Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33332d3333203d3e20313430343233.roa
File: 323430363a323063303a3a2f33332d3333203d3e20313430343233.roa (raw, json)
Hash identifier: 8txYmxX3RnXI+v5dFqmHt1CmWm10U1hEKSVC8QUpZRk=
Subject key identifier: EB:38:AA:B5:EE:FF:85:50:E8:47:B0:40:B5:8E:74:C0:CA:1D:D8:C4
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 085B297A501E159BDA0EDCE6721B88CBC2DD59DA
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33332d3333203d3e20313430343233.roa
Signing time: Thu 08 Sep 2022 04:26:45 +0000
ROA not before: Thu 08 Sep 2022 04:21:45 +0000
ROA not after: Thu 07 Sep 2023 04:26:45 +0000
asID: 140423
IP address blocks: 2406:20c0::/33 maxlen: 33
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5b:29:7a:50:1e:15:9b:da:0e:dc:e6:72:1b:88:cb:c2:dd:59:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Sep 8 04:21:45 2022 GMT
Not After : Sep 7 04:26:45 2023 GMT
Subject: CN=EB38AAB5EEFF8550E847B040B58E74C0CA1DD8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:70:bf:d8:73:39:c5:10:73:be:34:97:cd:
21:7a:43:b8:09:7c:7b:e8:1f:5b:61:61:9a:67:54:
ab:f9:ad:c2:c2:a7:79:18:f5:34:6b:a5:3b:0f:cf:
b7:9e:a2:ed:d9:e2:f3:cd:7d:9e:db:88:1e:17:98:
e1:1e:48:c5:4d:16:79:3a:aa:e9:58:0a:2c:d3:c3:
88:33:28:5d:93:99:c1:9e:b5:ca:e9:3e:19:12:8a:
f1:cc:63:ef:28:d2:a4:79:f2:05:e4:d8:ff:7d:bd:
3d:fa:69:2b:dd:93:40:bf:b0:1f:71:8e:9a:70:1d:
81:d0:e2:7c:1d:ce:b9:f0:28:cd:07:34:ee:ca:a2:
8e:db:9a:0e:11:93:b7:6d:47:29:fd:08:e0:f6:e5:
00:17:3f:a1:cb:ae:00:ac:1b:ae:a6:d0:e1:70:86:
56:81:2f:18:04:85:70:be:74:24:44:96:ac:df:12:
ee:ca:c7:ef:df:87:12:b5:6b:7d:48:ec:b9:05:4c:
75:16:d1:4c:d9:92:4f:89:13:32:73:d2:7c:d2:09:
d3:8a:d6:b6:f2:f8:39:2e:81:62:0e:fe:7d:9d:3f:
a1:e2:02:77:5c:11:ce:1c:98:7f:d5:d1:20:53:e6:
38:b2:24:eb:99:df:c2:67:4d:7c:1d:da:27:89:c7:
65:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:38:AA:B5:EE:FF:85:50:E8:47:B0:40:B5:8E:74:C0:CA:1D:D8:C4
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33332d3333203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0::/33
Signature Algorithm: sha256WithRSAEncryption
1a:0d:ab:70:64:55:79:33:fe:07:25:82:2d:86:3f:fc:13:2d:
02:fd:2f:37:9b:a0:fd:a1:94:a5:bc:cd:48:1c:f2:22:d4:15:
b0:55:8f:f0:b9:69:e0:76:36:96:c8:d6:3a:07:25:21:96:80:
aa:90:30:97:fb:bf:d7:9d:d1:59:fe:f6:24:d4:13:1a:77:f1:
c1:4f:3a:24:11:53:dc:e5:33:05:2e:cf:24:96:bf:41:02:d6:
9e:87:0e:be:c0:0b:15:b9:ba:76:f2:92:34:74:4b:4a:d2:17:
71:bc:53:46:1e:aa:2c:58:8d:8a:39:2b:21:2c:2e:6a:12:23:
51:86:ce:0b:dc:2f:63:45:af:cd:f7:4a:76:03:21:21:21:c2:
a8:ba:85:fa:78:68:0a:c6:0a:6b:26:03:0d:90:d7:43:cc:11:
fe:a6:99:60:f1:15:77:b0:88:12:9d:d2:73:90:8f:52:9d:53:
7c:ff:3e:ec:31:85:54:e5:5a:a0:f2:a1:b0:ed:cf:ba:14:15:
68:32:e7:c1:6e:41:e5:be:7a:48:75:83:ef:f9:07:d5:f2:a7:
57:81:fb:b8:22:7b:4b:6c:35:02:84:13:41:fc:b9:14:03:38:
a4:bb:75:9d:bb:2d:36:30:d5:5f:3a:2e:a5:98:37:d1:c4:bd:
a0:ef:b2:9a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCFspelAeFZvaDtzmchuIy8LdWdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz
NTJDQjg3NDAeFw0yMjA5MDgwNDIxNDVaFw0yMzA5MDcwNDI2NDVaMDMxMTAvBgNV
BAMTKEVCMzhBQUI1RUVGRjg1NTBFODQ3QjA0MEI1OEU3NEMwQ0ExREQ4QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyI3C/2HM5xRBzvjSXzSF6Q7gJ
fHvoH1thYZpnVKv5rcLCp3kY9TRrpTsPz7eeou3Z4vPNfZ7biB4XmOEeSMVNFnk6
qulYCizTw4gzKF2TmcGetcrpPhkSivHMY+8o0qR58gXk2P99vT36aSvdk0C/sB9x
jppwHYHQ4nwdzrnwKM0HNO7Koo7bmg4Rk7dtRyn9COD25QAXP6HLrgCsG66m0OFw
hlaBLxgEhXC+dCRElqzfEu7Kx+/fhxK1a31I7LkFTHUW0UzZkk+JEzJz0nzSCdOK
1rby+DkugWIO/n2dP6HiAndcEc4cmH/V0SBT5jiyJOuZ38JnTXwd2ieJx2VJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6ziqte7/hVDoR7BAtY50wMod2MQwHwYDVR0j
BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF
MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD
Qjg3NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhM2EyZjMzMzMy
ZDMzMzMyMDNkM2UyMDMxMzQzMDM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGByQGIMAAMA0GCSqG
SIb3DQEBCwUAA4IBAQAaDatwZFV5M/4HJYIthj/8Ey0C/S83m6D9oZSlvM1IHPIi
1BWwVY/wuWngdjaWyNY6ByUhloCqkDCX+7/XndFZ/vYk1BMad/HBTzokEVPc5TMF
Ls8klr9BAtaehw6+wAsVubp28pI0dEtK0hdxvFNGHqosWI2KOSshLC5qEiNRhs4L
3C9jRa/N90p2AyEhIcKouoX6eGgKxgprJgMNkNdDzBH+pplg8RV3sIgSndJzkI9S
nVN8/z7sMYVU5Vqg8qGw7c+6FBVoMufBbkHlvnpIdYPv+QfV8qdXgfu4IntLbDUC
hBNB/LkUAziku3Wduy02MNVfOi6lmDfRxL2g77Ka
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org