Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a393763303a3a2f34382d3438203d3e20313338383134.roa
File: 323430343a393763303a393763303a3a2f34382d3438203d3e20313338383134.roa (raw, json)
Hash identifier: e+LS4P5mfRTDZhwXqqDzeX51tJC6cHHw+e7zh49HagA=
Subject key identifier: DC:A3:79:39:74:B4:35:C1:CA:99:9A:FA:99:8F:8A:EC:9A:FF:C5:E8
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 27B8F2253DCA7CFBF5B8314BBB91A2EE95DE1157
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a393763303a3a2f34382d3438203d3e20313338383134.roa
Signing time: Sun 30 Jun 2024 06:36:17 +0000
ROA not before: Sun 30 Jun 2024 06:31:17 +0000
ROA not after: Sun 29 Jun 2025 06:36:17 +0000
asID: 138814
IP address blocks: 2404:97c0:97c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b8:f2:25:3d:ca:7c:fb:f5:b8:31:4b:bb:91:a2:ee:95:de:11:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 30 06:31:17 2024 GMT
Not After : Jun 29 06:36:17 2025 GMT
Subject: CN=DCA3793974B435C1CA999AFA998F8AEC9AFFC5E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:fc:4d:2e:a2:07:11:f8:c0:84:c9:39:ba:
da:12:6e:10:b5:1e:99:08:f4:f6:84:4e:ba:a2:c2:
39:cb:59:d7:6a:41:8c:4e:f2:83:2d:15:20:80:13:
d7:df:c3:37:97:45:fc:b4:3e:5d:f4:c5:ed:56:56:
a1:97:0e:49:ee:a4:5b:35:44:f9:9c:bf:7c:1b:0c:
88:18:c7:2b:19:be:16:8f:96:c2:65:43:48:de:c2:
b1:bf:71:15:7b:91:02:02:bf:04:e7:d6:08:7d:9f:
88:1b:44:d6:05:59:7f:be:3e:59:7a:76:8e:e6:13:
e4:de:70:08:86:e4:0d:9a:cf:4c:76:46:af:32:5d:
f0:8e:00:fe:62:bd:ea:51:e7:52:09:d7:91:fd:41:
02:44:a3:cd:01:ed:e6:10:3b:af:2f:f3:41:67:45:
23:7c:f0:68:cb:86:fb:bb:69:43:90:c9:86:6b:92:
0b:04:ba:33:61:19:c8:d4:8b:98:42:ac:dc:67:40:
ec:de:07:92:c2:b5:6b:4c:f4:91:ec:05:eb:7a:bb:
61:17:14:c5:30:93:f7:61:d0:6d:bc:71:9f:9f:d8:
3d:71:f7:93:d5:7a:d9:e0:e0:7e:5c:6f:2f:4d:5b:
88:e6:56:5a:6d:cb:18:a6:ce:fb:bf:aa:43:c5:38:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:79:39:74:B4:35:C1:CA:99:9A:FA:99:8F:8A:EC:9A:FF:C5:E8
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a393763303a3a2f34382d3438203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:97c0::/48
Signature Algorithm: sha256WithRSAEncryption
89:56:fc:09:e4:87:ef:88:5b:11:45:f2:0b:f8:d4:24:cb:f0:
04:9e:ea:b8:95:2a:95:94:eb:98:e1:3d:c9:7f:8a:7b:f7:4f:
a1:ba:2c:c1:9e:36:b7:c7:23:e1:d5:32:e6:2f:b4:93:a4:ea:
65:c1:e5:15:46:00:a2:3d:f6:17:19:37:9c:5e:f9:80:eb:34:
a5:94:4d:87:95:44:30:32:e1:c8:d7:c1:50:05:69:e1:fb:50:
b9:39:c7:af:67:80:f0:34:96:d4:dc:54:80:b7:05:6f:be:38:
f7:8b:6d:78:a8:56:4b:b1:3d:e4:d3:4b:52:3a:60:be:74:30:
ac:7d:cc:c0:b7:ac:d8:bd:39:29:bd:36:ab:f6:fd:4b:4f:ca:
4a:24:94:50:8a:0a:e2:f7:f9:9d:96:1c:e6:49:90:9c:20:51:
72:4b:2f:5a:d3:dd:37:e1:39:31:c9:c1:4a:0f:a1:a1:91:26:
df:54:31:6a:af:55:86:8c:b5:fa:85:fc:ce:cb:e2:0f:34:97:
9a:ea:32:7e:3b:06:11:26:2a:e2:a4:6b:ff:c7:37:e4:f6:00:
99:9c:be:26:1c:d0:65:cc:6c:89:93:0e:dd:3b:7f:db:74:5c:
0c:59:ed:fa:32:1c:16:3a:5b:e1:97:6b:60:1c:b5:5b:07:9a:
75:51:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:14 2025 by rpki-client