Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333134363a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a333134363a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: aJSMbsDQ8HPf/oTFdJehGhQitgtoxB3teDOhmdU7BOQ=
Subject key identifier: 53:99:D1:A5:C0:9E:ED:AB:29:07:56:3F:1B:60:11:5D:EA:97:2C:E7
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 203FDCDE3559773EB1EBB32944A4CBA9196A479F
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333134363a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:57:52 +0000
ROA not before: Sun 30 Jun 2024 04:52:52 +0000
ROA not after: Sun 29 Jun 2025 04:57:52 +0000
asID: 138814
IP address blocks: 2404:97c0:3146::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3f:dc:de:35:59:77:3e:b1:eb:b3:29:44:a4:cb:a9:19:6a:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:52:52 2024 GMT
Not After : Jun 29 04:57:52 2025 GMT
Subject: CN=5399D1A5C09EEDAB2907563F1B60115DEA972CE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:6f:3b:6c:b4:e0:ab:e9:24:36:ab:82:2f:
b7:14:a7:df:8e:e4:b1:ae:dd:9b:73:b1:22:a9:b5:
04:dd:9d:ae:94:be:20:99:44:f0:52:ae:88:ad:97:
82:b5:30:2a:8e:b2:f5:9b:40:e8:f9:69:72:69:91:
cb:0f:ff:17:40:ee:fd:38:1d:ed:50:cb:c5:da:c8:
ce:c1:91:92:1b:5d:e3:e9:57:e2:c6:28:2f:3f:6c:
59:83:61:e6:63:f2:48:84:09:83:fd:47:3d:7b:2e:
05:9b:f8:7b:07:01:7c:34:04:a8:78:a7:7a:b6:84:
ba:7f:e5:63:32:e7:07:4d:de:0a:f5:2b:59:dc:f8:
8d:2e:a7:8c:c1:e5:fc:ac:fc:63:21:28:d3:af:94:
a9:e6:d4:6f:f8:e4:a4:ce:9b:8d:76:3e:51:32:d5:
c1:ab:8e:60:c9:ff:b1:1e:60:9c:c2:eb:8e:0a:47:
1c:9c:12:48:a2:24:c4:f4:b4:1c:88:35:11:2e:11:
29:da:83:00:9e:d1:fd:86:2e:81:c3:c0:a6:2c:b8:
d0:7f:80:9e:5f:52:32:ca:8b:5e:9d:e3:2a:c8:8b:
fa:da:80:78:06:78:37:93:ad:52:0f:0e:b8:5c:5f:
4e:f1:8b:d0:0b:d3:92:2e:34:f3:45:e8:1b:fd:d3:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:D1:A5:C0:9E:ED:AB:29:07:56:3F:1B:60:11:5D:EA:97:2C:E7
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333134363a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:3146::/48
Signature Algorithm: sha256WithRSAEncryption
2a:96:2b:f4:a1:e4:4d:e5:8f:8e:8c:49:ce:a6:7c:59:19:bf:
da:de:f0:3b:17:75:c8:cd:24:b6:4a:cb:53:50:69:e6:55:71:
10:96:cb:1d:6c:eb:44:27:76:dc:c3:db:8e:09:b5:11:26:55:
dd:28:4d:34:24:d3:49:cb:00:d2:6e:97:f1:37:76:1b:29:19:
7b:41:f2:05:37:eb:2a:a6:f4:2d:0f:8c:f8:70:cb:a2:6c:a0:
97:43:1f:4b:a3:dd:33:d2:52:ff:f3:9b:88:aa:0c:63:2b:3e:
b6:2c:45:09:74:f0:62:cc:bb:0d:09:33:91:93:1a:76:27:22:
77:fd:82:db:83:a4:9b:45:53:93:ef:41:3a:85:78:df:9b:85:
6f:f9:97:04:1d:f8:1c:2d:b3:29:fa:35:aa:90:bd:04:77:a1:
ce:ab:89:f7:73:a6:d1:b2:d0:9e:bb:9b:b7:b5:7f:f8:38:79:
73:13:fc:61:bf:81:f8:98:f2:74:fb:77:a4:71:ad:c8:c0:ad:
d3:86:3a:90:2e:16:c8:6b:bb:78:74:1d:b4:50:26:79:95:db:
7f:7a:e1:b4:80:71:9a:d2:a6:97:a9:ae:08:a3:2e:30:35:a8:
90:94:d9:c9:09:4a:39:dd:78:0d:ae:71:b9:15:e1:20:2b:11:
31:12:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:00 2025 by rpki-client