Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233353a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323233353a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: X8Oo+N3CGc1jUfCKmneWtzBtXv1479Ca9jlKtlGdzOs=
Subject key identifier: C8:5E:CC:82:21:88:96:A8:A2:C5:EE:D3:3D:7F:BB:E7:8D:6D:C5:AA
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 0AA65E1908289288686932C4BDC12F43E2DCB5FF
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233353a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:55:16 +0000
ROA not before: Sun 30 Jun 2024 04:50:16 +0000
ROA not after: Sun 29 Jun 2025 04:55:16 +0000
asID: 138814
IP address blocks: 2404:97c0:2235::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:a6:5e:19:08:28:92:88:68:69:32:c4:bd:c1:2f:43:e2:dc:b5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:50:16 2024 GMT
Not After : Jun 29 04:55:16 2025 GMT
Subject: CN=C85ECC82218896A8A2C5EED33D7FBBE78D6DC5AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:0d:9e:d8:08:d4:37:8e:9a:67:7e:ad:e3:
1d:65:0e:e1:d6:73:cd:13:9a:b2:92:67:5e:10:29:
91:44:43:8a:3d:23:48:94:d6:0d:01:be:03:2e:4b:
fc:f6:4b:97:9c:b6:af:a9:2d:04:db:29:43:b3:d7:
03:11:05:1c:da:3c:5f:ee:73:b5:7e:08:12:3a:c8:
ff:81:65:e1:7c:bc:21:75:ac:4e:8a:59:ea:c7:6c:
c2:84:a4:b5:36:7a:24:cd:c1:7f:e4:fe:66:e3:64:
a9:27:08:e4:27:f2:94:9a:a3:5e:37:17:c8:9f:7b:
eb:bd:26:12:6c:78:12:2e:8a:93:81:d5:c2:cf:de:
91:0b:a7:97:38:1a:10:67:21:3b:5c:39:4c:a2:71:
ee:58:53:57:1c:a6:2c:89:a6:76:61:87:0e:aa:33:
2b:cb:e4:08:33:e1:06:b5:ab:9e:c6:a2:56:d7:e6:
f6:88:a6:4b:d9:c4:ea:7c:52:b0:78:de:96:ec:18:
52:eb:4a:a7:cc:c1:2b:73:4e:63:1c:10:11:a8:d9:
49:6c:b8:fd:7a:ae:ba:b5:2e:ca:87:06:ff:2c:95:
47:f4:e3:02:50:34:e7:55:6e:f4:36:7e:26:bc:5f:
02:49:5e:20:9d:26:e3:4a:05:e0:32:66:f0:4d:23:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:CC:82:21:88:96:A8:A2:C5:EE:D3:3D:7F:BB:E7:8D:6D:C5:AA
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233353a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2235::/48
Signature Algorithm: sha256WithRSAEncryption
1b:48:1f:db:3b:3c:63:56:ef:9f:7a:3c:2e:6d:33:4a:4d:72:
d1:04:d8:e3:c6:4a:99:f1:a3:09:f5:e9:d1:78:94:44:88:af:
8a:b6:68:54:1b:95:fd:1a:43:eb:9f:c3:b7:9e:b7:1e:fc:0b:
34:bc:93:a1:c5:a9:0a:23:6c:05:18:01:8b:7b:e2:96:51:13:
da:aa:77:ea:eb:82:61:e4:02:34:63:97:a3:0a:3a:9f:25:b4:
7d:42:a3:8a:c1:19:c1:b2:3a:80:80:67:16:d9:e6:13:21:0d:
52:36:fd:d2:1d:1d:c6:d2:88:62:2d:92:22:7d:b8:6f:bb:83:
2d:01:b2:db:bf:3a:48:f0:00:6b:2c:f8:88:5c:38:5b:c9:99:
21:a9:4f:a2:31:13:41:08:7e:46:b7:0e:98:20:e9:1f:91:d4:
1e:45:ae:36:a3:96:0c:47:5b:2c:76:17:c7:00:09:66:42:29:
31:1c:8b:9b:a8:f5:03:1b:a5:5d:ec:dc:68:13:55:21:d5:53:
ca:90:9c:2d:80:24:8f:11:09:a8:2c:84:98:1c:c6:1a:67:4e:
f4:cf:ff:39:ca:6a:0b:5e:a5:4d:74:49:97:5a:0f:bb:3a:9c:
3b:60:64:77:b7:ac:76:c1:05:de:e8:02:f1:4d:51:dd:1b:4b:
4b:24:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:16 2025 by rpki-client