Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a333030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: 0vtEp8TiACZ+3jbrBIThsnBKdVcJ2XlSfETVuEW2zBs=
Subject key identifier: 2C:A1:B0:E4:3A:61:87:5F:43:CF:C2:27:DA:ED:4D:59:EE:C5:96:AA
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 2AFD447C4A57E33EB1217549BD638E325B639D79
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 14:00:01 +0000
ROA not before: Thu 27 Jun 2024 13:55:01 +0000
ROA not after: Thu 26 Jun 2025 14:00:01 +0000
asID: 138814
IP address blocks: 2404:97c0:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fd:44:7c:4a:57:e3:3e:b1:21:75:49:bd:63:8e:32:5b:63:9d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 13:55:01 2024 GMT
Not After : Jun 26 14:00:01 2025 GMT
Subject: CN=2CA1B0E43A61875F43CFC227DAED4D59EEC596AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:7b:23:78:a9:73:70:e0:5d:c2:c8:80:7e:
af:b8:c6:0c:a6:ab:aa:c3:a3:40:ab:4b:ac:9a:84:
61:36:fd:c9:41:d6:ff:81:52:48:6d:4e:c8:f8:5a:
24:5b:68:1e:72:9c:d6:83:88:03:59:d6:f8:94:45:
39:1e:65:71:65:4f:b7:34:13:ee:e1:2d:4d:05:09:
ea:b7:f9:47:cb:83:ab:b9:88:99:98:95:f7:62:66:
a4:14:6d:fa:3f:f8:55:be:a9:5d:70:9b:38:dd:16:
0e:8c:bd:0a:55:de:98:9f:bb:ae:67:fc:a1:c9:bc:
7c:b5:79:6f:12:b9:04:c7:74:f0:d8:02:3e:fa:60:
f2:66:07:d7:88:47:92:0a:62:dc:a7:c1:12:c3:e1:
08:41:cd:ad:1e:e0:6d:8e:c5:6d:eb:91:75:15:44:
7d:bf:3e:a8:1f:8d:26:e8:93:93:ba:3b:c5:61:a7:
08:f7:29:b8:a4:7e:ab:8e:b8:b3:f0:84:e0:7b:60:
6c:f1:0c:2e:15:f5:05:d1:46:f4:28:07:06:02:a0:
fa:fc:b2:c1:e5:e1:c1:df:0c:f0:c6:02:63:1a:22:
fa:5e:a0:8f:37:ca:6f:2a:34:55:26:b6:6a:8b:22:
d4:ec:8f:65:2f:17:ab:2e:b4:ea:4c:3c:7b:00:2b:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:B0:E4:3A:61:87:5F:43:CF:C2:27:DA:ED:4D:59:EE:C5:96:AA
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
aa:f3:53:6c:f9:9e:b3:ed:c7:bb:3e:09:b3:b2:2f:ce:4e:60:
97:33:e9:d0:65:2d:59:14:67:ca:47:f5:48:0a:9f:e3:8b:a9:
9b:19:f1:c7:93:1b:5b:6c:da:87:2e:87:62:90:23:1c:ff:c3:
54:ad:6f:d6:25:de:b4:30:97:5f:07:e1:ba:36:52:40:2d:eb:
47:c7:cd:fb:46:7c:73:46:70:e3:0c:44:03:4a:ee:c2:1f:a4:
00:68:d1:d5:64:d3:e6:b4:73:15:81:31:41:ef:1e:19:17:91:
bb:da:f9:ae:e7:b2:92:8e:9c:39:f8:cf:bc:56:c6:f3:63:f5:
21:49:61:f1:f7:bb:58:1e:e3:68:ac:1b:96:54:8f:71:d1:81:
b0:08:6d:c1:9d:2d:d9:3c:c6:cd:40:59:2a:51:60:92:fe:a7:
fc:e0:95:ea:bb:e6:52:d7:bf:4c:99:c2:a4:90:e8:d0:b0:ce:
cd:2e:19:e8:33:fe:b1:84:76:c3:61:49:d9:51:3a:c1:d1:f3:
43:81:1a:3e:3b:9d:a0:2d:b5:32:1d:49:ca:3b:de:e1:a8:88:
a3:df:3e:67:9f:13:86:ee:b2:e1:39:58:2f:ec:11:e7:33:27:
90:c3:e4:bc:89:a8:a6:d8:60:71:13:8c:c8:92:95:62:64:e6:
f2:b7:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:06 2025 by rpki-client