Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a323030303a3a2f33362d3438203d3e20313431303733.roa
File: 323430363a373734303a323030303a3a2f33362d3438203d3e20313431303733.roa (raw, json)
Hash identifier: 5Rvuyv78QCZJHc9RXkZPi74eYcvRGfZpNLpoOURg0TE=
Subject key identifier: 58:2E:09:FB:C4:D7:7E:D3:D1:C6:E8:D3:DE:B6:CD:9A:56:DA:E0:F3
Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44
Certificate serial: 1C7B81FC816B6E9A012A2F9A5F44598791C2DFAA
Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a323030303a3a2f33362d3438203d3e20313431303733.roa
Signing time: Tue 29 Aug 2023 10:45:05 +0000
ROA not before: Tue 29 Aug 2023 10:40:05 +0000
ROA not after: Tue 27 Aug 2024 10:45:05 +0000
asID: 141073
IP address blocks: 2406:7740:2000::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 10:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7b:81:fc:81:6b:6e:9a:01:2a:2f:9a:5f:44:59:87:91:c2:df:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44
Validity
Not Before: Aug 29 10:40:05 2023 GMT
Not After : Aug 27 10:45:05 2024 GMT
Subject: CN=582E09FBC4D77ED3D1C6E8D3DEB6CD9A56DAE0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0a:a9:77:b2:1a:81:b2:c5:bf:4a:29:16:fb:
df:72:f3:7a:6d:58:8b:66:48:d7:22:89:d7:86:b3:
d8:52:0f:99:05:ca:c5:4a:b8:37:06:4e:30:2a:b6:
f3:66:bd:0e:bf:29:9c:d1:7b:90:d0:78:7e:75:65:
c6:24:5c:44:03:e6:59:03:60:70:72:8e:8f:39:90:
81:24:e8:f8:11:2e:a8:a1:5e:7a:40:00:11:b0:68:
64:93:2a:fa:91:40:43:a4:2a:7a:9e:c0:27:bb:70:
12:01:7b:86:75:cc:3e:b8:51:38:3f:6d:00:18:5b:
99:c5:44:8f:b6:55:36:40:b4:c1:61:71:5a:08:60:
5a:e0:c1:b0:e6:2b:22:86:9c:04:6d:14:14:64:dc:
2c:96:44:01:ae:36:dd:11:57:00:e9:43:09:8c:ba:
00:b1:3f:73:9b:23:13:a7:48:1b:c9:43:34:e3:45:
64:11:2d:de:d1:25:74:b0:f2:85:4b:b1:b6:56:56:
e2:74:d0:c3:29:bd:9f:19:80:68:f2:66:01:33:e7:
2a:7f:54:d5:4b:c3:3e:41:b6:db:3f:65:da:58:1f:
c1:c0:3e:2b:31:71:70:f6:8f:0d:dd:0b:0c:9d:1a:
3e:3a:8a:78:93:bb:e0:b6:1f:a7:73:80:45:0e:0b:
51:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:09:FB:C4:D7:7E:D3:D1:C6:E8:D3:DE:B6:CD:9A:56:DA:E0:F3
X509v3 Authority Key Identifier:
keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a323030303a3a2f33362d3438203d3e20313431303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:7740:2000::/36
Signature Algorithm: sha256WithRSAEncryption
22:64:cd:b9:bc:42:82:ff:fb:6c:14:de:a1:66:53:bb:17:a4:
c2:b4:d0:f6:df:c0:91:25:ed:ac:68:30:f7:e7:0e:5d:ea:48:
77:70:38:00:68:1c:6e:d4:1a:5d:e6:71:6b:1c:fd:4a:ed:5c:
79:86:53:c5:52:52:2a:67:81:e1:8f:f2:0f:53:d9:bc:72:79:
35:7a:d7:52:c2:89:55:85:45:8a:de:a0:c6:b7:19:cd:7c:4c:
64:3f:5d:5a:16:d2:3f:a5:25:71:3f:17:d0:e0:d0:65:1c:43:
1d:34:2d:0d:14:84:86:ee:9f:eb:a1:b4:f7:c4:45:10:46:f0:
d4:bc:7b:03:e7:e3:12:8e:4d:b2:5c:9e:92:78:a5:ef:00:f4:
33:90:37:09:b4:9b:ad:38:04:50:d3:44:a7:a2:37:88:58:fb:
4b:2c:6c:47:3e:63:aa:30:3a:1f:be:74:f4:78:e1:7f:73:98:
ca:b3:64:15:9c:58:5f:2d:b0:ea:e3:8d:a2:06:d3:e2:a0:c3:
ae:ba:d6:10:21:ab:13:9a:1e:ac:17:f2:67:98:91:48:c6:3b:
8a:2d:19:af:c0:04:60:76:bc:45:01:93:7f:70:78:03:3f:17:
e6:83:f8:97:d3:a2:03:29:90:44:ff:e5:36:73:53:71:3b:c3:
1d:fb:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org