Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a383030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a383030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: +u/NGctD6MFidbaugsjRQZ1vY8FlcKGP+hxCI60OJbk=
Subject key identifier: 66:BE:A0:12:ED:E4:70:B5:8D:46:5D:7D:71:77:13:3B:3E:35:67:31
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 372AB046019AFAB4E5E2BA1E6A2636AB839B528E
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a383030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 15:00:02 +0000
ROA not before: Thu 27 Jun 2024 14:55:02 +0000
ROA not after: Thu 26 Jun 2025 15:00:02 +0000
asID: 138814
IP address blocks: 2404:97c0:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:2a:b0:46:01:9a:fa:b4:e5:e2:ba:1e:6a:26:36:ab:83:9b:52:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 14:55:02 2024 GMT
Not After : Jun 26 15:00:02 2025 GMT
Subject: CN=66BEA012EDE470B58D465D7D7177133B3E356731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:0b:b7:35:d5:11:94:ca:48:9e:ce:25:d1:
8a:44:77:8b:8e:fe:b6:fa:4f:8c:e0:7c:3f:db:e6:
b0:10:00:5b:f3:d3:92:ba:69:9c:81:0a:3a:d8:da:
57:a5:87:f9:bc:1f:da:cb:7d:22:34:0c:8f:63:b4:
b1:ac:77:39:55:c1:c9:2c:36:76:a9:09:f2:24:38:
14:b7:d5:e3:f2:6d:bb:14:dd:fe:36:40:0b:26:ef:
5f:9e:f4:ec:d0:72:78:04:ab:c4:35:df:ac:c0:4b:
6b:ca:24:a9:b7:bd:a6:07:0a:39:67:ad:49:be:8e:
72:25:b1:d8:0d:ff:3a:63:a9:83:99:72:77:74:b4:
40:1e:ea:16:dc:dc:c5:0c:c4:1e:5f:8d:15:71:33:
1f:7e:ef:37:b9:f7:e1:76:48:17:64:9c:c1:50:b3:
76:27:52:a6:bd:89:1d:9f:a7:44:40:b9:db:07:2b:
ce:11:23:4a:ca:e4:d3:7d:57:d9:b3:55:fd:19:9e:
e1:12:b0:73:ca:a2:5a:0b:da:87:1f:e3:bf:f9:b4:
05:2d:34:4d:60:20:c1:bc:4d:a7:39:91:7c:b4:5e:
10:33:80:c3:6f:80:27:7a:7b:dc:be:6a:9c:90:42:
86:7f:44:0b:25:52:eb:5c:58:2b:45:37:03:cd:37:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:A0:12:ED:E4:70:B5:8D:46:5D:7D:71:77:13:3B:3E:35:67:31
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a383030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:8000::/36
Signature Algorithm: sha256WithRSAEncryption
57:c3:5a:1d:ff:4a:de:6f:de:88:35:e4:72:52:72:60:28:ba:
53:e5:b3:a6:1e:af:a5:a8:86:69:6f:4f:ab:35:b7:eb:99:4f:
19:2e:4d:28:0c:f2:44:ce:59:6e:fe:9a:44:34:fa:7b:36:5f:
c2:f0:da:7b:5c:2b:1c:5e:59:7a:ab:1c:1c:ab:a6:c8:b0:7d:
7e:20:5e:d5:a2:ae:f2:ab:bb:41:78:de:d0:1a:db:b2:3e:d7:
e1:d7:ee:3f:57:56:17:92:1c:40:d8:e8:e2:9a:97:43:e4:42:
ff:72:9a:3b:fe:dc:a9:cd:8c:3a:f0:5e:3b:19:4c:31:c2:bc:
a9:c9:2a:f1:f0:6b:94:84:3d:ca:d6:8e:46:02:11:77:df:b6:
2c:78:e9:a5:8f:e4:74:2f:15:fe:8c:8d:7f:86:0e:e8:0e:87:
09:a5:bf:5e:16:e1:85:b8:f1:4b:c5:34:7c:2b:bc:92:35:b1:
67:87:08:01:39:41:ce:bd:f5:cc:e8:e9:87:58:67:9b:b8:19:
53:59:55:a5:9e:64:1a:40:62:49:be:09:56:2d:89:fe:36:09:
81:61:75:7c:79:24:cc:ae:23:d9:c9:41:a6:28:08:ad:8f:99:
70:fd:f1:ad:8a:ac:54:d2:b8:98:03:9d:02:64:eb:6e:9d:69:
10:b8:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:35 2025 by rpki-client