Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a313030303a3a2f33362d3438203d3e20313431303733.roa
File: 323430363a373734303a313030303a3a2f33362d3438203d3e20313431303733.roa (raw, json)
Hash identifier: oSYXcUJI1ToIjkSSsEbfoubijGlJ0HuylJ8mJCFz2Es=
Subject key identifier: 5B:3F:36:3C:99:8B:4D:6F:8A:0F:41:25:69:BE:F6:0F:B8:9B:CC:90
Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44
Certificate serial: 51D0B29D8CEDC89799FE8D112CA47861BA732B0D
Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a313030303a3a2f33362d3438203d3e20313431303733.roa
Signing time: Tue 29 Aug 2023 03:44:56 +0000
ROA not before: Tue 29 Aug 2023 03:39:56 +0000
ROA not after: Tue 27 Aug 2024 03:44:56 +0000
asID: 141073
IP address blocks: 2406:7740:1000::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 10:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d0:b2:9d:8c:ed:c8:97:99:fe:8d:11:2c:a4:78:61:ba:73:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44
Validity
Not Before: Aug 29 03:39:56 2023 GMT
Not After : Aug 27 03:44:56 2024 GMT
Subject: CN=5B3F363C998B4D6F8A0F412569BEF60FB89BCC90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:fc:ae:9e:68:d7:cd:45:4d:7b:e3:80:7d:
eb:00:f5:61:c2:b2:8a:50:da:ff:ae:94:83:93:44:
99:0f:f2:5f:fa:de:a2:10:be:c3:b2:4d:82:d8:bd:
d6:1d:5f:b6:ab:66:d5:62:8d:f5:e5:5e:da:c1:d4:
e1:b2:7e:9f:99:88:62:5c:ac:c4:0a:b6:76:91:83:
cd:75:00:8a:3b:4f:9f:40:e2:cb:f4:bc:30:92:d5:
f3:d1:2a:b7:62:77:6d:1d:15:05:da:57:ab:a1:31:
3c:33:bf:8f:9c:53:4e:9a:17:43:5d:6c:98:15:dd:
87:c9:5c:32:e7:db:3a:75:e7:27:bf:53:5d:32:d8:
e0:06:56:06:b8:48:37:ef:4d:d5:0f:8c:8e:f8:b5:
10:8a:4a:83:61:fe:14:d5:6b:6b:29:6d:bc:90:cb:
63:25:d6:11:cb:56:73:79:e1:5e:d4:c9:c9:66:fc:
01:69:a6:37:c3:84:fd:92:16:52:39:0f:04:f3:8f:
93:ca:7e:f1:8c:85:37:e3:55:dc:d2:15:0a:7a:a2:
73:19:f9:20:4c:1b:d8:52:29:52:d9:4d:e9:31:0e:
69:a1:97:28:c7:11:c5:53:fe:c2:34:76:d9:03:29:
e9:3f:07:59:db:1a:f8:ad:5c:62:ea:c0:ff:b4:59:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3F:36:3C:99:8B:4D:6F:8A:0F:41:25:69:BE:F6:0F:B8:9B:CC:90
X509v3 Authority Key Identifier:
keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a313030303a3a2f33362d3438203d3e20313431303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:7740:1000::/36
Signature Algorithm: sha256WithRSAEncryption
b8:16:94:f2:69:0d:26:9c:b9:06:88:83:be:fb:21:46:13:b6:
72:66:89:e1:4c:1d:2e:5a:00:06:75:ca:01:f1:c2:da:bf:c3:
7d:5b:75:28:a0:8b:2e:76:0d:f2:5f:8d:4e:ce:10:58:9b:79:
68:41:6a:09:cc:49:61:d0:3c:9f:e6:ac:da:f3:5d:ea:d8:98:
83:92:c7:1d:c3:ba:b4:9f:79:4e:3f:ea:c7:31:2d:e1:6d:92:
54:41:3a:32:63:82:33:9b:21:b0:5c:c8:38:b1:c1:1d:03:38:
88:03:3c:0f:39:c5:94:64:81:02:b4:71:c4:c4:93:71:57:85:
0e:f5:41:1d:cb:2f:bc:97:f6:1a:10:df:72:7d:e8:bc:a6:2c:
75:2e:fd:a2:d0:a2:dc:e1:47:b5:55:9e:0d:bc:2a:7c:aa:d1:
bb:49:c4:4b:8a:44:ba:ee:17:53:e8:5b:87:fd:0f:e0:7b:53:
fb:26:e8:19:a7:80:ad:bb:d8:b2:09:1c:b1:ea:f5:ef:9c:40:
f8:27:52:8e:64:1f:28:4c:b6:76:76:93:31:ba:da:c5:84:a9:
aa:04:de:d2:2a:5c:6a:d3:bb:9b:f5:08:bc:0b:d0:1a:3f:61:
25:f1:60:be:3a:a4:78:82:77:7a:c7:f3:2d:ce:09:4b:08:35:
c6:b9:30:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org