Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323234353a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323234353a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: KxhgIhd7P/8+2oiqRhNkGO+DoHI8OM5f0ZMyK+vUn2g=
Subject key identifier: 62:D9:0A:0D:60:09:5E:2D:A4:61:62:5F:C4:DA:04:9F:9E:09:7D:D9
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 5CE7556D3610A34356ADAE20851C1290BEC6519B
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323234353a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:56:06 +0000
ROA not before: Sun 30 Jun 2024 04:51:06 +0000
ROA not after: Sun 29 Jun 2025 04:56:06 +0000
asID: 138814
IP address blocks: 2404:97c0:2245::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e7:55:6d:36:10:a3:43:56:ad:ae:20:85:1c:12:90:be:c6:51:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:51:06 2024 GMT
Not After : Jun 29 04:56:06 2025 GMT
Subject: CN=62D90A0D60095E2DA461625FC4DA049F9E097DD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9d:14:f3:de:cc:37:04:c5:5f:08:f0:5f:40:
55:e2:a9:d7:1a:d1:7b:93:83:9a:17:ba:1e:01:0c:
d8:b5:66:c2:8d:b6:aa:8a:1c:4b:2b:14:1d:a7:af:
1e:3e:95:c0:90:04:e2:cd:2b:bd:f4:8c:5b:d2:2f:
d1:e5:fb:83:66:ab:5c:cc:26:bd:62:c8:f4:48:f7:
a4:02:66:74:91:ad:4f:a4:f2:8a:68:f9:60:44:e6:
66:82:bd:40:c7:d9:4f:2c:1b:3a:c9:59:9b:da:b8:
ca:c9:48:2a:4a:ee:05:a2:7f:73:d6:23:bd:5f:04:
3a:47:af:ef:8c:8b:59:f9:bc:88:7e:38:e7:20:f3:
5e:4e:ef:72:a3:f6:9e:70:a8:60:ab:00:d7:cc:4f:
1c:6e:51:47:77:a7:f9:55:ff:67:d7:0f:6e:53:55:
ff:68:09:a9:df:62:cd:82:41:73:0e:13:fd:bc:12:
aa:09:5a:3b:35:dc:e4:e0:6a:f0:71:53:ce:04:f5:
6f:52:9b:a1:6e:5e:c2:f0:c5:18:09:b9:bd:8f:ff:
d7:54:f4:95:c8:ec:eb:a2:ae:61:b5:35:74:0c:82:
f5:21:4b:bf:1d:fc:c8:fe:2e:66:08:ae:bd:d5:01:
d8:f1:5b:d4:cc:28:e9:60:c9:8e:d2:27:fa:bf:a1:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:0A:0D:60:09:5E:2D:A4:61:62:5F:C4:DA:04:9F:9E:09:7D:D9
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323234353a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2245::/48
Signature Algorithm: sha256WithRSAEncryption
75:b2:4a:7c:37:eb:46:3c:c4:ea:c6:2b:6b:7a:f3:58:05:6c:
8d:4e:8c:24:c4:14:d6:c0:71:44:d4:d6:04:d1:9e:3a:1c:08:
52:32:fe:96:48:bb:27:91:0e:ba:2d:6a:da:eb:ce:90:ca:6b:
8b:af:05:44:b4:29:bc:16:36:22:36:a8:a2:ae:29:df:15:f6:
95:57:42:b0:89:b0:fb:1e:21:1d:c2:ff:54:b0:74:56:69:6b:
2c:31:c8:77:d5:36:25:cc:2d:9d:ba:7d:c2:eb:ee:a6:b6:2f:
89:f1:e1:3f:17:b4:a2:0c:a1:c4:f0:3c:55:26:14:70:ba:79:
34:e3:0c:88:af:6a:cb:db:59:c0:3d:d5:88:2b:a4:6b:c4:3b:
5d:43:ff:b4:7f:01:a7:cd:37:b1:0c:f2:af:9d:14:00:0b:02:
03:13:f8:49:51:49:a6:34:63:b9:aa:fe:c4:02:a0:9c:b0:1a:
e0:27:e7:52:b3:7d:c7:e1:68:15:2f:13:f6:5b:cc:4e:e5:8e:
ba:85:a0:46:97:ee:be:6a:dd:8a:f8:e6:62:cf:51:82:95:5e:
65:b5:60:1c:ef:b0:d1:2a:dd:28:c6:70:74:bb:47:20:95:4d:
9a:d2:32:c9:68:8e:7b:23:43:1d:3d:8b:b3:5d:15:17:e9:43:
82:d3:1a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:27 2025 by rpki-client