Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a653030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a653030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: CZurzO4ayfIIBRc6Gjj9DOQswZuNoHLJ3+Oj3GMo+jM=
Subject key identifier: 82:CC:E8:13:E6:9D:68:BF:07:2A:7E:6B:9A:E8:A0:B6:98:BD:28:FC
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 45CAA3B4D4AE0022F08B71F9714A6D3A3017B0B5
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a653030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 14:00:02 +0000
ROA not before: Thu 27 Jun 2024 13:55:02 +0000
ROA not after: Thu 26 Jun 2025 14:00:02 +0000
asID: 138814
IP address blocks: 2404:97c0:e000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ca:a3:b4:d4:ae:00:22:f0:8b:71:f9:71:4a:6d:3a:30:17:b0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 13:55:02 2024 GMT
Not After : Jun 26 14:00:02 2025 GMT
Subject: CN=82CCE813E69D68BF072A7E6B9AE8A0B698BD28FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:b7:27:4d:0f:52:9c:10:8e:88:f0:57:87:
7d:b3:f6:a1:45:1e:b9:8d:54:16:9a:11:d9:29:3a:
d6:51:76:6b:98:59:2c:31:5d:6f:cf:79:9d:37:0f:
0a:55:c0:1e:18:12:e0:f8:1b:9b:64:5c:f8:6d:30:
b4:4c:a9:c8:13:94:bd:7d:76:cb:67:61:32:13:87:
26:5b:b2:3d:6e:23:9e:5d:00:40:b1:e0:31:e2:6e:
00:8a:03:b5:22:b6:68:a3:73:d8:6f:79:30:b7:4d:
2e:e8:6c:ce:46:f8:37:47:37:3d:e6:90:ca:73:3f:
bc:51:0b:72:72:4b:8f:73:58:32:1d:7a:f1:5c:88:
e1:ac:f1:1e:3d:aa:06:10:fc:ac:35:0a:42:99:d1:
df:a5:80:95:4c:b9:86:81:f7:31:b1:db:9b:95:9b:
6f:03:37:2b:3d:ae:29:e4:4b:a8:30:61:c3:64:53:
62:f9:64:ac:d4:d3:a2:30:17:79:eb:4e:fd:90:ac:
2e:a4:eb:6f:7e:20:3c:c0:de:05:de:67:7d:25:26:
43:20:1a:53:6d:8f:87:14:11:2f:40:79:ba:9d:f6:
6f:2f:86:a4:01:b2:bf:be:72:0e:5a:89:2b:5a:85:
f6:fa:ec:69:9e:04:73:c6:5d:9d:6c:0f:3f:45:ab:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:E8:13:E6:9D:68:BF:07:2A:7E:6B:9A:E8:A0:B6:98:BD:28:FC
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a653030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
b8:e1:7f:43:a3:27:77:72:e6:97:d7:11:d9:46:29:34:16:62:
f8:fa:a1:d7:b2:68:cf:2b:6e:03:50:71:8f:76:3d:ba:1a:9d:
a2:60:2a:65:6e:7f:da:33:73:f3:70:6f:d9:26:31:9d:39:64:
9d:89:2c:1f:18:fa:df:5d:7c:ec:1a:a4:dd:8a:c4:e9:b2:ba:
b5:2d:6d:2b:06:bc:80:63:e8:8e:27:4b:10:cc:80:67:ef:ec:
64:05:3b:bb:be:43:0e:6c:c6:15:72:ba:ce:5a:9e:24:58:5c:
d5:58:3e:62:7e:ce:00:fa:13:24:91:31:26:ae:51:fb:6c:ce:
5f:36:1e:af:2d:bd:e8:e4:ef:e5:1b:8a:f9:d0:6a:02:65:25:
ca:72:cc:85:2c:42:72:d7:07:9d:ea:4d:b8:24:5d:fc:fa:e9:
7f:da:e2:34:be:73:df:22:ce:92:56:4a:ad:86:37:7f:87:e5:
2c:d1:51:f5:f2:9c:89:46:48:ab:8e:b6:fe:c4:29:d1:6e:ca:
85:32:21:bf:66:4e:33:60:36:77:c4:10:ab:f3:c8:74:d8:de:
f5:aa:86:76:27:14:0a:c4:db:da:3b:63:c9:82:35:06:42:37:
6f:3b:70:13:76:22:1b:9b:92:13:24:25:6a:96:f6:d8:12:4c:
d6:fe:8f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:40 2025 by rpki-client