Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323232353a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323232353a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: +skqxpjdInc0vRShSw6i8AVRnXZ+hDaXfKTRJ/eekDs=
Subject key identifier: 96:C6:A9:53:AF:64:F0:9C:E0:66:FE:F3:0D:AF:A7:2E:9A:A4:03:CE
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 5D6FA74C23AA147ABC5528C022B0987AAC13C914
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323232353a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:52:43 +0000
ROA not before: Sun 30 Jun 2024 04:47:43 +0000
ROA not after: Sun 29 Jun 2025 04:52:43 +0000
asID: 138814
IP address blocks: 2404:97c0:2225::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:6f:a7:4c:23:aa:14:7a:bc:55:28:c0:22:b0:98:7a:ac:13:c9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:47:43 2024 GMT
Not After : Jun 29 04:52:43 2025 GMT
Subject: CN=96C6A953AF64F09CE066FEF30DAFA72E9AA403CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:4e:58:cf:b6:bb:91:30:f7:0b:58:3a:2e:
b0:c2:c7:80:57:8d:19:e6:0f:74:55:0a:aa:79:c7:
a0:87:7b:7a:9b:69:45:cd:7d:c8:d8:94:69:a6:8a:
7e:29:01:2e:e0:e2:14:29:57:36:e0:0a:79:f4:70:
09:1a:e0:11:b4:03:31:72:0b:b5:28:cb:d3:20:f5:
fc:f1:e8:b1:7e:8d:ae:7e:99:bd:96:72:58:65:5d:
22:71:3d:6a:ea:5b:2b:86:7a:54:19:e8:01:f5:83:
46:99:ba:38:b6:2e:6d:72:5a:2e:73:28:0a:44:64:
5e:ac:05:3c:51:86:6b:9a:65:4c:4b:ad:de:09:e1:
95:a5:b5:e6:75:3a:61:60:04:2c:d7:5d:2c:3a:6f:
de:f8:d3:eb:05:50:30:87:47:67:28:13:e6:cd:90:
66:25:e7:8e:62:93:6a:1f:6b:a4:03:d4:83:31:4e:
c3:3d:9d:8e:7d:1f:32:9a:46:4d:45:b1:87:c4:bf:
38:05:8f:6e:a8:99:f6:d6:0b:d2:d5:25:dc:21:e8:
64:87:b8:d0:45:2e:7b:08:c4:e5:b0:3c:35:28:fb:
8b:a4:f3:52:6a:57:15:5c:93:9b:f5:87:16:d1:c1:
53:59:ba:85:37:10:27:8c:4c:5a:3a:8f:2b:7a:9d:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:A9:53:AF:64:F0:9C:E0:66:FE:F3:0D:AF:A7:2E:9A:A4:03:CE
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323232353a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2225::/48
Signature Algorithm: sha256WithRSAEncryption
33:27:ec:3f:f4:ae:69:85:81:5c:ff:4b:f6:f1:89:4f:15:21:
48:6f:f7:a5:8a:33:17:9d:69:4e:19:f5:08:0f:51:46:0b:2f:
79:d4:70:de:d0:16:af:12:e8:24:5b:be:56:2d:74:d2:76:2f:
c0:2f:05:8d:73:ca:34:7c:62:4e:ab:80:93:56:9b:37:1e:e6:
c4:87:e0:0a:00:1f:a9:e1:c5:20:af:c1:14:28:20:a8:3b:40:
21:e4:0c:b3:76:81:ae:c9:93:ce:2b:d9:de:65:99:9e:f7:69:
ae:c4:60:73:14:f9:cc:ec:b3:eb:a3:24:78:f1:2b:e2:81:40:
42:9c:ec:d1:49:bc:11:2e:40:ce:44:5d:e6:b1:97:3e:f8:38:
82:3f:32:ba:cc:f1:8f:7d:f1:b8:bd:b8:d2:04:cd:03:2c:3a:
c1:22:96:0d:a5:6f:7d:f4:a2:61:c8:d4:fa:e0:32:87:8a:b5:
48:5d:0b:31:10:45:31:4a:a4:47:a1:14:0b:97:52:ed:9e:8b:
ab:de:94:a5:01:b8:bf:9d:b2:d6:ed:4c:cd:2a:f6:5b:ea:e7:
b4:7c:06:16:fb:6a:e2:b6:5c:2d:07:64:57:4a:78:6a:79:06:
ad:ea:cf:78:74:ae:df:6a:a3:84:ed:c9:32:28:5b:fa:98:ab:
2b:bf:87:cc
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXW+nTCOqFHq8VSjAIrCYeqwTyRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky
NzI5REVFRTAeFw0yNDA2MzAwNDQ3NDNaFw0yNTA2MjkwNDUyNDNaMDMxMTAvBgNV
BAMTKDk2QzZBOTUzQUY2NEYwOUNFMDY2RkVGMzBEQUZBNzJFOUFBNDAzQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrBU5Yz7a7kTD3C1g6LrDCx4BX
jRnmD3RVCqp5x6CHe3qbaUXNfcjYlGmmin4pAS7g4hQpVzbgCnn0cAka4BG0AzFy
C7Uoy9Mg9fzx6LF+ja5+mb2WclhlXSJxPWrqWyuGelQZ6AH1g0aZuji2Lm1yWi5z
KApEZF6sBTxRhmuaZUxLrd4J4ZWlteZ1OmFgBCzXXSw6b9740+sFUDCHR2coE+bN
kGYl545ik2ofa6QD1IMxTsM9nY59HzKaRk1FsYfEvzgFj26omfbWC9LVJdwh6GSH
uNBFLnsIxOWwPDUo+4uk81JqVxVck5v1hxbRwVNZuoU3ECeMTFo6jyt6nVD7AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUlsapU69k8JzgZv7zDa+nLpqkA84wHwYDVR0j
BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC
MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5
REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMyMzUz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BJfAIiUwDQYJKoZIhvcNAQELBQADggEBADMn7D/0rmmFgVz/S/bxiU8VIUhv96WK
MxedaU4Z9QgPUUYLL3nUcN7QFq8S6CRbvlYtdNJ2L8AvBY1zyjR8Yk6rgJNWmzce
5sSH4AoAH6nhxSCvwRQoIKg7QCHkDLN2ga7Jk84r2d5lmZ73aa7EYHMU+czss+uj
JHjxK+KBQEKc7NFJvBEuQM5EXeaxlz74OII/MrrM8Y998bi9uNIEzQMsOsEilg2l
b330omHI1PrgMoeKtUhdCzEQRTFKpEehFAuXUu2ei6velKUBuL+dstbtTM0q9lvq
57R8Bhb7auK2XC0HZFdKeGp5Bq3qz3h0rt9qo4TtyTIoW/qYqyu/h8w=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:05 2025 by rpki-client