Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a623030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a623030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: nTTijzqV3MiRZIE9fMTE6qgGx6zXJfVCZ2FoZqFLca0=
Subject key identifier: 86:FC:9A:7C:3E:D3:C3:9F:2A:D5:2B:2D:31:BF:D7:C9:DB:BD:B3:68
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 458B5C60663925256B91C3D6D895D0052CDD1654
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a623030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 14:00:01 +0000
ROA not before: Thu 27 Jun 2024 13:55:01 +0000
ROA not after: Thu 26 Jun 2025 14:00:01 +0000
asID: 138814
IP address blocks: 2404:97c0:b000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8b:5c:60:66:39:25:25:6b:91:c3:d6:d8:95:d0:05:2c:dd:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 13:55:01 2024 GMT
Not After : Jun 26 14:00:01 2025 GMT
Subject: CN=86FC9A7C3ED3C39F2AD52B2D31BFD7C9DBBDB368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:d7:3d:67:ef:af:d4:15:65:47:d8:9b:cf:
89:76:cf:cb:8b:d3:07:6d:de:12:5b:8d:f4:e3:b5:
2c:62:07:7a:a9:b6:75:aa:c5:14:5e:be:f9:99:e0:
28:3c:16:dc:d7:02:1d:48:dd:4c:dc:64:6a:24:a6:
56:b6:2d:c0:ea:03:87:40:ca:f5:18:73:bd:74:54:
d2:da:ed:d1:45:18:12:f5:35:5e:c1:80:38:4d:b3:
f2:b1:82:fd:6e:f1:43:97:c0:c0:3d:a1:97:74:22:
29:7b:15:74:07:a1:22:26:ed:5d:63:6b:d8:34:c7:
a2:36:7d:f0:05:b3:30:7d:0e:72:cf:ca:b2:81:6e:
ef:96:7b:a6:88:d4:d7:4c:a5:d9:cc:fb:f4:da:ca:
47:28:ac:2a:ad:06:25:69:b4:01:b0:aa:f5:5a:07:
eb:87:30:43:08:d9:b3:b7:1c:f3:5a:c7:9d:32:6c:
31:1d:c2:e8:fa:54:60:c2:53:ec:60:17:31:8d:d3:
e0:66:5a:44:ae:9c:21:af:68:96:44:5f:5a:e0:34:
0a:84:fc:ca:e4:dc:6f:81:95:0f:f6:ae:e3:2e:00:
42:68:70:2e:67:b6:a8:8f:94:c4:03:62:ce:cc:2a:
13:ad:cf:a2:e8:b4:73:88:08:25:a0:60:58:e7:ee:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FC:9A:7C:3E:D3:C3:9F:2A:D5:2B:2D:31:BF:D7:C9:DB:BD:B3:68
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a623030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:b000::/36
Signature Algorithm: sha256WithRSAEncryption
92:bf:a4:7f:d4:ba:36:78:a5:da:9e:18:70:4b:10:11:12:5b:
04:04:65:90:58:b4:e2:64:55:b0:26:27:4c:b1:5d:c3:b6:2e:
01:c3:8f:48:51:c2:a7:f1:df:44:3f:8e:b2:ea:fd:1c:75:69:
dc:7c:56:36:ef:ee:5e:48:cc:20:f0:e3:62:9c:55:df:33:0d:
c6:ab:33:a8:88:aa:51:40:f1:55:48:8e:db:a6:da:52:dc:d5:
79:4c:0b:ff:14:cd:ee:43:9d:57:fb:de:21:64:6e:43:90:74:
c7:4a:bb:cd:44:a8:a6:73:a5:da:b3:1e:57:c3:a7:88:6a:dc:
07:f7:00:34:03:27:bd:13:5e:2f:f2:c5:ed:2e:3f:47:e8:0f:
49:28:4e:83:aa:11:b1:89:78:70:78:09:c4:05:92:79:11:2f:
8f:cb:9c:b0:16:d9:d1:b7:e0:26:c5:aa:ff:8d:d5:e1:a8:84:
84:c7:aa:55:a4:8a:46:6c:56:c9:8b:ad:35:84:2d:c8:84:a1:
9f:1c:b6:4f:10:85:03:d7:d1:d4:13:70:bd:6b:6e:43:00:9f:
5b:71:a4:85:9a:a4:20:ef:31:73:44:b4:c7:29:e4:5c:f7:95:
da:67:81:7e:d6:00:ac:d6:a8:82:a6:c6:65:3e:a0:6b:7f:d0:
24:28:ed:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:07 2025 by rpki-client