Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333235343a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a333235343a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: O3ap5UHcob/TxA7t7IJF0xxQjNS6ZmXxXJ8fhMV1s0o=
Subject key identifier: C8:23:13:52:4B:69:6C:28:68:10:2A:DC:66:6E:EF:FF:62:16:FC:D4
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 29F62AFD508B42CB7C7BE2A1D0E6C35C3088CA76
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333235343a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:58:47 +0000
ROA not before: Sun 30 Jun 2024 04:53:47 +0000
ROA not after: Sun 29 Jun 2025 04:58:47 +0000
asID: 138814
IP address blocks: 2404:97c0:3254::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f6:2a:fd:50:8b:42:cb:7c:7b:e2:a1:d0:e6:c3:5c:30:88:ca:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:53:47 2024 GMT
Not After : Jun 29 04:58:47 2025 GMT
Subject: CN=C82313524B696C2868102ADC666EEFFF6216FCD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:a7:bf:87:5d:46:27:d9:e1:bf:25:2d:a9:
20:00:9d:24:5f:a6:4e:52:79:6e:f9:1f:64:63:db:
ba:3e:17:3f:a3:60:38:3e:fc:51:e7:09:1f:7c:9b:
de:98:33:16:ae:ea:a0:f1:98:24:f8:c5:b7:be:bc:
00:57:cf:7f:98:6a:fe:fd:a4:96:29:da:9a:5f:1b:
76:e2:86:83:0c:92:18:09:c1:0d:5c:06:80:c8:b1:
72:9a:e4:a0:1e:3b:48:43:42:e0:77:a9:ea:e5:c8:
2a:ad:3b:a9:2b:d9:e9:0c:99:c2:fe:c3:a0:6c:d3:
70:f0:74:16:66:22:86:cb:7f:ac:f7:28:4b:80:22:
2b:97:04:c7:f4:a6:49:00:17:e8:5c:7f:c1:48:4a:
e7:e5:61:74:04:bb:4d:87:ab:11:38:f6:57:e0:e9:
32:d9:fe:3a:a1:76:30:49:9f:76:3b:77:d1:6f:17:
65:09:fa:1d:a6:8f:69:f3:ff:27:c3:4f:05:14:21:
9f:6e:57:da:ff:b5:4f:64:dc:92:2e:8a:e3:5f:f7:
13:55:0c:67:1f:fb:a9:d5:23:2c:98:8c:2e:08:c3:
c9:f8:65:3a:e3:c0:33:d1:ec:62:23:d7:b2:5d:40:
b6:f1:0c:f9:83:50:f2:4f:49:fc:77:14:84:09:84:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:23:13:52:4B:69:6C:28:68:10:2A:DC:66:6E:EF:FF:62:16:FC:D4
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a333235343a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:3254::/48
Signature Algorithm: sha256WithRSAEncryption
c1:5c:44:17:3a:2e:a1:8a:64:ea:23:54:fd:d3:b9:d1:b8:f0:
1c:22:6a:2f:0c:33:16:47:97:6e:f5:69:5a:c4:57:2a:1c:d5:
ab:f0:93:d2:a8:ca:58:59:70:90:1e:6c:74:4f:b3:0d:48:d1:
c6:e7:b5:15:c4:14:17:08:0b:e3:e7:c0:e5:8b:ba:21:5e:11:
17:b0:70:f1:54:6a:34:cd:f5:97:04:eb:24:95:60:22:bc:ba:
19:bd:c4:c2:0e:91:64:4c:3f:6e:93:21:9d:3b:56:d7:4e:c1:
b3:01:2c:6f:7f:30:a1:6b:22:c0:a3:15:32:1b:9b:b1:e6:c5:
fa:99:27:dd:2b:59:c8:eb:38:1b:f2:3f:1d:69:0b:f9:8d:c9:
75:57:8d:2c:3c:f6:16:af:ac:a6:7e:ea:20:d5:00:66:10:1d:
48:a8:a5:38:fd:e9:ae:e4:80:10:30:12:08:8a:3e:70:ca:93:
0b:22:b9:31:4c:71:3e:d3:9a:a4:b7:39:4e:9f:01:09:e9:e7:
75:aa:95:a4:00:c2:35:2d:5c:e5:22:41:40:ef:7c:6f:88:b5:
b7:2a:cb:42:6f:f1:14:fd:7e:2b:96:60:b7:b3:45:7b:1c:5a:
3c:ee:da:fa:f7:1e:19:db:b1:17:f4:b5:15:94:53:db:ad:f8:
2d:cd:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:35 2025 by rpki-client