Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323235303a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a323235303a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: gP+Ni7tV5XI5nlP3p2YMVsfmp9WBGZ6wWsYFcVuGXW0=
Subject key identifier: F4:6C:FA:94:AC:D0:F1:41:DA:3D:A5:D5:80:AB:40:58:FA:0D:F2:AE
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 5DBB018647DF606028B3F4C453E0807B3E8E4591
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323235303a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:57:05 +0000
ROA not before: Sun 30 Jun 2024 04:52:05 +0000
ROA not after: Sun 29 Jun 2025 04:57:05 +0000
asID: 138814
IP address blocks: 2404:97c0:2250::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:bb:01:86:47:df:60:60:28:b3:f4:c4:53:e0:80:7b:3e:8e:45:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:52:05 2024 GMT
Not After : Jun 29 04:57:05 2025 GMT
Subject: CN=F46CFA94ACD0F141DA3DA5D580AB4058FA0DF2AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:44:eb:bf:a8:40:4d:cb:ba:56:37:07:13:
ab:d2:f5:3e:43:fe:a0:39:90:4a:66:cc:3a:0e:d6:
53:33:3e:20:80:19:4b:c7:0f:5b:f6:c4:a6:ac:3f:
ce:d9:eb:29:0b:56:0c:e0:40:d1:85:02:a0:98:0e:
29:ae:29:e7:c2:74:ea:c8:69:bf:83:6a:19:78:f9:
e3:95:97:4d:c8:26:74:c2:57:5d:8b:ab:40:e8:84:
5d:89:fa:b2:f3:d9:a3:3c:cb:ff:26:f8:83:18:65:
87:72:85:47:a1:b3:d5:f5:46:bf:62:be:68:ec:a5:
09:cf:ea:5a:b6:7c:9c:a7:9d:7c:0d:a9:46:11:e5:
0c:45:27:a1:50:f1:e8:64:c5:ae:b4:86:4f:1f:f8:
cc:b9:22:3a:b3:e8:6e:1a:d0:7a:3c:eb:63:6a:03:
d2:8d:10:18:39:82:48:9f:f3:62:56:41:12:85:49:
b5:47:9d:24:51:67:e8:f3:51:5e:64:21:6d:0b:d1:
4a:0c:30:12:7c:f9:ee:43:c4:a5:46:a8:d3:ce:b3:
53:28:44:c8:ff:08:aa:c5:33:4e:98:3f:dc:05:00:
79:1d:e1:c3:7f:b1:39:3a:6d:4e:db:10:a6:a0:a4:
e5:03:34:7c:54:59:b3:01:1b:b0:df:34:e8:e1:4f:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6C:FA:94:AC:D0:F1:41:DA:3D:A5:D5:80:AB:40:58:FA:0D:F2:AE
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a323235303a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:2250::/48
Signature Algorithm: sha256WithRSAEncryption
8a:68:c5:96:7e:88:7a:ca:5a:cd:81:b4:da:e8:2e:3c:7f:48:
7a:79:53:6a:c7:48:4b:20:3c:b0:f6:17:5e:5c:26:fe:f3:48:
6e:86:67:42:75:c0:49:9f:13:32:63:1b:ab:ff:10:10:96:c9:
cd:fa:eb:25:f6:b4:47:b0:aa:4d:0a:6e:ae:af:64:38:f9:21:
bf:d4:76:d0:97:09:8f:69:49:32:29:f8:cf:09:68:52:74:3f:
9e:c0:0e:5e:18:3b:ba:02:85:4b:29:be:39:7f:1d:9c:28:1b:
3b:ac:15:72:b1:a5:96:eb:d4:11:b7:aa:a1:4c:f0:bd:ac:8e:
96:df:51:57:0e:45:3b:cb:91:c3:2e:45:22:52:46:64:05:a9:
68:cb:ee:94:75:7e:63:5d:31:d3:d4:31:f3:b0:81:8f:24:dd:
c1:17:83:20:1a:55:2d:15:2e:1a:23:7c:4a:dc:1d:75:bd:19:
a6:eb:a9:60:a8:6b:38:91:c4:cc:c3:e7:43:56:f7:96:72:1a:
d0:70:2f:c5:aa:48:dd:19:94:79:19:0e:01:1c:89:38:88:bf:
3a:7c:05:6a:45:1d:64:c8:da:25:10:e0:5d:26:08:70:27:b7:
b3:c8:e8:31:95:46:fd:a1:6d:9b:e7:ee:6b:56:64:b2:0f:04:
e4:04:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:41 2025 by rpki-client