Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a363030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a363030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: y03dKT0XkuzunTHti8vjR7BPTte8wBsIng8SSaZoNQg=
Subject key identifier: 7A:A7:0C:E3:F6:0C:5E:6B:C8:0B:A3:17:23:B5:FD:09:99:A0:C7:B1
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 472B94E9C1431E179C12910E479F427C6E9D9989
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a363030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 15:00:01 +0000
ROA not before: Thu 27 Jun 2024 14:55:01 +0000
ROA not after: Thu 26 Jun 2025 15:00:01 +0000
asID: 138814
IP address blocks: 2404:97c0:6000::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 18 Apr 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2b:94:e9:c1:43:1e:17:9c:12:91:0e:47:9f:42:7c:6e:9d:99:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 14:55:01 2024 GMT
Not After : Jun 26 15:00:01 2025 GMT
Subject: CN=7AA70CE3F60C5E6BC80BA31723B5FD0999A0C7B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:35:49:8f:46:ca:d5:e0:2f:f0:c2:7c:b9:c8:
b5:ea:49:4d:24:66:05:e7:9d:4a:6f:f0:fd:8f:e0:
da:e8:2b:3e:e5:d1:ee:97:03:b2:ca:06:ed:f2:36:
5e:c0:d7:23:9c:20:7f:da:b9:09:09:8c:18:63:7c:
70:db:25:ce:47:9c:f0:98:56:0c:ab:03:37:6c:46:
52:25:6a:84:39:7a:37:e7:ab:ca:17:07:46:72:da:
82:62:83:bc:8b:52:ea:ed:49:9c:7a:43:a8:73:e5:
f9:e8:63:e0:62:bd:e4:40:ea:ad:56:bf:52:68:a2:
08:42:21:d3:6a:ec:a6:b4:b5:2b:6e:1e:05:87:9d:
d6:05:cc:4e:f5:f7:59:ce:18:58:3c:0c:0c:8b:f8:
18:d3:74:7d:ee:9d:99:3a:e7:36:96:dd:d2:00:7b:
c7:77:f0:7d:84:e2:64:b5:0b:89:85:66:c7:3c:a3:
aa:ce:63:52:cd:67:1d:30:8d:be:52:a4:32:33:5d:
c7:1f:3d:03:b5:f5:62:96:c6:a7:73:59:c5:76:7c:
b7:52:44:cb:eb:98:c1:3a:47:94:6a:40:99:10:ec:
e6:fd:9b:45:af:ee:2a:de:47:1a:30:8e:73:87:ea:
6d:ae:fc:bb:e8:25:56:f6:80:59:e8:34:31:84:cd:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A7:0C:E3:F6:0C:5E:6B:C8:0B:A3:17:23:B5:FD:09:99:A0:C7:B1
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a363030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
0f:5c:7e:f1:f5:e5:a0:ae:8e:9d:39:44:79:ad:2c:66:25:e8:
91:9f:0e:26:e0:f4:24:0d:e7:82:54:c6:4e:44:3b:da:b6:b8:
c5:56:1f:a2:cb:d3:93:b8:cd:b9:41:87:0f:5c:dc:39:20:89:
c7:60:73:a2:64:9d:ab:74:21:b8:4c:c4:a2:11:92:5d:12:eb:
56:e2:ab:c4:32:a3:15:22:16:af:80:58:a8:45:23:7f:59:63:
8b:af:b0:4d:68:8a:db:5d:4c:73:1b:4e:3b:bb:aa:38:ec:4b:
3c:52:25:93:03:95:b3:85:9b:20:4f:7d:eb:c6:47:27:ae:ad:
f4:11:b5:d7:42:48:5a:ab:dd:d8:a4:82:00:3e:0a:5e:93:78:
b7:a6:27:1e:6f:f2:85:9a:11:4e:e2:a6:7b:e6:d4:eb:0d:5b:
03:90:aa:9f:b3:da:ec:d5:1c:60:fc:4c:7c:8a:10:f2:5c:9e:
2b:46:e5:91:c7:dd:9f:e8:43:25:26:54:c3:7b:d8:07:24:bf:
37:05:6e:1e:bf:77:d2:ca:fe:d5:65:f0:8d:6b:32:95:29:c6:
c7:66:a5:26:d8:73:f5:55:33:2e:31:2c:e0:86:23:09:08:de:
84:f7:10:5f:dc:27:a1:f6:34:67:cf:09:ec:ba:f0:46:eb:a8:
14:21:d5:62
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIURyuU6cFDHhecEpEOR59CfG6dmYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky
NzI5REVFRTAeFw0yNDA2MjcxNDU1MDFaFw0yNTA2MjYxNTAwMDFaMDMxMTAvBgNV
BAMTKDdBQTcwQ0UzRjYwQzVFNkJDODBCQTMxNzIzQjVGRDA5OTlBMEM3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuNUmPRsrV4C/wwny5yLXqSU0k
ZgXnnUpv8P2P4NroKz7l0e6XA7LKBu3yNl7A1yOcIH/auQkJjBhjfHDbJc5HnPCY
VgyrAzdsRlIlaoQ5ejfnq8oXB0Zy2oJig7yLUurtSZx6Q6hz5fnoY+BiveRA6q1W
v1JooghCIdNq7Ka0tStuHgWHndYFzE7191nOGFg8DAyL+BjTdH3unZk65zaW3dIA
e8d38H2E4mS1C4mFZsc8o6rOY1LNZx0wjb5SpDIzXccfPQO19WKWxqdzWcV2fLdS
RMvrmME6R5RqQJkQ7Ob9m0Wv7ireRxowjnOH6m2u/LvoJVb2gFnoNDGEzainAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUeqcM4/YMXmvIC6MXI7X9CZmgx7EwHwYDVR0j
BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC
MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5
REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzYzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzgzODMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
BJfAYDANBgkqhkiG9w0BAQsFAAOCAQEAD1x+8fXloK6OnTlEea0sZiXokZ8OJuD0
JA3nglTGTkQ72ra4xVYfosvTk7jNuUGHD1zcOSCJx2BzomSdq3QhuEzEohGSXRLr
VuKrxDKjFSIWr4BYqEUjf1lji6+wTWiK211McxtOO7uqOOxLPFIlkwOVs4WbIE99
68ZHJ66t9BG110JIWqvd2KSCAD4KXpN4t6YnHm/yhZoRTuKme+bU6w1bA5Cqn7Pa
7NUcYPxMfIoQ8lyeK0blkcfdn+hDJSZUw3vYByS/NwVuHr930sr+1WXwjWsylSnG
x2alJthz9VUzLjEs4IYjCQjehPcQX9wnofY0Z88J7LrwRuuoFCHVYg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:30:21 2025 by rpki-client