Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333132363a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a333132363a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: nj9y56pV5dwZJs8vIJDsmxJsW6uRBSORbGNB3fNTDgs=
Subject key identifier: AD:D2:A3:01:64:6F:0E:78:2C:95:0A:5A:C6:7A:68:F4:F2:48:CA:3F
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 6D42D8B1C926D0C779C39D4EEF81130E2C7282A0
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333132363a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:57:23 +0000
ROA not before: Sun 30 Jun 2024 04:52:23 +0000
ROA not after: Sun 29 Jun 2025 04:57:23 +0000
asID: 138814
IP address blocks: 2404:97c0:3126::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:42:d8:b1:c9:26:d0:c7:79:c3:9d:4e:ef:81:13:0e:2c:72:82:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:52:23 2024 GMT
Not After : Jun 29 04:57:23 2025 GMT
Subject: CN=ADD2A301646F0E782C950A5AC67A68F4F248CA3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:23:a9:83:8b:1b:0c:87:16:5d:43:14:ca:
14:8a:fd:93:f0:0b:b0:dd:d5:e4:40:65:69:f8:21:
fb:84:98:fe:c2:b0:81:0d:d5:e2:ad:f4:a3:73:3a:
9f:66:35:84:75:54:63:08:c2:ff:0f:58:89:a2:07:
8b:9b:51:0b:a6:25:1b:f2:22:37:55:64:fb:a1:3b:
dc:c5:8f:16:af:24:d1:74:25:b9:91:a7:a1:77:85:
13:7a:ec:32:47:19:0b:8c:63:87:39:21:ac:63:75:
35:59:97:a3:1e:b0:64:ad:0e:10:78:a0:72:f8:7a:
b0:da:7e:97:1c:45:34:8c:4a:ee:28:37:20:22:d6:
1f:5d:2f:3b:c8:5b:0e:20:8e:2e:43:d6:9a:da:21:
a2:b4:d5:f1:97:88:e7:6c:bf:cb:47:11:34:b1:0f:
a1:91:1e:02:58:a9:ad:48:48:9d:dd:b2:b7:e7:d6:
3e:31:b5:32:3b:69:c2:d8:cf:b2:60:ed:9c:73:ce:
fa:67:bf:19:63:89:58:8b:8f:84:25:0b:81:f3:f2:
33:35:98:89:8d:27:c2:25:f1:8c:47:86:46:6f:6e:
61:23:b9:32:83:2c:36:16:f0:b9:e8:5c:db:89:26:
0c:17:a3:82:ca:3b:77:ba:c5:4d:eb:f0:46:45:4d:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:A3:01:64:6F:0E:78:2C:95:0A:5A:C6:7A:68:F4:F2:48:CA:3F
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333132363a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:3126::/48
Signature Algorithm: sha256WithRSAEncryption
ca:3c:05:44:e8:86:8b:86:ad:b3:02:61:96:37:59:4b:92:39:
2e:77:a0:59:40:24:5a:3f:cb:26:e3:3c:22:49:c0:a1:9b:fa:
26:7c:0c:44:7d:72:3d:e9:7e:af:06:a0:b1:69:4e:bf:da:45:
19:16:ad:3a:fb:0f:2e:f1:15:1b:bf:61:6c:35:45:ff:5e:a8:
20:ce:76:e7:45:19:5d:d8:e1:49:b0:35:25:66:a4:28:9b:3b:
17:a5:ae:d9:a3:16:b2:a1:68:84:c3:1c:05:5c:22:9d:20:19:
0b:01:8a:c5:d3:ee:4e:36:b0:4f:f1:6d:ab:b4:fb:09:60:b4:
ad:00:51:1d:9d:3d:92:41:02:1f:96:75:ed:da:9b:d0:86:45:
f3:90:a8:0d:56:77:d9:26:a8:ce:2f:b0:49:8f:d4:02:d6:96:
96:09:aa:41:cf:be:03:bc:22:aa:4b:2d:7a:85:1b:58:4d:d6:
00:e5:a1:f8:d6:79:53:ba:43:c2:5a:b2:64:bd:bb:71:bd:0f:
f8:14:e3:12:9e:c7:75:53:0b:77:37:3d:f1:fe:f9:2d:3d:87:
61:25:2e:05:97:2e:38:b4:b4:ee:a9:49:e2:d0:8d:a6:ef:82:
2b:63:b8:ed:43:61:cb:39:c5:a8:96:54:be:ea:e9:9f:5a:b9:
38:28:e6:0b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUbULYsckm0Md5w51O74ETDixygqAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky
NzI5REVFRTAeFw0yNDA2MzAwNDUyMjNaFw0yNTA2MjkwNDU3MjNaMDMxMTAvBgNV
BAMTKEFERDJBMzAxNjQ2RjBFNzgyQzk1MEE1QUM2N0E2OEY0RjI0OENBM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgACOpg4sbDIcWXUMUyhSK/ZPw
C7Dd1eRAZWn4IfuEmP7CsIEN1eKt9KNzOp9mNYR1VGMIwv8PWImiB4ubUQumJRvy
IjdVZPuhO9zFjxavJNF0JbmRp6F3hRN67DJHGQuMY4c5IaxjdTVZl6MesGStDhB4
oHL4erDafpccRTSMSu4oNyAi1h9dLzvIWw4gji5D1praIaK01fGXiOdsv8tHETSx
D6GRHgJYqa1ISJ3dsrfn1j4xtTI7acLYz7Jg7ZxzzvpnvxljiViLj4QlC4Hz8jM1
mImNJ8Il8YxHhkZvbmEjuTKDLDYW8LnoXNuJJgwXo4LKO3e6xU3r8EZFTS+zAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUrdKjAWRvDngslQpaxnpo9PJIyj8wHwYDVR0j
BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC
MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5
REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzMzMTMyMzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BJfAMSYwDQYJKoZIhvcNAQELBQADggEBAMo8BUTohouGrbMCYZY3WUuSOS53oFlA
JFo/yybjPCJJwKGb+iZ8DER9cj3pfq8GoLFpTr/aRRkWrTr7Dy7xFRu/YWw1Rf9e
qCDOdudFGV3Y4UmwNSVmpCibOxelrtmjFrKhaITDHAVcIp0gGQsBisXT7k42sE/x
bau0+wlgtK0AUR2dPZJBAh+Wde3am9CGRfOQqA1Wd9kmqM4vsEmP1ALWlpYJqkHP
vgO8IqpLLXqFG1hN1gDlofjWeVO6Q8JasmS9u3G9D/gU4xKex3VTC3c3PfH++S09
h2ElLgWXLji0tO6pSeLQjabvgitjuO1DYcs5xaiWVL7q6Z9auTgo5gs=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:59 2025 by rpki-client