Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a613030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a613030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: jphw14bB/pb188gukW5qgi53jbJ5eQMtpz9y1YRQDbw=
Subject key identifier: 12:EF:4E:F9:AE:12:9A:24:C3:70:70:DA:28:AC:78:AC:0E:D1:B4:15
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 56B8B5812FC0A4486DB83B1FA926A0C0A8ED5440
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a613030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 15:00:03 +0000
ROA not before: Thu 27 Jun 2024 14:55:03 +0000
ROA not after: Thu 26 Jun 2025 15:00:03 +0000
asID: 138814
IP address blocks: 2404:97c0:a000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b8:b5:81:2f:c0:a4:48:6d:b8:3b:1f:a9:26:a0:c0:a8:ed:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 14:55:03 2024 GMT
Not After : Jun 26 15:00:03 2025 GMT
Subject: CN=12EF4EF9AE129A24C37070DA28AC78AC0ED1B415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:23:2e:6f:b7:0e:46:cb:9e:bf:e3:69:27:
55:e4:b5:ad:79:b2:74:07:7d:2a:f2:33:31:8f:14:
ab:5d:51:81:36:c2:a7:6f:34:d1:3a:68:d0:4b:a1:
8d:b5:8c:1c:24:12:27:ef:26:a0:86:fc:55:c4:3b:
f6:11:f7:99:56:9e:13:23:78:b6:42:2c:6d:5c:fa:
2f:8d:1b:c7:83:56:26:15:e8:3c:c4:fe:77:ae:93:
38:b5:e5:e8:22:02:8f:e8:8e:98:5c:39:82:5e:6b:
33:ab:1d:0c:e6:93:9e:de:e2:f0:2a:55:8e:9d:d5:
df:82:c6:8c:47:b1:e9:61:b1:7e:9a:48:6e:fa:f4:
29:74:93:b1:68:89:d4:3b:56:b3:95:7a:94:52:04:
1d:df:d7:9d:28:ba:de:42:09:98:c4:88:b6:c4:9a:
7f:14:13:7b:db:66:43:a5:2b:4e:4b:89:3a:95:5a:
57:14:94:ca:5e:a6:54:a7:e6:76:b2:21:62:44:49:
64:fb:a0:34:ac:a0:fd:3d:5f:2e:0a:89:ab:27:d6:
88:c5:2c:ba:2c:38:33:cd:96:50:3c:6d:0a:1b:b3:
0f:83:8f:c1:4c:4f:0c:37:77:12:9b:26:77:a9:f9:
77:a2:12:59:90:5f:ac:43:b3:4e:c7:da:09:6e:0e:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EF:4E:F9:AE:12:9A:24:C3:70:70:DA:28:AC:78:AC:0E:D1:B4:15
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a613030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:a000::/36
Signature Algorithm: sha256WithRSAEncryption
bd:97:79:cc:ea:28:ac:37:c9:db:69:c4:d8:ba:93:4c:23:21:
12:c7:27:14:db:b3:1b:eb:2b:26:06:6b:d9:64:f1:55:18:b3:
7f:61:22:b9:f9:64:14:cd:35:9f:cf:b9:4f:93:99:fa:e9:21:
0f:fb:a3:4a:62:29:1b:95:b3:53:eb:1d:e9:cc:db:09:c1:04:
fa:59:e7:0a:79:c2:34:52:23:11:39:92:bf:be:ed:4c:f8:98:
d2:7a:10:da:2a:ae:76:1e:ca:07:c3:ce:e2:54:07:b7:1b:63:
77:e5:f4:b0:f7:40:18:39:69:19:00:71:e9:0a:cb:44:18:df:
4b:f8:0b:9d:22:d7:d1:75:41:34:b3:7d:bf:32:d5:1d:75:97:
64:38:ae:c9:52:a4:b0:cd:99:80:cf:ad:1f:83:19:2d:2d:8b:
97:21:6e:56:db:77:7c:19:ab:3d:89:5f:4b:93:ef:ad:d8:da:
b7:59:25:b5:a0:15:d7:03:88:d2:83:fa:2a:89:49:5a:a4:f1:
dc:af:7d:4a:66:31:4a:0b:3b:7c:cf:c0:20:24:b8:83:4a:4f:
d0:9f:15:e7:ee:8e:5f:43:a7:43:00:fc:5b:cf:9a:60:ab:6d:
36:97:fc:ba:54:9a:66:55:44:f9:44:46:87:62:c3:65:81:48:
4b:07:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:23 2025 by rpki-client