw+dDCnb4IjcBMKfbfEs
FJ2c06fGZlq2Tr5FQ+rSEOcofglUEsrR1Q4+JBknx36h2VIcSgPdptMlHVdWkH7P
/lICcow9vUV0O/TtLhFV2+erW/1yRRNzimm2wIKVJ2HmfJDxGaWO552tkbqcNGMQ
6NyvPGbXYoT97eEK+xo/wjJ3FmoAB68sK8VzlydAOC+lBxgnd1uHBq06rG6/AgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUf7JZ/23VMits/UR25Lf8RNmfInMwHwYDVR0j
BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3
RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3
MUUzRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwOWMyMmIxLTFiN2ItNDY3MS1h
Yjk0LTVjNWU3NDg4MjU0Ny8wLzMyMzQzMDMzM2E2MjYxMzAzMDNhMzIzMDMwMzAz
YTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMTMzMzIzNjM1MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAk
A7oAIDANBgkqhkiG9w0BAQsFAAOCAQEAtDdsbB+c8G9qt//Yy2n+LmCK6uPhvDys
mhcNcM3E+YdY0dZja9lQNC6HWBLDH/C23uFegfVeg38hQpKyzDIdFRRWKUYUvosu
ghLe6Yjjj/KwyUiLy2yy+gZ1M2i92mJhLkzs6/kdvBxcnnWdpSPExFvlwKy60zQq
+XcRsCdZC2r4tCHEyZkQr/C3f3boLwtV2zIVPfAsVbphe+Jp5O9+XCHwh+x5nEEY
L4gc1F17QmZhyeP3cn5SyC/hdTo+PM4XF+gyZgddGKsWwwG7dE7KgE3BajQK3CLw
D7M11lOF1LDBoMwrbDjsybGO5jjjjrCdrYQbGkLNAd7XYjfNU/MkpA==
-----END CERTIFICATE-----
Generated at Tue Oct 22 03:14:36 2024 by rpki-client on console-fra.rpki-client.org