Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a323030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: yxe0hToVA+40gToiGZFsnUw7q10kY4HEZ/aeuscoBHY=
Subject key identifier: FC:F2:C0:42:C3:57:9C:59:C7:88:37:1C:49:98:C3:A1:D6:0F:1F:95
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 4F089C1520D4D11B80315D8B083264DA6CAC4159
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 15:00:01 +0000
ROA not before: Thu 27 Jun 2024 14:55:01 +0000
ROA not after: Thu 26 Jun 2025 15:00:01 +0000
asID: 138814
IP address blocks: 2404:97c0:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:08:9c:15:20:d4:d1:1b:80:31:5d:8b:08:32:64:da:6c:ac:41:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 14:55:01 2024 GMT
Not After : Jun 26 15:00:01 2025 GMT
Subject: CN=FCF2C042C3579C59C788371C4998C3A1D60F1F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:e2:23:14:f2:0d:e4:13:c1:41:f7:b2:ed:
5d:24:cd:7d:54:e7:21:d3:3a:f0:70:18:ae:b4:f3:
2b:80:c3:6a:38:8e:87:8c:3a:0b:f1:e8:55:e3:5e:
c9:31:1d:ff:55:26:cb:d5:71:11:c9:81:33:84:b9:
fa:b9:1f:6e:0d:3e:b4:d7:b8:4c:e8:83:91:80:47:
b2:da:78:ec:0f:16:d5:e9:08:81:8c:16:f4:1a:53:
00:f6:8a:fb:79:47:f8:3a:44:9d:c9:1f:2f:7e:be:
d6:f4:07:37:17:64:6f:ed:06:5c:8a:f5:76:9f:96:
e8:56:1e:d9:9e:ff:8a:17:b8:3e:f8:6f:91:3d:59:
b9:cd:92:99:91:53:6d:aa:2f:d4:d0:e4:e6:4a:75:
0e:f7:61:b6:98:01:a3:28:72:4a:cc:df:15:3a:d8:
4f:18:f3:07:a3:83:84:51:97:82:15:c6:7b:78:98:
d4:a6:89:82:a3:82:05:aa:90:72:8b:8b:aa:2c:3d:
26:67:b6:2f:7b:3c:1f:19:4f:3a:9d:ca:82:23:2e:
56:58:34:8d:84:ee:f6:f1:ac:16:ed:f4:bf:94:17:
90:67:c4:e3:3b:f5:1e:c3:c9:11:b8:c6:d2:33:46:
ee:7c:2c:b6:21:cd:9c:4e:a6:91:b1:77:af:14:ae:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F2:C0:42:C3:57:9C:59:C7:88:37:1C:49:98:C3:A1:D6:0F:1F:95
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2000::/36
Signature Algorithm: sha256WithRSAEncryption
49:e4:bb:26:cc:15:86:28:70:03:2e:f6:43:2e:dd:97:16:c4:
3f:14:e4:9e:23:69:b8:56:b9:42:38:5e:57:80:e5:1d:a3:0b:
c5:a2:61:01:27:ab:e8:4a:bc:28:bb:9e:ce:cb:d3:b2:e6:e7:
df:21:df:a9:5f:44:42:25:ee:42:b1:8a:83:73:ad:f9:2a:e6:
e0:3d:55:3a:1a:11:48:a9:7e:1d:c7:3d:8f:f0:25:b4:f2:7a:
f2:8b:af:a2:62:89:e3:84:d0:d8:66:4a:88:b7:e7:29:7c:2c:
e3:35:6d:70:e9:ae:4c:b4:45:b5:30:a1:b9:80:45:0c:42:51:
cf:d5:ce:c6:3b:78:00:8b:a2:cb:50:d1:49:a6:4d:94:9e:12:
0b:98:f2:15:60:8b:e8:76:41:26:03:65:fe:b2:c4:fa:50:38:
c5:b4:5e:93:83:6e:2f:fb:c6:89:df:27:dd:7c:f2:85:75:1e:
e2:1c:4a:5d:4e:df:d5:be:fa:21:29:a1:4e:43:d7:b8:dd:f2:
01:44:30:63:3b:e8:38:aa:ef:47:39:09:20:f6:3a:f0:1a:cf:
d5:be:6e:d9:b6:a9:c5:ea:7e:91:b1:49:c6:ac:78:0c:76:11:
79:f3:b0:62:8d:64:bb:25:49:5f:a9:18:e1:82:a1:c7:87:c4:
3a:3c:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:35 2025 by rpki-client