Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a663030303a3a2f33362d3336203d3e20313338383134.roa
File: 323430343a393763303a663030303a3a2f33362d3336203d3e20313338383134.roa (raw, json)
Hash identifier: iolKVGrQ+xifkJbz01s3u0vEBgB69m7GzBW62uJhnEc=
Subject key identifier: 1A:41:A3:CD:EB:F4:EC:99:04:F5:65:59:49:1B:E6:D8:4E:CB:9E:71
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 0719A672623602CD1CD8F03C94665B72FF4B4B3E
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a663030303a3a2f33362d3336203d3e20313338383134.roa
Signing time: Thu 27 Jun 2024 14:00:01 +0000
ROA not before: Thu 27 Jun 2024 13:55:01 +0000
ROA not after: Thu 26 Jun 2025 14:00:01 +0000
asID: 138814
IP address blocks: 2404:97c0:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 16 Feb 2025 21:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:19:a6:72:62:36:02:cd:1c:d8:f0:3c:94:66:5b:72:ff:4b:4b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Jun 27 13:55:01 2024 GMT
Not After : Jun 26 14:00:01 2025 GMT
Subject: CN=1A41A3CDEBF4EC9904F56559491BE6D84ECB9E71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:e4:eb:40:de:85:f8:2c:3b:96:34:06:da:
c1:ea:1f:2f:36:5f:ca:6d:6b:d6:e0:cb:ac:22:16:
d9:ae:af:10:4d:70:8c:3d:02:f6:2a:e9:9d:3b:cc:
ea:6f:ae:24:74:e9:d7:10:76:b1:81:da:6e:fe:3d:
e7:d3:32:84:74:ca:1e:47:c1:23:11:a4:7c:f7:c8:
05:23:ea:7f:01:d3:1d:21:9a:9b:ea:fe:37:6c:9a:
46:f6:da:b2:0d:54:2f:cb:43:60:dc:ad:b7:1b:54:
ba:e3:b6:e2:b8:40:d4:ff:02:72:05:6a:79:9c:9f:
e5:77:ac:68:01:81:23:dd:81:4f:90:5c:98:40:1b:
f3:c1:be:ac:61:bd:55:11:e0:2f:c9:af:a7:e8:d4:
f4:28:a8:f1:de:47:9e:9a:04:f7:4d:e1:f2:8c:9a:
fb:36:48:38:7e:a7:56:29:39:e1:12:45:0b:eb:32:
d7:59:50:77:d4:b9:90:64:8e:92:3b:2f:2a:4a:32:
43:27:a3:1d:71:9c:3e:e6:73:da:b8:9f:2e:a8:3c:
89:f1:a9:cd:91:c5:69:ad:60:27:cf:2f:2f:2b:a5:
7b:2d:c3:90:6e:bf:03:70:28:bd:d1:a7:9f:e9:fb:
ef:62:7e:39:b1:2c:77:e6:b2:9c:4a:22:ea:4b:ea:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:41:A3:CD:EB:F4:EC:99:04:F5:65:59:49:1B:E6:D8:4E:CB:9E:71
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/323430343a393763303a663030303a3a2f33362d3336203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:f000::/36
Signature Algorithm: sha256WithRSAEncryption
86:fc:7e:e2:cb:12:6a:f5:41:c9:42:b0:8a:52:5f:b9:23:1e:
32:a0:03:bf:72:13:70:19:39:75:85:c8:87:89:aa:a8:15:ec:
10:d6:83:3d:86:2c:ae:02:be:84:73:a2:87:0a:68:bd:c6:c9:
0c:53:dc:69:df:3b:b2:22:c3:a2:f6:b4:1b:1a:f8:7f:37:be:
b3:11:60:02:22:c2:e6:55:91:ff:2c:88:12:f8:fe:42:80:db:
0f:11:a7:8f:5a:d2:1f:10:c4:ea:09:75:8b:66:c1:f7:51:12:
da:14:cb:7a:65:ef:9f:2f:62:33:29:bc:ec:1e:5f:b2:4c:60:
7c:5f:4c:14:e6:42:f2:86:3f:66:18:ff:f8:98:23:0b:3c:5b:
e0:6b:48:8b:49:fa:bd:83:30:ce:ee:5e:9c:a5:fb:0e:04:81:
27:8d:8f:4c:8f:2a:d2:1b:00:ef:86:d9:d6:3f:7e:63:2f:5b:
58:d7:0e:c6:d8:60:db:17:63:93:eb:af:9d:21:7f:76:6f:76:
3f:9a:49:e7:f4:f5:39:6d:0d:2b:b5:37:8d:a9:46:6b:3d:1b:
92:ec:42:27:0b:af:ac:7f:a4:ba:60:cf:c4:f8:fb:6f:bc:63:
df:15:d8:1b:ac:07:0b:ae:05:0c:93:a9:20:2b:23:9c:35:d7:
bd:c4:80:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:40 2025 by rpki-client