Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233333a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323233333a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: eUFcFU7my9G0MqDsrtNrM7u8nlbqXO9KEKGVSsC7DQc=
Subject key identifier: 3E:D6:62:E7:34:F0:ED:E8:7A:4A:44:B0:2E:77:56:DB:72:2A:96:5C
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 5FC74DA3A4BCFFF049995CBE139051181C6BECB5
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233333a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:55:03 +0000
ROA not before: Sun 30 Jun 2024 04:50:03 +0000
ROA not after: Sun 29 Jun 2025 04:55:03 +0000
asID: 138814
IP address blocks: 2404:97c0:2233::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c7:4d:a3:a4:bc:ff:f0:49:99:5c:be:13:90:51:18:1c:6b:ec:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:50:03 2024 GMT
Not After : Jun 29 04:55:03 2025 GMT
Subject: CN=3ED662E734F0EDE87A4A44B02E7756DB722A965C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:ea:5f:4e:9a:99:eb:1d:7d:a9:fc:36:ac:
e1:d0:bb:58:da:1f:16:7b:7a:a2:c6:ab:91:60:85:
0e:ed:45:3e:4c:58:e8:56:d2:fd:28:f5:30:26:1e:
4b:ad:2c:16:ef:88:80:cd:0b:5e:8d:17:15:16:c9:
5b:23:70:06:33:53:b8:80:91:50:b2:be:d1:ad:e0:
e1:0d:eb:d7:fd:ec:38:f3:b4:1f:6b:65:b3:9a:77:
9d:f3:ff:cc:8e:97:07:d5:d5:70:38:f1:cd:d9:36:
9a:c0:f8:ae:09:28:37:28:04:0e:fe:ed:e3:38:01:
ac:25:2a:cd:8f:5f:02:14:4b:9a:f0:35:8e:1a:a4:
f3:1d:14:0c:b0:f0:1c:fc:4b:58:ef:1c:38:77:05:
02:fc:2b:09:14:36:d0:61:3d:11:b9:b2:83:b3:82:
20:30:4a:34:a1:24:35:10:cb:53:78:27:42:a3:df:
ff:35:f6:fa:ad:20:6e:8f:7d:7d:06:7b:94:f0:a2:
ed:6d:ba:b0:ad:c7:51:4c:de:3c:07:c5:2a:41:80:
66:6a:0d:ad:1d:e8:0d:61:9d:59:a3:13:33:45:6b:
47:dd:7a:e1:d5:d9:89:77:ff:42:a1:2b:89:fa:a9:
ce:1b:72:3e:f7:f9:0a:96:eb:68:7e:44:b5:7c:58:
d0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D6:62:E7:34:F0:ED:E8:7A:4A:44:B0:2E:77:56:DB:72:2A:96:5C
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233333a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2233::/48
Signature Algorithm: sha256WithRSAEncryption
95:4b:3c:b8:a1:24:01:07:e4:8c:24:2c:45:d9:f7:2b:0d:35:
3a:ea:fc:36:84:21:54:53:dd:6d:c8:92:cd:e4:b1:35:98:b5:
d0:d9:5b:63:f2:70:ef:e1:00:70:d1:fd:3c:99:5e:4e:a2:33:
11:a3:f9:23:85:1f:20:74:ea:d7:db:f8:37:e7:5a:13:4a:aa:
ec:21:06:be:74:3f:8c:81:3a:6c:a5:94:d6:09:13:2d:d3:d8:
38:ae:21:90:c0:60:58:26:33:8a:21:4e:8d:d5:72:00:96:e4:
64:82:5c:9f:e9:58:b0:93:98:b8:4f:c8:9d:ac:41:dd:35:a7:
8c:2a:0c:17:99:91:43:00:8e:56:c3:a7:71:73:75:ec:40:13:
38:e4:e2:af:40:a3:30:b5:dc:67:a0:b9:36:1c:75:1c:77:92:
9c:77:0d:37:b9:9e:d0:8c:4d:f1:61:84:17:62:83:33:0b:88:
79:b8:e5:d7:0f:38:bd:b6:3f:fe:5e:3d:95:d9:75:cb:76:90:
14:d2:0a:3a:76:0b:d8:30:00:c2:bf:48:a3:88:b2:a6:80:f5:
98:be:9f:13:a4:5d:3b:db:12:9d:2e:42:ba:83:bf:77:ef:68:
33:7c:46:97:e0:01:3e:c9:cd:d1:00:ae:db:d6:3e:17:a4:86:
76:2e:1b:d2
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUX8dNo6S8//BJmVy+E5BRGBxr7LUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky
NzI5REVFRTAeFw0yNDA2MzAwNDUwMDNaFw0yNTA2MjkwNDU1MDNaMDMxMTAvBgNV
BAMTKDNFRDY2MkU3MzRGMEVERTg3QTRBNDRCMDJFNzc1NkRCNzIyQTk2NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzepfTpqZ6x19qfw2rOHQu1ja
HxZ7eqLGq5FghQ7tRT5MWOhW0v0o9TAmHkutLBbviIDNC16NFxUWyVsjcAYzU7iA
kVCyvtGt4OEN69f97DjztB9rZbOad53z/8yOlwfV1XA48c3ZNprA+K4JKDcoBA7+
7eM4AawlKs2PXwIUS5rwNY4apPMdFAyw8Bz8S1jvHDh3BQL8KwkUNtBhPRG5soOz
giAwSjShJDUQy1N4J0Kj3/819vqtIG6PfX0Ge5Twou1turCtx1FM3jwHxSpBgGZq
Da0d6A1hnVmjEzNFa0fdeuHV2Yl3/0KhK4n6qc4bcj73+QqW62h+RLV8WNCHAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUPtZi5zTw7eh6SkSwLndW23IqllwwHwYDVR0j
BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC
MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5
REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzIzMjMzMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BJfAIjMwDQYJKoZIhvcNAQELBQADggEBAJVLPLihJAEH5IwkLEXZ9ysNNTrq/DaE
IVRT3W3Iks3ksTWYtdDZW2PycO/hAHDR/TyZXk6iMxGj+SOFHyB06tfb+DfnWhNK
quwhBr50P4yBOmyllNYJEy3T2DiuIZDAYFgmM4ohTo3VcgCW5GSCXJ/pWLCTmLhP
yJ2sQd01p4wqDBeZkUMAjlbDp3FzdexAEzjk4q9AozC13GeguTYcdRx3kpx3DTe5
ntCMTfFhhBdigzMLiHm45dcPOL22P/5ePZXZdct2kBTSCjp2C9gwAMK/SKOIsqaA
9Zi+nxOkXTvbEp0uQrqDv3fvaDN8RpfgAT7JzdEArtvWPhekhnYuG9I=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:03 2025 by rpki-client