Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a633030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a633030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: xJUuh7QilOXxSiwusa20VVB/e7yLoiwzBl1zYYo2wog=
Subject key identifier: CC:B8:72:A2:D1:CF:2D:F3:3A:9F:C1:72:3F:0C:F1:51:29:CD:16:01
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 7F9791B9F24CEBCB213C41F4B8CA99AD99386793
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a633030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 14:00:02 +0000
ROA not before: Thu 27 Jun 2024 13:55:02 +0000
ROA not after: Thu 26 Jun 2025 14:00:02 +0000
asID: 138814
IP address blocks: 2404:97c0:c000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 19 Feb 2025 02:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:97:91:b9:f2:4c:eb:cb:21:3c:41:f4:b8:ca:99:ad:99:38:67:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 13:55:02 2024 GMT
Not After : Jun 26 14:00:02 2025 GMT
Subject: CN=CCB872A2D1CF2DF33A9FC1723F0CF15129CD1601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:68:4e:0e:e9:48:81:55:67:5a:7a:75:1b:
ad:9c:ba:fe:f0:48:bb:d2:44:05:50:1b:02:e1:c1:
14:3c:91:d9:a5:b8:31:b5:c1:d1:c1:f1:7d:cb:00:
30:10:05:95:e4:ee:a0:50:7b:32:2b:63:0a:5a:ac:
b4:f3:f1:6a:eb:5c:44:e0:48:c6:8e:a7:13:a6:cd:
eb:5b:08:6b:1c:a0:f0:a2:7c:1b:6e:cc:eb:d8:3a:
18:d9:b0:2b:3c:1f:21:a7:b6:23:a2:09:12:fe:fe:
b9:3c:dc:88:d0:33:54:de:fd:4c:43:8f:3c:16:1c:
64:34:34:94:de:39:5e:5e:3e:01:85:3b:51:43:d3:
c7:2b:fb:22:e1:7c:4a:82:1b:f2:0f:7e:33:78:8d:
38:32:c3:0c:f2:c9:9d:e1:a7:87:e9:b5:a9:be:dd:
96:88:52:1f:9e:e8:0a:ea:d1:8e:db:cb:36:28:29:
c5:a0:de:ce:b7:1c:a5:ff:29:4c:a5:2f:94:b7:fb:
9d:82:74:c0:52:c9:49:57:8d:16:cd:75:6b:0f:91:
4b:ce:60:9d:1a:88:5b:b6:4e:97:54:1e:99:7e:65:
45:7b:de:1b:98:4a:bc:c5:2a:7e:86:0a:76:65:38:
e4:6b:e1:b4:de:9c:cb:b2:be:da:19:2e:8a:da:96:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B8:72:A2:D1:CF:2D:F3:3A:9F:C1:72:3F:0C:F1:51:29:CD:16:01
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a633030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:c000::/36
Signature Algorithm: sha256WithRSAEncryption
1b:07:a4:e0:8d:58:37:ef:00:d4:5f:db:d7:72:5f:45:a0:a5:
ea:c0:0f:dd:26:4b:af:fe:30:49:4d:8b:98:6b:af:0f:bf:27:
bb:c6:53:6f:06:35:dc:9f:9b:48:b3:62:76:77:96:8f:ea:7d:
d0:43:b4:2b:e1:d2:a3:9e:73:a6:36:a1:ee:82:bc:f6:1d:46:
bf:3e:7f:17:05:09:84:65:e4:c4:00:32:b2:b3:8f:29:7b:46:
19:8a:29:ee:0c:cd:b0:8d:84:6d:71:03:e7:cf:18:eb:07:aa:
12:2b:56:fb:19:cd:09:af:b2:25:7e:72:85:65:87:d0:94:d8:
30:58:37:91:a8:f6:9a:f4:82:06:65:15:01:ae:34:2b:0b:bb:
91:b6:25:29:0a:94:bd:3a:ca:db:f5:1b:52:a1:f2:32:6d:8e:
86:92:66:9a:e3:4a:c9:64:a4:93:62:f6:f7:43:98:ab:4e:bb:
82:0e:a8:2d:7b:be:fa:b6:0c:03:81:c6:3f:c0:43:00:2e:37:
da:25:d4:c5:3c:19:06:30:32:f9:0e:8f:c4:ba:1f:3a:f5:05:
c2:74:cc:f5:ea:9d:ae:b1:00:0a:72:2b:e9:de:9e:e0:6f:95:
d2:da:1c:c1:71:f9:26:4c:81:d8:96:31:5c:a7:a3:7d:89:c8:
6f:2c:11:16
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUf5eRufJM68shPEH0uMqZrZk4Z5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzky
NzI5REVFRTAeFw0yNDA2MjcxMzU1MDJaFw0yNTA2MjYxNDAwMDJaMDMxMTAvBgNV
BAMTKENDQjg3MkEyRDFDRjJERjMzQTlGQzE3MjNGMENGMTUxMjlDRDE2MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZmhODulIgVVnWnp1G62cuv7w
SLvSRAVQGwLhwRQ8kdmluDG1wdHB8X3LADAQBZXk7qBQezIrYwparLTz8WrrXETg
SMaOpxOmzetbCGscoPCifBtuzOvYOhjZsCs8HyGntiOiCRL+/rk83IjQM1Te/UxD
jzwWHGQ0NJTeOV5ePgGFO1FD08cr+yLhfEqCG/IPfjN4jTgywwzyyZ3hp4fptam+
3ZaIUh+e6Arq0Y7byzYoKcWg3s63HKX/KUylL5S3+52CdMBSyUlXjRbNdWsPkUvO
YJ0aiFu2TpdUHpl+ZUV73huYSrzFKn6GCnZlOORr4bTenMuyvtoZLoralhDJAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUzLhyotHPLfM6n8FyPwzxUSnNFgEwHwYDVR0j
BBgwFoAURzdIuOs5vulvZGLDtTzqOScp3u4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMC80NzM3NDhCOEVC
MzlCRUU5NkY2NDYyQzNCNTNDRUEzOTI3MjlERUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczNzQ4QjhFQjM5QkVFOTZGNjQ2MkMzQjUzQ0VBMzkyNzI5
REVFRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMzLTMwYzgtNDk1Ny04
MjkxLWEwYzFmOWIxODM5ZS8wLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjMzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzgzODMxMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
BJfAwDANBgkqhkiG9w0BAQsFAAOCAQEAGwek4I1YN+8A1F/b13JfRaCl6sAP3SZL
r/4wSU2LmGuvD78nu8ZTbwY13J+bSLNidneWj+p90EO0K+HSo55zpjah7oK89h1G
vz5/FwUJhGXkxAAysrOPKXtGGYop7gzNsI2EbXED588Y6weqEitW+xnNCa+yJX5y
hWWH0JTYMFg3kaj2mvSCBmUVAa40Kwu7kbYlKQqUvTrK2/UbUqHyMm2OhpJmmuNK
yWSkk2L290OYq067gg6oLXu++rYMA4HGP8BDAC432iXUxTwZBjAy+Q6PxLofOvUF
wnTM9eqdrrEACnIr6d6e4G+V0tocwXH5JkyB2JYxXKejfYnIbywRFg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:55 2025 by rpki-client