Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233313a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323233313a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: +HHGNScBZl+2FEHmhcbLH0HMlhaiYl+IVFhAtMbqPJk=
Subject key identifier: 93:AE:E3:D9:5E:38:70:B9:9A:32:D2:D0:A2:A1:F0:22:2F:87:BC:1B
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 64113552F03877C61547923C9385D57DF77128A6
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233313a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:54:24 +0000
ROA not before: Sun 30 Jun 2024 04:49:24 +0000
ROA not after: Sun 29 Jun 2025 04:54:24 +0000
asID: 138814
IP address blocks: 2404:97c0:2231::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:11:35:52:f0:38:77:c6:15:47:92:3c:93:85:d5:7d:f7:71:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:49:24 2024 GMT
Not After : Jun 29 04:54:24 2025 GMT
Subject: CN=93AEE3D95E3870B99A32D2D0A2A1F0222F87BC1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:e3:bd:3c:c1:54:a8:5c:0f:0d:36:f3:00:
fb:46:9b:63:dd:8f:58:af:e0:d1:1e:18:65:ec:9e:
1a:df:17:96:46:10:ab:b2:34:0a:b8:ba:c8:22:79:
5d:2c:00:10:87:f9:34:f6:ec:b6:8c:44:20:07:ae:
19:43:be:b9:91:61:e8:04:88:20:26:ee:aa:af:36:
d8:10:bf:b3:ff:3c:3e:37:7b:d1:cf:05:3c:00:7e:
16:25:ea:8f:1d:9a:25:e1:67:73:47:12:5f:15:c8:
4b:55:0a:a8:6a:a9:d2:47:3c:6e:4a:7d:32:24:1f:
cc:11:b6:0f:21:02:5a:37:8e:04:60:b4:17:b9:63:
2d:db:ee:6c:9e:1c:96:dc:5c:f4:95:82:93:20:cf:
8c:e5:ab:33:ad:5a:f4:a9:c3:6b:16:7c:32:34:cc:
87:b9:86:4a:d5:34:7f:85:0a:fd:47:31:12:4f:af:
25:a6:05:99:75:78:7c:d5:37:77:ea:56:85:d9:e7:
57:ae:aa:80:b2:11:ff:ff:18:6b:17:d6:fd:31:84:
a5:49:08:03:8b:97:8c:4f:a5:d5:67:21:f1:91:99:
09:e6:94:5a:32:d8:34:97:15:1d:29:10:d7:59:fc:
bd:31:98:38:f5:04:3e:f7:62:9f:3c:2d:54:6e:65:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AE:E3:D9:5E:38:70:B9:9A:32:D2:D0:A2:A1:F0:22:2F:87:BC:1B
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233313a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2231::/48
Signature Algorithm: sha256WithRSAEncryption
aa:a0:4d:c2:16:fa:b3:ed:75:fa:5d:eb:d1:cb:e1:d6:aa:6d:
6d:fe:32:2a:cd:92:fa:f2:c2:5a:20:bb:69:fa:a0:b5:c2:b4:
e5:3f:e8:11:62:56:3d:0d:92:f7:ab:29:38:ee:d4:04:9f:f8:
c1:9e:57:0e:76:a9:38:1e:26:88:95:14:34:c4:2b:63:d2:5f:
40:16:5f:a6:79:ce:1b:4b:bd:5d:cc:5a:df:f7:61:53:75:33:
d7:25:d6:ac:ee:3f:43:05:35:01:ec:73:cf:5c:df:f3:21:b0:
6b:bd:1f:bd:ee:b4:66:5b:89:86:a6:56:d2:0f:a4:69:a3:6c:
85:d8:10:ca:cf:34:d6:6a:d6:50:6f:cb:a5:1c:0f:fc:15:7c:
5b:13:40:90:b0:6b:43:31:f2:7a:46:72:a8:49:94:ce:28:78:
4e:f2:0e:5a:2e:9c:cb:f5:f2:1e:6b:53:95:59:37:ac:f5:57:
38:7b:ed:24:d2:46:3c:fc:62:6e:7b:07:41:ca:d3:20:d8:45:
07:b3:2b:cc:c8:3a:df:c8:7a:da:69:49:f4:b2:7a:bd:88:d0:
5c:60:e3:fc:19:fe:b6:7a:2d:e9:bd:83:2c:00:66:65:ae:42:
00:b5:17:42:52:d2:de:2d:bc:07:48:91:85:f0:f6:a6:b8:80:
19:ea:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:46 2025 by rpki-client