Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233393a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323233393a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: QOYFGRsSwQ0rS8gJ9aFIGd8LGlGAVDFPvgpH0YAKndk=
Subject key identifier: 9D:E3:0B:44:DA:D7:82:C6:37:01:02:D0:FD:FC:40:71:E2:79:83:20
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 45FCF59AFBF4EAAB056DD2E2259B8CE4E1C8FB79
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233393a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:55:32 +0000
ROA not before: Sun 30 Jun 2024 04:50:32 +0000
ROA not after: Sun 29 Jun 2025 04:55:32 +0000
asID: 138814
IP address blocks: 2404:97c0:2239::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:fc:f5:9a:fb:f4:ea:ab:05:6d:d2:e2:25:9b:8c:e4:e1:c8:fb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:50:32 2024 GMT
Not After : Jun 29 04:55:32 2025 GMT
Subject: CN=9DE30B44DAD782C6370102D0FDFC4071E2798320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:5c:0d:a7:94:ca:00:3a:ad:3b:c5:b2:e4:
ef:86:2e:07:f7:c8:bf:79:eb:d0:34:9f:26:a1:9b:
ec:fa:1b:cd:d6:43:de:8a:0e:53:b6:c4:b2:de:1f:
9a:23:98:6a:35:f1:2e:6b:13:65:25:ef:53:06:53:
8e:37:fa:88:eb:c9:b0:94:98:ca:ec:5e:17:8a:ca:
db:a5:9a:1b:c5:92:b2:d6:41:d3:00:a4:2c:30:6e:
aa:f9:1f:40:0e:6f:c5:e6:b8:35:ef:49:03:85:14:
9b:59:07:fa:bb:fe:7c:ef:5d:65:7f:d6:07:57:c1:
c2:14:13:72:e9:71:90:10:22:06:63:bd:5b:31:df:
18:8e:08:12:3b:fb:d8:9a:ac:40:7e:76:e7:20:2f:
e4:a1:92:39:b4:ea:45:2c:52:64:7a:d0:99:7b:38:
81:ae:91:e8:73:49:4a:7a:08:c6:97:8e:94:f9:94:
25:57:1f:15:db:75:43:fe:84:08:04:9d:3d:87:d0:
ec:19:7d:4d:e0:4a:9c:a1:7a:a3:9d:32:ea:f1:5a:
71:d2:6d:30:f1:e6:26:f4:ca:71:e8:dd:6d:57:b8:
88:06:8f:c8:9c:e4:cc:57:e9:79:02:5f:c6:61:55:
9c:8f:7b:0a:ea:58:8b:74:98:44:4c:b7:26:2f:1f:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E3:0B:44:DA:D7:82:C6:37:01:02:D0:FD:FC:40:71:E2:79:83:20
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323233393a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2239::/48
Signature Algorithm: sha256WithRSAEncryption
38:06:67:8d:92:8d:fd:ea:ba:3c:07:7c:35:62:0e:51:93:17:
55:5b:35:c5:3c:ac:da:6f:41:b2:14:0a:f5:93:b6:b0:e0:ea:
2c:98:6f:49:4a:9c:39:78:53:83:09:52:e7:d1:0e:e3:2f:6b:
0f:1a:50:55:4b:85:b7:a4:76:4e:95:da:f0:9b:97:8a:69:58:
1b:b2:cc:5e:d9:b0:a3:36:5f:db:ed:d7:a4:b9:53:ea:a4:f2:
d8:88:67:b4:fe:4b:bb:d2:5f:6e:d7:b1:d2:9e:1a:0c:53:e0:
c7:0d:1f:98:0a:36:07:df:e4:e1:08:0c:1f:86:03:0b:5a:60:
cd:08:ee:95:bb:2b:17:a0:3b:3e:37:dd:9c:ee:15:98:c6:28:
50:08:d6:3e:14:59:cd:86:0b:4d:73:8e:a3:e8:a7:2c:f0:f0:
e5:56:48:d0:12:3c:28:ab:5b:19:0d:12:99:b9:52:df:09:cb:
18:01:b3:1d:aa:19:c6:5c:6e:da:34:7d:9b:41:79:82:c7:a8:
a9:a7:26:3f:c0:b3:a0:0d:4a:1c:6a:b8:5b:a9:2e:60:93:07:
ee:0c:60:00:05:bc:53:e2:29:06:28:f2:4a:ee:b6:13:fe:83:
eb:78:6e:9a:fb:ac:ef:e4:eb:cd:b8:ec:1c:ce:62:b9:59:85:
86:3f:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:22 2025 by rpki-client