Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3333343a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a3333343a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: LuEKJyBwC6zhwdW2hwthsh1VfYAHqJNQ7ZA1LgAUiA4=
Subject key identifier: A9:E9:FB:56:36:52:1D:99:8C:C7:EB:06:3E:F6:AF:16:37:9A:03:B8
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 2F8D49D605AB8582D05B0B9A0E9B18E4C16F9DC4
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3333343a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 04:49:28 +0000
ROA not before: Sun 30 Jun 2024 04:44:28 +0000
ROA not after: Sun 29 Jun 2025 04:49:28 +0000
asID: 138814
IP address blocks: 2404:97c0:334::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:8d:49:d6:05:ab:85:82:d0:5b:0b:9a:0e:9b:18:e4:c1:6f:9d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 04:44:28 2024 GMT
Not After : Jun 29 04:49:28 2025 GMT
Subject: CN=A9E9FB5636521D998CC7EB063EF6AF16379A03B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:6d:2c:4d:bf:c6:71:60:9d:6b:cd:d0:64:
eb:71:df:7f:e2:a0:5a:99:8d:11:eb:a5:03:6a:e3:
50:09:7e:91:06:3a:55:25:c5:8e:aa:f5:ae:fb:07:
dd:7a:73:68:55:e0:61:5a:e3:b7:f7:83:a1:a0:6e:
8b:cd:ce:c4:79:4d:fd:c4:e1:b8:50:e6:e5:86:dc:
ab:4c:94:a1:1c:9b:cd:c1:18:32:09:2c:a2:ca:68:
a5:5d:3c:8a:5a:d8:7a:01:67:b4:5c:d8:a8:65:6b:
1e:26:96:bd:fc:17:b2:e8:a6:56:32:8b:09:9d:96:
47:93:bd:ac:8f:17:3c:74:24:52:98:81:81:8c:7b:
bc:a7:83:42:79:e0:48:1b:7b:90:ed:b8:13:90:33:
3f:d0:f4:15:dc:9a:b4:57:0e:3a:4b:41:77:a8:c0:
ef:5a:fb:2c:cb:66:21:92:57:fa:97:ed:dc:b5:7a:
5d:85:e5:9e:9b:b9:3a:df:23:86:e3:fc:6c:28:dd:
db:1e:44:eb:04:5d:24:68:5e:46:7a:f5:48:96:ff:
1c:84:39:38:7f:9b:66:3a:64:89:70:c0:64:01:df:
20:a6:93:9f:2b:3e:d5:ec:85:39:3b:39:c3:04:c5:
43:8f:b9:95:01:e5:7f:8c:8c:80:d7:04:ed:2e:cb:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:FB:56:36:52:1D:99:8C:C7:EB:06:3E:F6:AF:16:37:9A:03:B8
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a3333343a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:334::/48
Signature Algorithm: sha256WithRSAEncryption
49:21:5f:84:5d:0f:df:3c:1b:21:3a:21:8c:c7:33:6d:05:f8:
43:54:ac:13:4b:28:9b:be:fb:ff:fa:c1:3a:d4:1f:07:56:7e:
25:f4:d9:59:58:ef:8c:86:86:ec:d3:ad:0e:5b:a6:9a:51:be:
8a:f0:82:b3:03:d2:c9:c8:38:66:00:ab:31:b9:1e:79:11:04:
6f:66:78:28:55:42:e4:ff:3d:1f:b7:ab:69:71:a3:5c:4d:ef:
e3:38:4f:30:d8:1f:44:29:d6:09:27:aa:93:ff:ee:5a:af:e6:
fd:82:97:23:89:b6:8e:d1:a6:e1:a1:0a:a5:1b:9b:f3:ff:02:
a1:74:a4:4a:87:58:6b:34:d6:87:d8:35:85:1c:fd:35:84:54:
9d:52:f5:67:28:bd:df:38:39:49:07:d6:ba:3b:ee:9a:6a:8e:
94:68:ef:1d:d2:8e:be:93:cf:35:3d:5f:a1:5f:ef:a1:7b:bd:
27:fb:34:07:22:a9:b9:54:08:0d:db:2a:75:bb:a0:34:6f:b8:
b7:b9:f3:60:5f:9c:ae:1a:a5:82:b2:ac:fb:82:48:7c:de:02:
44:5c:aa:77:0f:91:fa:af:91:01:f0:39:e6:55:67:96:eb:cf:
ab:47:db:7b:3b:b8:a4:2f:6c:e3:f1:7f:d3:5e:b8:02:fe:e1:
c5:61:e1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:02 2025 by rpki-client