Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a643030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a643030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: oPs1UTRaNJrXhioCeyq2aD/tAkZt/O3hd4MCqL8qhjA=
Subject key identifier: 83:06:8D:CA:06:BB:05:42:4F:7B:DD:CC:EE:24:99:48:2E:50:8B:A7
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 504112928523A049BD7659D0ECC80ED52345C9C5
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a643030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 15:00:03 +0000
ROA not before: Thu 27 Jun 2024 14:55:03 +0000
ROA not after: Thu 26 Jun 2025 15:00:03 +0000
asID: 138814
IP address blocks: 2404:97c0:d000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:41:12:92:85:23:a0:49:bd:76:59:d0:ec:c8:0e:d5:23:45:c9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 14:55:03 2024 GMT
Not After : Jun 26 15:00:03 2025 GMT
Subject: CN=83068DCA06BB05424F7BDDCCEE2499482E508BA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:fe:fc:bd:3a:05:1a:71:8b:25:86:24:d0:
60:aa:0e:2f:1a:52:cf:f7:6b:1e:88:43:ce:23:4f:
36:e6:45:16:f7:16:23:2a:f7:06:4d:39:5a:95:3d:
c5:36:67:12:ce:8a:29:25:bf:16:95:34:dd:49:a2:
30:67:f4:ad:81:a5:9a:4f:91:e9:9c:db:7f:83:dc:
62:f5:d0:19:46:dd:60:dc:41:84:b0:95:0c:53:d5:
51:52:97:cd:9b:4f:2b:83:7f:20:40:d9:fa:62:b6:
ac:95:21:f8:d3:19:c9:52:1b:31:01:61:3b:c8:45:
90:4f:62:5d:4c:86:7b:f4:08:a5:c0:7d:5a:b8:93:
83:b8:27:96:0e:67:a2:b5:21:b3:19:a4:8d:bc:85:
a6:7f:8e:bd:c7:fa:c2:e8:8b:99:68:14:55:29:e4:
e9:8c:a6:99:fa:f0:82:e8:af:48:fd:95:10:bf:02:
ef:ff:e3:8f:37:ca:b7:db:9a:8f:c0:b7:a8:dd:ec:
22:59:04:d3:5b:b7:cd:45:ba:ab:08:cc:77:00:91:
af:0b:21:8b:39:d8:da:04:de:b4:f0:4b:d2:76:da:
a1:14:4b:21:ef:ea:e9:f9:cc:28:50:82:e2:31:d1:
aa:00:48:89:02:88:41:d5:1e:e7:c4:6c:de:5b:96:
89:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:8D:CA:06:BB:05:42:4F:7B:DD:CC:EE:24:99:48:2E:50:8B:A7
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a643030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:d000::/36
Signature Algorithm: sha256WithRSAEncryption
a9:32:0c:7e:c2:c9:d0:e0:ed:6f:15:5f:f6:aa:89:6c:0d:a9:
7f:78:f5:bd:21:e9:a6:66:92:88:c2:73:0f:8c:c3:fd:bc:ad:
36:0f:3e:b7:5b:bb:d2:db:a7:bf:8e:02:72:68:10:b2:f6:6e:
38:f7:7b:5f:72:38:8e:55:30:12:c3:fa:2d:92:1b:65:50:8b:
cd:f8:b3:13:d6:8c:dd:88:72:46:91:90:ea:a9:4f:5f:fe:f8:
4a:38:2b:b8:53:77:d1:30:5e:61:b4:42:d7:35:d1:ff:87:a2:
7c:04:3d:4e:9f:c2:c7:1b:b8:50:cf:cf:d1:81:ad:1b:4b:6e:
a6:92:62:03:85:44:eb:40:87:13:9f:64:4f:fd:56:86:9a:b5:
62:ef:69:36:77:54:26:b9:ae:a9:9d:ac:23:fb:59:59:de:66:
67:92:d8:66:78:8e:21:db:4e:39:7b:6d:df:fa:c8:05:c3:9d:
61:27:36:c6:ed:48:1c:76:f4:2d:d9:a8:24:c7:99:6c:c1:44:
04:ee:c3:16:e2:8d:80:8e:40:66:e4:71:8d:ae:cc:97:84:2a:
ad:af:5b:6c:a7:52:ce:ff:76:8c:24:89:08:bd:6d:46:20:77:
ea:4d:63:f1:b4:91:44:71:68:af:35:82:ae:86:21:d5:43:1a:
8d:05:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:07 2025 by rpki-client