Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323136383a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323136383a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: og7a4MFTZ/vKJLJOhmwtroJ32TLDXvM6a4fbLB1NVZs=
Subject key identifier: 59:DD:0E:E9:15:65:CF:90:1C:67:ED:16:74:70:64:A1:1A:20:64:CD
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 29E911DC15E54F2D3830F8008A44DECB812B09E9
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323136383a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:51:17 +0000
ROA not before: Sun 30 Jun 2024 04:46:17 +0000
ROA not after: Sun 29 Jun 2025 04:51:17 +0000
asID: 138814
IP address blocks: 2404:97c0:2168::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e9:11:dc:15:e5:4f:2d:38:30:f8:00:8a:44:de:cb:81:2b:09:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:46:17 2024 GMT
Not After : Jun 29 04:51:17 2025 GMT
Subject: CN=59DD0EE91565CF901C67ED16747064A11A2064CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5f:07:bd:1a:5a:f9:8d:8e:ce:b3:be:0d:1d:
ee:e1:37:94:54:09:78:72:96:53:11:12:52:28:18:
d2:67:dd:4e:67:46:cb:55:2f:2a:54:a6:9b:17:b6:
ca:87:71:06:f4:c3:00:d3:9f:fd:4f:c7:4e:d4:ee:
dd:1e:e4:bd:09:c9:e8:dc:25:73:2a:e8:31:7e:2f:
cf:14:26:4f:99:ed:4c:60:f2:91:9e:86:53:09:bd:
6e:8b:0e:4c:e8:d3:57:e9:69:ba:84:00:05:e6:37:
09:b8:ef:af:38:47:07:da:a4:47:aa:47:13:d0:91:
ee:2b:03:b4:9d:ef:f7:d6:f0:35:db:4c:56:f7:86:
ba:dc:4b:8b:4e:7f:6d:70:87:74:72:a0:1a:2b:fb:
09:c3:67:60:f6:c7:19:0b:a4:92:e5:45:b7:07:92:
dd:86:ea:e5:21:f1:da:1a:de:9d:46:a0:00:d5:58:
17:90:96:5d:79:da:eb:0b:8a:fd:1e:60:ed:81:79:
6b:5f:8a:46:89:00:55:26:7e:6b:1e:fc:6e:91:25:
06:ad:f6:fd:6c:80:26:d0:d3:82:57:b0:d1:8d:78:
3d:aa:5a:02:60:99:65:e2:50:f7:65:36:8d:d0:f3:
b2:54:cd:1c:f6:40:00:a0:4a:09:f5:c9:ba:2c:31:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:0E:E9:15:65:CF:90:1C:67:ED:16:74:70:64:A1:1A:20:64:CD
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323136383a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2168::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ce:46:e1:8d:56:d5:83:88:1f:a8:c6:82:fa:ba:8f:ae:37:
ce:16:b6:44:3b:46:b5:57:d7:62:26:d9:b0:f9:c4:2d:60:1a:
cc:0f:7e:23:21:1a:fd:51:39:2a:cc:7a:26:69:ad:b8:1a:e3:
df:fc:db:d9:6a:c1:51:5a:43:94:75:ff:42:8a:13:a3:e9:c8:
69:2c:56:85:c4:82:b4:63:cc:a3:9d:b5:63:19:36:52:c7:aa:
64:ef:fc:e0:a3:bf:a8:61:c8:7d:2a:25:f1:10:1a:89:fd:53:
7b:32:fc:33:a5:df:d0:0b:ab:20:00:6d:49:cc:8f:93:85:25:
b3:a0:7a:9a:82:1d:f6:e1:95:f9:4e:de:b5:6a:a9:cf:5d:5e:
7d:a3:d0:04:28:70:5b:14:6d:a7:b9:45:81:5c:87:e5:a1:bc:
7f:0b:d5:52:10:16:bf:70:1b:b1:70:af:43:88:33:a1:bf:9f:
72:9f:c1:fb:77:f5:b2:04:27:c7:74:65:c8:f9:36:f9:c9:14:
a6:22:28:7e:9e:53:cc:b8:c5:f5:14:bc:d5:c7:65:c7:76:95:
a0:d7:bc:47:31:87:de:5e:35:12:f2:b2:52:fe:41:0a:85:46:
0f:f7:90:6f:75:59:d6:4c:89:9f:30:85:a6:72:7f:14:c3:51:
08:0a:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:51 2025 by rpki-client