Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233323a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323233323a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: C8BbXkD7Q1NrLC5q4lL9S4jcVQ41LFaGCgyWnL+UfH8=
Subject key identifier: 1C:B9:8C:1C:DF:B1:86:E2:F9:40:41:5B:4D:E0:C1:86:7F:6C:B6:DD
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 7C13307717777E538769435A9657B19D8B546B5F
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233323a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:54:39 +0000
ROA not before: Sun 30 Jun 2024 04:49:39 +0000
ROA not after: Sun 29 Jun 2025 04:54:39 +0000
asID: 138814
IP address blocks: 2404:97c0:2232::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:13:30:77:17:77:7e:53:87:69:43:5a:96:57:b1:9d:8b:54:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:49:39 2024 GMT
Not After : Jun 29 04:54:39 2025 GMT
Subject: CN=1CB98C1CDFB186E2F940415B4DE0C1867F6CB6DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:c9:2e:a3:69:e0:40:a6:4e:90:1c:9a:bf:
73:8e:9b:46:73:9b:3b:d7:c1:f9:f8:d5:9b:49:f7:
fe:6e:a2:9b:0a:87:21:b6:57:4a:2b:e7:46:bb:88:
cb:20:ce:62:96:7f:af:c3:99:c2:98:46:c5:51:7d:
f5:3d:7f:0f:c4:0b:14:c5:26:26:fd:f9:c2:6f:d9:
49:ac:29:30:93:ae:95:4e:d1:73:3c:19:70:47:fd:
63:37:47:48:07:a3:8d:34:1b:80:db:0b:90:00:4a:
f1:9e:79:ae:1f:cf:13:c7:39:99:16:d2:d4:7a:f7:
43:16:5a:67:27:5d:25:3c:96:00:99:53:b9:c9:b9:
ac:ad:e6:11:1c:bc:4a:a2:65:48:44:3e:ce:8b:03:
8b:f5:7a:30:25:ff:e3:db:03:8a:1c:02:6c:b7:7d:
ac:7a:7c:63:6f:4e:9e:7b:7a:c2:fe:a5:34:1a:4a:
6a:a2:6f:0d:01:10:58:b9:01:d9:f5:87:04:bf:f4:
49:1f:57:95:44:4f:ee:30:0b:0a:bf:f3:03:55:d2:
59:12:ef:5f:b1:fc:89:a5:33:84:08:ac:65:ff:52:
aa:a8:25:60:3d:6c:32:7e:28:db:c2:a0:28:c1:ca:
c1:9d:01:64:1e:1f:bc:7c:1d:1c:d8:d6:41:db:c7:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B9:8C:1C:DF:B1:86:E2:F9:40:41:5B:4D:E0:C1:86:7F:6C:B6:DD
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233323a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2232::/48
Signature Algorithm: sha256WithRSAEncryption
00:a2:f9:d8:3c:73:a5:fa:c7:2e:98:91:c0:5c:5d:b8:de:3e:
da:fa:4c:a8:84:78:30:b6:b7:e4:a4:aa:a8:86:85:23:36:72:
80:8e:a0:13:da:70:17:9f:c5:82:e8:a1:80:2c:9c:6d:56:b8:
39:1a:44:11:c7:62:a0:70:78:a1:82:bb:5b:19:59:9c:cc:f9:
5b:e9:70:ce:d3:8b:61:01:e7:3c:1f:f6:d2:0c:20:36:f8:09:
41:2f:50:b8:4b:7c:59:29:86:76:b6:b6:f9:07:cb:7c:25:61:
1f:21:e0:fb:08:bc:0e:2e:85:fd:20:43:09:28:58:e0:8d:69:
90:3c:f1:fa:9a:5f:18:81:d6:00:e0:0f:37:67:68:a2:0e:8e:
a1:4b:3a:96:c9:94:8e:6a:40:02:ac:eb:e1:40:d2:50:c9:da:
48:b2:8f:7d:67:6f:df:0f:c6:ce:43:62:9f:02:0c:54:e1:78:
03:fa:e4:ee:ed:59:90:09:d2:7c:fe:ae:a9:11:5b:dd:0a:cd:
2a:b7:a5:d5:03:4b:8d:cc:b8:07:d4:c4:5d:b5:4a:4d:89:31:
04:e4:a9:72:95:f2:4d:db:ef:08:e6:eb:71:23:ef:da:17:36:
df:55:e2:5b:a3:06:99:0a:36:cd:8f:3e:ad:4a:98:44:e8:3b:
20:b2:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:05 2025 by rpki-client