Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/323430343a63383a3a2f33322d3332203d3e203130323137.roa
File: 323430343a63383a3a2f33322d3332203d3e203130323137.roa (raw, json)
Hash identifier: x+YCSZLL3mOGl3vmBflr1LWDyrsUKhr7yM47SS6+1Ig=
Subject key identifier: B9:C7:90:2B:05:38:96:25:E6:AD:89:DD:E8:0D:43:C1:CB:D7:7C:BF
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 2408CE55E2661B2E89D64CBA6176C8BE9A3EA4E3
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/323430343a63383a3a2f33322d3332203d3e203130323137.roa
Signing time: Thu 31 Aug 2023 06:00:07 +0000
ROA not before: Thu 31 Aug 2023 05:55:07 +0000
ROA not after: Thu 29 Aug 2024 06:00:07 +0000
asID: 10217
IP address blocks: 2404:c8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:08:ce:55:e2:66:1b:2e:89:d6:4c:ba:61:76:c8:be:9a:3e:a4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Aug 31 05:55:07 2023 GMT
Not After : Aug 29 06:00:07 2024 GMT
Subject: CN=B9C7902B05389625E6AD89DDE80D43C1CBD77CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:6a:3e:58:6f:19:bb:17:01:14:2d:a8:eb:
c2:23:ce:48:04:c3:e4:71:63:30:91:22:bc:03:a7:
0d:cb:96:9c:a3:68:66:06:09:2f:df:a4:06:fa:2a:
82:b1:15:13:fa:de:47:b2:e8:f8:62:f1:3d:0c:9b:
ea:ab:bc:cf:c2:1d:83:cf:74:78:1e:b8:dd:cd:d2:
ae:bc:e5:2f:04:1e:c7:b8:45:c1:d9:91:11:4a:74:
d8:8f:b5:86:28:af:06:7d:b6:20:96:5f:79:e6:6c:
36:8a:30:97:8b:71:e0:97:46:92:e4:81:a7:76:ba:
9c:a5:b8:58:bf:cd:52:8e:ee:d4:a5:43:27:8f:0e:
9c:4c:bf:2b:60:21:51:71:65:d8:4d:fb:fd:53:ff:
b2:54:6c:a9:14:ea:85:90:14:60:5c:6c:d3:54:6d:
92:41:87:22:9e:93:70:e0:dd:94:4e:90:10:10:a9:
bb:62:49:61:9e:4c:5e:76:2e:72:9d:60:7d:e6:cf:
55:7e:0d:0e:36:fb:d1:bb:a5:07:c0:6b:9a:40:65:
ec:fa:b9:2d:a3:89:1a:67:f2:c2:ca:d9:b6:0e:d9:
30:36:ff:dd:c3:94:ac:3e:b8:52:78:5c:58:f6:07:
6f:98:21:99:12:ce:cd:19:02:2d:c4:1b:6a:19:4b:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C7:90:2B:05:38:96:25:E6:AD:89:DD:E8:0D:43:C1:CB:D7:7C:BF
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/323430343a63383a3a2f33322d3332203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:c8::/32
Signature Algorithm: sha256WithRSAEncryption
12:fd:18:73:ce:e3:c9:49:74:eb:f2:d7:9a:a0:df:64:07:4d:
29:a6:65:fd:ad:a3:4b:ab:9d:8b:8c:5b:07:3b:76:3f:e8:ec:
38:f9:aa:6c:47:65:95:83:86:b2:58:1e:b8:ea:86:73:77:a0:
fb:8b:af:17:58:83:55:5f:f7:10:43:88:e8:3d:5f:bc:16:b0:
21:4a:8f:a2:e5:14:c1:a1:5b:31:9c:c8:46:4d:d3:83:c8:96:
6e:5e:fa:ef:85:7a:bf:c9:78:84:f5:54:40:a0:44:ba:dd:3d:
15:5f:9b:07:f4:b5:fd:b9:29:6e:51:05:6c:9d:4d:bd:8a:0c:
ce:9f:80:9e:cd:72:a1:47:0d:05:26:ea:34:9b:17:b1:71:f1:
76:b4:f0:be:6b:d4:f4:e5:b6:70:60:00:b1:67:40:bd:af:cf:
cb:52:24:7c:6e:03:4d:a9:5e:12:cb:49:fd:c0:1b:de:25:60:
4e:d8:1d:f7:ae:0c:02:3d:9c:21:45:3b:dc:7e:df:32:46:c6:
39:9b:93:17:be:c9:be:64:ad:1f:f1:b1:31:cd:34:81:df:c4:
48:4e:42:5a:4b:7b:99:86:e8:33:39:18:cb:5a:3a:af:0f:be:
2c:ae:42:3b:7e:cf:09:9f:96:27:ad:84:ab:bb:af:a2:cd:87:
dd:2d:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org