Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323234313a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323234313a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: bhl3fSXsArleug5Rs9Nz48rfCHQsvKf4pGDdnEr44aI=
Subject key identifier: 26:9F:EC:AC:9D:46:33:11:05:C0:30:7B:7C:59:A5:C0:9B:83:70:DE
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 7CC9E88E9E9FEE15C0DC3DD5FD4CDAE6D0291717
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323234313a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:55:48 +0000
ROA not before: Sun 30 Jun 2024 04:50:48 +0000
ROA not after: Sun 29 Jun 2025 04:55:48 +0000
asID: 138814
IP address blocks: 2404:97c0:2241::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c9:e8:8e:9e:9f:ee:15:c0:dc:3d:d5:fd:4c:da:e6:d0:29:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:50:48 2024 GMT
Not After : Jun 29 04:55:48 2025 GMT
Subject: CN=269FECAC9D46331105C0307B7C59A5C09B8370DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:3d:d1:b6:00:ea:78:a0:16:43:c6:44:c1:
b3:25:6b:0d:91:01:49:a1:e2:cf:d0:7d:e5:be:93:
b7:81:cf:e5:81:3a:5e:31:de:b3:1e:c5:42:a6:54:
78:08:b1:f4:94:4d:b9:03:91:bb:ca:4b:f6:96:43:
ef:14:d9:ed:dd:db:41:5a:c0:35:4b:fb:2d:2b:fc:
20:63:16:d3:a8:0d:8d:2c:66:34:59:0b:b1:fe:1f:
a9:4e:c8:ed:b8:a5:ac:18:e4:10:1e:08:3f:f5:9f:
7e:aa:3b:7e:51:77:5e:04:04:7d:9e:8e:9f:0c:2b:
8e:f9:75:ea:04:0a:7d:30:c4:22:4d:2b:15:5e:7d:
b3:67:07:ee:3f:6e:71:28:c7:48:e3:98:9f:b7:bf:
b8:f3:8b:93:ca:24:b4:62:c5:63:52:42:db:66:cc:
34:f8:c5:6b:e2:01:19:64:b8:56:3d:9f:c1:a5:7b:
c1:35:c5:e1:fa:db:c2:fc:d0:3b:64:13:a1:4f:c8:
b1:d0:a3:60:2c:0d:25:5a:4e:f3:8b:2f:93:11:d2:
fd:81:ae:e8:a0:25:d1:50:97:26:5e:1b:bb:45:96:
49:f9:b5:96:d2:9f:08:f4:8e:d4:41:4f:d4:4d:c8:
15:2e:4c:08:b6:9f:31:6f:35:1b:ea:48:52:29:8b:
52:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9F:EC:AC:9D:46:33:11:05:C0:30:7B:7C:59:A5:C0:9B:83:70:DE
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323234313a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2241::/48
Signature Algorithm: sha256WithRSAEncryption
1c:93:b0:46:9a:5d:f2:8f:c4:39:bc:4d:20:9e:6b:38:71:3a:
43:99:23:b0:70:8b:10:29:31:76:26:98:0f:bb:27:da:f5:79:
a1:b6:d8:41:5f:72:7b:f7:1b:a5:c9:ec:46:ae:29:bd:99:84:
7a:0c:ba:e4:57:bb:50:6d:20:98:90:1c:13:d7:e4:ff:91:e9:
ee:90:d2:7b:e3:4d:92:6c:77:77:ff:b2:52:23:86:8c:ea:a7:
69:90:2a:55:bd:75:a6:2d:18:03:6a:1b:86:c8:68:73:30:48:
dc:ab:ca:5d:c4:60:8a:12:53:87:be:50:fd:f4:d6:9a:79:60:
53:f1:65:87:b0:47:b5:43:54:0b:5d:0a:e8:ef:41:ec:3d:e6:
bf:f2:fb:9e:37:ba:0d:91:70:8e:77:b3:e6:dd:62:cd:e1:86:
69:58:7e:31:b8:dc:a8:f6:3a:bc:73:64:3a:af:7a:3a:0a:b4:
50:40:fd:cb:bc:07:56:00:e2:16:67:ad:5c:a3:8c:99:12:a2:
bd:89:8e:b5:f1:0c:3d:7c:18:76:98:18:d5:b6:01:10:3c:8f:
db:26:ff:fe:41:cd:d9:21:8c:fe:ee:2f:32:03:55:a9:07:cb:
89:12:10:ec:27:b5:9a:28:1c:4e:83:19:a3:a8:7c:f2:34:a5:
3c:f8:d0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:51 2025 by rpki-client