Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333135303a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a333135303a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: LQ1UNU8j1CYg8oo6/SawdBFzP2TVjqi52hn6cKT7fKo=
Subject key identifier: 89:31:9C:5C:B6:AF:6D:69:72:2F:F1:78:C8:66:8F:61:B4:71:6A:1B
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 0686A117665E4366B6152611087C6C235A80CF1F
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333135303a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:58:06 +0000
ROA not before: Sun 30 Jun 2024 04:53:06 +0000
ROA not after: Sun 29 Jun 2025 04:58:06 +0000
asID: 138814
IP address blocks: 2404:97c0:3150::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:86:a1:17:66:5e:43:66:b6:15:26:11:08:7c:6c:23:5a:80:cf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:53:06 2024 GMT
Not After : Jun 29 04:58:06 2025 GMT
Subject: CN=89319C5CB6AF6D69722FF178C8668F61B4716A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:cc:cc:0e:f4:82:1b:14:58:c9:e8:34:25:
f6:e7:7b:cc:37:6e:99:fa:fc:be:9e:26:fc:9f:db:
49:af:3a:58:4f:b3:bc:76:ea:91:dd:bd:ac:c2:66:
58:63:50:aa:2c:8d:ca:ea:92:0f:0d:cf:3b:88:72:
d2:c5:d0:3b:40:c5:08:6f:37:eb:0a:16:52:d0:a7:
91:c3:89:03:3b:e6:4f:aa:f1:85:8a:25:e7:8a:20:
76:45:3c:8c:00:cd:31:43:ea:22:a5:35:92:6b:10:
5e:1b:29:83:01:aa:5f:e5:66:56:2c:29:28:57:49:
a9:e7:f0:e4:59:a1:75:90:90:0b:55:00:e1:34:70:
fc:8c:a0:43:69:ba:81:1a:c2:75:08:83:14:42:92:
6a:6f:6f:8e:73:da:c1:0e:52:ae:7c:fa:1f:53:1a:
fe:ef:7b:34:27:39:41:67:fe:77:92:c5:72:0a:36:
63:83:1b:07:d4:d9:1f:c4:da:7d:3d:ab:51:c4:2c:
7c:24:08:df:4c:3a:14:94:41:0d:75:36:c9:ce:0e:
96:f4:bd:81:a5:50:31:73:6b:b6:65:ca:dd:9c:8d:
b9:b2:c5:7e:b3:23:24:db:ec:09:cc:ca:85:21:2b:
fe:4c:03:c7:6d:4d:32:07:20:b7:c2:58:4f:dc:a4:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:31:9C:5C:B6:AF:6D:69:72:2F:F1:78:C8:66:8F:61:B4:71:6A:1B
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333135303a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:3150::/48
Signature Algorithm: sha256WithRSAEncryption
ca:24:39:d1:09:ad:d6:2a:37:23:cd:66:5d:7c:c1:c1:cb:c4:
e2:4b:7f:55:cf:ac:ee:c4:ec:a7:f5:af:52:8d:ce:a4:4a:c1:
10:8a:3e:89:37:f9:91:4e:7e:b4:25:f5:86:69:f9:dd:57:71:
65:52:07:6c:6f:e3:48:9d:98:d6:10:67:c5:a5:6f:b0:fa:a3:
b4:bd:a6:6c:67:3f:ed:5b:58:ba:42:e6:f7:35:b4:de:56:49:
1d:cb:fd:37:69:b2:b4:cd:b9:ad:f2:6c:28:9b:23:18:3d:36:
94:6f:26:26:95:be:16:9e:cf:99:2b:b8:0e:fc:65:a0:fb:d1:
7e:ce:17:93:77:15:ca:07:63:2c:58:fb:57:d3:aa:b0:2c:2f:
f8:04:4e:e8:6d:de:e5:4d:f7:74:71:42:92:cc:39:9a:e6:e9:
0a:fa:d4:be:eb:f4:32:b8:a8:47:b6:5d:fb:05:b2:9a:83:9f:
db:b6:e8:6e:92:ec:4b:40:ec:b0:ee:d9:83:f7:67:73:c8:c7:
26:01:17:0a:3e:0b:d1:9d:aa:9a:a3:d1:a1:dc:11:63:60:e2:
42:01:2f:c3:4a:86:4f:4e:7a:ef:b5:4b:ca:c0:b8:d3:b6:01:
09:96:c9:35:07:a8:7a:90:36:b8:fc:d1:58:57:6b:4d:28:a3:
f5:a3:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:21 2025 by rpki-client