Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a393030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a393030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: BgA+I40rtIIqnRKwXR3LnltSocv9VWjA3/RY9Rwh+9Q=
Subject key identifier: DE:21:A2:3A:92:5F:0C:96:FF:29:CA:95:A9:DD:20:CC:13:85:13:BC
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 03F79A97E35FCD7D289E02078DC6B31BECB474AB
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a393030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 15:00:02 +0000
ROA not before: Thu 27 Jun 2024 14:55:02 +0000
ROA not after: Thu 26 Jun 2025 15:00:02 +0000
asID: 138814
IP address blocks: 2404:97c0:9000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f7:9a:97:e3:5f:cd:7d:28:9e:02:07:8d:c6:b3:1b:ec:b4:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 14:55:02 2024 GMT
Not After : Jun 26 15:00:02 2025 GMT
Subject: CN=DE21A23A925F0C96FF29CA95A9DD20CC138513BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:27:b5:11:a4:d4:7e:ee:21:1b:00:94:e1:
53:b4:07:58:0a:84:2e:33:e2:43:f2:1f:c7:ab:22:
17:fa:7e:69:70:1b:53:93:93:9f:8d:24:e2:3c:cb:
b7:f3:02:3b:f4:9b:76:e7:bb:55:bd:b6:ca:96:09:
9c:db:41:f7:c4:85:3d:ff:8a:43:fe:6d:94:bd:95:
94:1f:a7:87:05:ed:f7:3f:43:95:92:33:ab:7d:95:
e1:fc:e7:6f:b0:4e:31:c5:0c:b0:86:b1:ed:e7:45:
d5:45:e3:ea:18:5a:27:2a:4a:01:85:5d:15:5b:a7:
52:63:c6:d7:c6:ec:5d:58:69:f7:6a:59:35:b0:e6:
87:95:f0:a9:a4:58:55:4b:c2:df:c9:e7:9e:8a:d7:
2e:dc:d0:e1:5d:ec:4c:ed:a3:aa:50:b4:43:3a:f8:
19:8d:97:a1:fb:18:42:67:bc:a1:28:6c:4d:7d:ea:
fc:03:ec:c7:7f:e1:af:f2:32:47:df:12:51:b3:aa:
cd:14:a2:bf:78:4c:a5:87:9d:4d:3f:81:d8:62:b7:
70:1f:ae:7f:80:ce:7f:6b:70:db:ee:ba:f9:26:dc:
f4:64:2f:29:e0:6e:bf:59:4d:85:50:ae:d5:04:0e:
17:2d:9c:48:19:aa:62:0c:f4:b4:8b:2d:87:f1:7f:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:21:A2:3A:92:5F:0C:96:FF:29:CA:95:A9:DD:20:CC:13:85:13:BC
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a393030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
4a:6a:31:9c:89:41:33:d8:49:e0:08:b2:7c:1c:52:4b:5a:f2:
96:e7:bd:71:62:04:14:ea:63:00:9c:dd:6c:1d:93:cc:2d:c2:
5b:2f:83:8a:9c:ed:29:64:9c:b0:72:9e:a5:b2:a4:d2:2a:c1:
35:c7:4b:41:00:b7:81:ef:b6:6f:ab:6d:73:38:7a:73:d1:6d:
eb:d5:f4:bc:5c:2e:31:ca:74:1e:5c:f9:9f:63:b6:06:24:c5:
d4:57:f3:bb:bf:c8:9a:d1:27:15:30:b1:2c:97:bd:a4:94:18:
05:1a:a0:1a:75:f0:45:fb:05:11:ea:24:51:44:1f:9b:65:fb:
75:b7:08:2d:81:dd:c6:ac:9a:df:cc:07:30:ef:2c:48:2c:64:
98:7a:aa:ae:b1:0d:9b:44:d8:da:ad:0e:33:ea:63:51:3f:8c:
26:ae:c9:5c:68:1b:ae:89:15:33:2f:94:21:e5:95:e4:47:9b:
12:2a:e4:b3:c0:21:77:4c:3a:67:41:64:cf:f4:80:39:d4:c5:
4f:74:8e:fc:c6:0e:17:79:f7:e4:89:c8:fa:05:4d:d7:05:ee:
18:93:a5:53:8e:ef:ac:fd:14:18:94:30:d2:c1:80:bf:30:97:
26:00:fc:47:d2:bb:fc:1f:40:c5:69:c3:6f:74:7c:62:69:ba:
03:1b:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:04 2025 by rpki-client