Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233303a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323233303a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: oKb4aeRR4wcbjITnilRdeUkuqi7F0PrILXb8iO6wRjw=
Subject key identifier: 2B:6F:B3:9F:8B:62:67:B5:AC:25:08:AD:D2:47:AA:CE:1F:99:E4:F8
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 4B9EE1BA957D7AE66743531F50F4C2714621894B
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233303a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:54:05 +0000
ROA not before: Sun 30 Jun 2024 04:49:05 +0000
ROA not after: Sun 29 Jun 2025 04:54:05 +0000
asID: 138814
IP address blocks: 2404:97c0:2230::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:9e:e1:ba:95:7d:7a:e6:67:43:53:1f:50:f4:c2:71:46:21:89:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:49:05 2024 GMT
Not After : Jun 29 04:54:05 2025 GMT
Subject: CN=2B6FB39F8B6267B5AC2508ADD247AACE1F99E4F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:79:d7:13:47:4f:e0:eb:d4:ae:8a:ac:5b:
fe:c1:b0:d5:03:cf:29:78:47:61:6b:f7:74:c3:6e:
14:9c:0f:b7:ee:82:1e:5f:f5:66:10:91:3a:26:b6:
3d:eb:78:3d:c6:a5:40:17:90:5d:0c:51:e0:49:7a:
ef:b4:60:c8:fa:7c:81:fc:8e:bc:07:8c:25:ca:c3:
25:e1:09:71:2a:fc:e8:d7:7a:e4:22:95:10:78:45:
a9:42:bb:bc:10:5c:b0:3e:41:58:9a:eb:7f:a0:e5:
b5:d4:47:2c:d8:8b:f9:c2:53:68:25:09:95:8c:66:
8b:8d:0e:6e:a5:a7:29:7f:f7:36:35:df:b8:25:e2:
a4:d5:8d:a0:55:af:b7:d8:2f:f0:27:f6:3a:da:09:
3e:7d:88:a7:f1:6b:a0:4a:73:42:45:1c:93:76:cc:
91:17:3b:e9:6b:b0:96:db:58:ea:bb:19:2c:fc:d7:
d5:30:2a:79:de:21:97:2e:8f:10:5e:1f:6e:49:b6:
78:51:d6:64:de:5b:75:7f:6c:fb:d2:fe:18:c8:b6:
f4:9d:2e:95:4f:c8:5d:69:b6:f3:b6:1b:a0:5e:4b:
9b:75:26:2c:69:9c:47:47:a5:bd:4d:12:30:62:89:
a5:04:a1:40:f7:d7:44:0a:89:76:50:35:71:d8:63:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:B3:9F:8B:62:67:B5:AC:25:08:AD:D2:47:AA:CE:1F:99:E4:F8
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233303a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2230::/48
Signature Algorithm: sha256WithRSAEncryption
6b:5f:74:1c:ac:51:e9:25:7d:00:40:d0:e1:46:73:a4:de:19:
14:ba:38:a0:f8:12:bd:cb:bf:ea:54:2e:1b:6c:b0:26:8d:79:
b6:84:b1:bd:32:41:5b:35:54:33:57:32:f6:c6:20:a7:e6:4f:
3c:10:95:30:72:7f:0a:09:d2:c3:72:2b:fd:7c:5d:91:95:f1:
20:d4:e0:3a:da:e9:d3:df:d6:d7:44:98:56:49:64:f5:43:ec:
14:c2:18:9f:2c:af:08:36:a8:a0:8d:fe:a0:7d:51:db:7c:04:
be:da:2a:fb:0e:a7:0f:b3:57:cc:79:89:35:c2:d6:b7:52:85:
71:71:3e:54:51:c4:00:2a:b2:f4:da:7d:27:ac:1c:81:98:bb:
d8:be:c6:49:7e:48:16:b5:ea:85:ab:55:53:d4:7a:7e:ea:b8:
c1:02:7c:4b:b0:b3:8b:85:cb:c1:47:3c:0b:00:6d:28:b2:3a:
a3:8a:23:c5:dd:f5:ac:1a:12:58:ba:51:0d:11:6d:d2:6c:a6:
1c:f1:1f:71:59:12:b9:8b:1a:56:47:71:91:35:fd:7a:3a:24:
03:be:11:c4:96:ab:11:3c:60:e0:3f:2d:9f:11:3a:1a:a1:6e:
dd:56:0d:91:a8:69:3b:71:ed:85:e2:11:c4:b6:28:bc:66:ba:
bd:9e:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:57 2025 by rpki-client