Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333137363a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a333137363a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: 9L9BRNPvdifC4xkXdAtxr7xmvez7UrzsnHBpTwjcMa0=
Subject key identifier: C0:8A:96:EA:31:75:65:59:5F:EC:FF:8B:C8:F9:A5:BA:5A:BE:0D:FC
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 7C7D7EE80C4D0E147AEA85476F584774321C1CCA
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333137363a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:58:20 +0000
ROA not before: Sun 30 Jun 2024 04:53:20 +0000
ROA not after: Sun 29 Jun 2025 04:58:20 +0000
asID: 138814
IP address blocks: 2404:97c0:3176::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:7d:7e:e8:0c:4d:0e:14:7a:ea:85:47:6f:58:47:74:32:1c:1c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:53:20 2024 GMT
Not After : Jun 29 04:58:20 2025 GMT
Subject: CN=C08A96EA317565595FECFF8BC8F9A5BA5ABE0DFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:b4:5a:4f:b1:ed:fa:d9:a6:19:8d:6c:ba:
33:3c:87:ff:62:40:39:91:48:50:0b:0e:af:21:be:
69:f0:65:22:4d:1c:75:ad:f4:d8:be:80:4d:04:3e:
bf:5b:30:06:a1:a5:a5:fc:d7:6a:f7:a4:e2:fe:6b:
bd:10:3e:09:3c:a2:48:d9:3a:75:5c:f4:45:d2:2f:
aa:b4:8f:c7:30:06:44:a8:45:2b:88:cb:2e:d8:e0:
95:a9:27:01:12:eb:26:9e:7a:34:b3:cd:bb:cb:1b:
67:be:9d:d8:65:10:c7:b3:ef:50:e2:20:af:70:a0:
d9:7e:ab:9d:2f:c3:ad:c5:72:2d:a6:8f:fe:57:6f:
ab:33:63:a3:97:07:f1:40:5f:3b:5e:30:27:8a:07:
49:ff:ce:ba:0d:bc:ef:a2:dc:b5:ea:7b:b8:44:20:
f2:c5:ce:c9:ee:46:4d:fc:f2:b9:e0:f3:c1:af:61:
1f:42:d4:bc:17:87:5d:01:1c:7f:c3:4c:80:2c:44:
3f:36:c6:11:ed:60:88:c1:9e:b8:69:d8:4a:8e:fb:
75:20:88:58:ac:dc:45:ed:31:1c:7c:5f:7d:ae:43:
53:d5:9c:c1:d1:f5:cb:b7:cd:47:b9:68:ba:7f:16:
09:8d:c3:75:5f:e8:b6:78:7b:ce:5b:92:39:d1:d6:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:96:EA:31:75:65:59:5F:EC:FF:8B:C8:F9:A5:BA:5A:BE:0D:FC
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333137363a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:3176::/48
Signature Algorithm: sha256WithRSAEncryption
54:64:cf:1d:33:22:d5:9d:83:1a:61:70:dd:dc:f0:fd:69:7b:
5e:9d:93:96:70:6e:da:12:ae:1e:51:6d:01:de:52:d0:71:e6:
79:c2:4d:25:0f:6c:40:69:e5:30:c2:54:a1:90:ee:6d:87:8f:
6c:f0:5a:01:70:f2:b7:c3:9a:d9:7c:a8:76:6e:de:32:42:24:
2c:1d:dc:89:d6:4e:ef:82:4b:54:84:1e:4c:4d:c3:05:59:40:
ce:c9:fe:72:54:11:ba:d9:55:3e:7d:42:c8:40:4b:3a:8e:c3:
ad:49:ef:fe:a1:42:4f:86:4e:9f:76:e1:3b:3c:5c:c4:96:33:
02:46:1f:fd:8f:a8:f3:3e:e6:43:ec:cf:0d:76:14:a4:f7:ee:
6d:07:15:03:4c:44:5c:58:03:b9:4b:c6:4f:cb:01:be:b1:54:
4d:83:d6:15:19:e2:75:0a:a7:c5:b1:3c:56:83:1e:16:cf:4b:
00:d0:53:c0:a6:27:e0:6d:55:c4:fb:78:9c:42:81:88:85:2f:
ee:8f:7f:78:a2:e5:f0:22:6c:93:9a:cf:35:aa:0f:e5:30:ad:
0c:25:a8:e9:ef:f0:5f:07:d3:54:77:74:21:31:b1:a2:0f:40:
8a:67:94:ca:ba:b2:ce:f1:0a:22:82:9f:4e:71:94:af:68:fa:
18:aa:93:d6
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfH1+6AxNDhR66oVHb1hHdDIcHMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky
NzI5REVFRTAeFw0yNDA2MzAwNDUzMjBaFw0yNTA2MjkwNDU4MjBaMDMxMTAvBgNV
BAMTKEMwOEE5NkVBMzE3NTY1NTk1RkVDRkY4QkM4RjlBNUJBNUFCRTBERkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaE7RaT7Ht+tmmGY1sujM8h/9i
QDmRSFALDq8hvmnwZSJNHHWt9Ni+gE0EPr9bMAahpaX812r3pOL+a70QPgk8okjZ
OnVc9EXSL6q0j8cwBkSoRSuIyy7Y4JWpJwES6yaeejSzzbvLG2e+ndhlEMez71Di
IK9woNl+q50vw63Fci2mj/5Xb6szY6OXB/FAXzteMCeKB0n/zroNvO+i3LXqe7hE
IPLFzsnuRk388rng88GvYR9C1LwXh10BHH/DTIAsRD82xhHtYIjBnrhp2EqO+3Ug
iFis3EXtMRx8X32uQ1PVnMHR9cu3zUe5aLp/FgmNw3Vf6LZ4e85bkjnR1jJ7AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUwIqW6jF1ZVlf7P+LyPmlulq+DfwwHwYDVR0j
BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC
MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5
REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzMzMTM3MzYz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzgzODMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BJfAMXYwDQYJKoZIhvcNAQELBQADggEBAFRkzx0zItWdgxphcN3c8P1pe16dk5Zw
btoSrh5RbQHeUtBx5nnCTSUPbEBp5TDCVKGQ7m2Hj2zwWgFw8rfDmtl8qHZu3jJC
JCwd3InWTu+CS1SEHkxNwwVZQM7J/nJUEbrZVT59QshASzqOw61J7/6hQk+GTp92
4Ts8XMSWMwJGH/2PqPM+5kPszw12FKT37m0HFQNMRFxYA7lLxk/LAb6xVE2D1hUZ
4nUKp8WxPFaDHhbPSwDQU8CmJ+BtVcT7eJxCgYiFL+6Pf3ii5fAibJOazzWqD+Uw
rQwlqOnv8F8H01R3dCExsaIPQIpnlMq6ss7xCiKCn05xlK9o+hiqk9Y=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:39 2025 by rpki-client