Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33362d3438203d3e20313431303733.roa
File: 323430363a373734303a3a2f33362d3438203d3e20313431303733.roa (raw, json)
Hash identifier: nojMgZWXefmN66crtfVVYd9DY+c85d2pOCQqUua3DT0=
Subject key identifier: 0B:E2:40:DA:8D:60:55:D9:0C:35:CE:43:79:D5:24:62:00:24:D0:28
Certificate issuer: /CN=2D18956397FA6055A44153CABF07303FD6E55E44
Certificate serial: 72F3FBE1F8013EA662D81EE7DFECCDF81AB972FC
Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33362d3438203d3e20313431303733.roa
Signing time: Fri 25 Aug 2023 02:51:30 +0000
ROA not before: Fri 25 Aug 2023 02:46:30 +0000
ROA not after: Fri 23 Aug 2024 02:51:30 +0000
asID: 141073
IP address blocks: 2406:7740::/36 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 10:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f3:fb:e1:f8:01:3e:a6:62:d8:1e:e7:df:ec:cd:f8:1a:b9:72:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44
Validity
Not Before: Aug 25 02:46:30 2023 GMT
Not After : Aug 23 02:51:30 2024 GMT
Subject: CN=0BE240DA8D6055D90C35CE4379D524620024D028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:b7:f8:4f:d9:ac:bd:80:c9:30:71:b8:25:
f2:ff:4a:6a:42:1a:5c:9a:34:75:96:59:ab:3a:49:
e7:a6:45:f4:f0:f8:34:8d:7c:b6:f2:17:19:6a:c5:
74:45:59:9d:e8:cc:c8:13:bc:c1:89:53:a2:d6:ce:
6b:81:f7:08:7e:a5:88:ae:e2:67:0f:71:15:6b:82:
ca:0f:be:f0:b4:93:65:a8:1c:e8:12:bd:1e:7a:89:
4d:b2:46:72:32:37:6e:97:c4:e9:bc:e0:da:07:81:
f7:ee:b1:a3:cb:9b:16:30:ac:27:3f:28:1f:ef:15:
a3:35:75:99:ce:37:b7:8f:25:f0:44:92:25:11:43:
36:ea:6e:95:66:b4:c4:97:d7:97:4d:79:2c:55:30:
35:87:6d:7d:2f:41:1c:ca:99:3b:5a:21:c7:4c:30:
21:8f:50:48:5a:7b:37:2d:ab:0c:41:c3:ec:59:22:
63:58:ad:3d:4d:a2:2a:cc:92:55:6c:20:22:78:c4:
0e:3b:3b:2b:48:7f:8e:00:e5:ae:57:65:a1:e1:fb:
38:48:4f:ea:ee:71:4c:30:57:02:e5:68:c4:40:82:
be:5f:c0:fe:5f:61:01:77:db:c9:42:0f:38:be:85:
7e:12:d4:d0:98:19:7f:c4:e2:5f:03:ea:8a:22:20:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E2:40:DA:8D:60:55:D9:0C:35:CE:43:79:D5:24:62:00:24:D0:28
X509v3 Authority Key Identifier:
keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/323430363a373734303a3a2f33362d3438203d3e20313431303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:7740::/36
Signature Algorithm: sha256WithRSAEncryption
27:d6:ab:96:b7:fb:0d:69:d0:ab:93:ed:4b:8f:b3:50:6f:80:
ac:cb:62:33:af:3c:b3:af:a0:da:9a:56:44:f4:a6:03:e9:13:
74:67:0a:b6:42:50:9b:fb:f9:47:e1:fe:48:21:89:50:19:d9:
23:34:e8:97:45:ce:6e:f7:59:7a:69:a9:99:93:88:47:ae:32:
e4:90:91:3a:73:56:9b:49:f4:8e:d2:fe:60:54:4d:fe:2d:6e:
ff:13:0c:bb:2b:7e:f8:04:01:83:05:f9:3e:4f:2f:cb:e6:ee:
1c:65:56:64:f8:42:af:c7:2e:00:31:8c:e5:bc:21:91:c5:3d:
02:51:50:a0:02:d0:87:c5:22:73:50:f1:93:ac:0a:a3:6d:f6:
fe:32:3b:e8:05:41:f3:1b:4c:fa:ef:44:7f:cc:51:80:00:74:
56:aa:b9:f3:1c:9d:b9:8c:82:54:90:af:7b:35:b8:a6:4b:bc:
ae:bc:cb:4c:43:62:7b:5a:fe:b3:83:68:94:49:6d:15:79:bf:
83:f4:11:dd:ea:b9:45:6c:76:7a:65:9f:01:19:0b:74:7e:49:
07:b3:d6:62:71:e2:10:64:a1:f1:2c:24:50:53:2c:74:94:0f:
38:35:72:2c:07:66:a2:c8:31:75:85:47:cc:77:20:bd:91:f4:
e7:76:bb:6c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcvP74fgBPqZi2B7n3+zN+Bq5cvwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZE
NkU1NUU0NDAeFw0yMzA4MjUwMjQ2MzBaFw0yNDA4MjMwMjUxMzBaMDMxMTAvBgNV
BAMTKDBCRTI0MERBOEQ2MDU1RDkwQzM1Q0U0Mzc5RDUyNDYyMDAyNEQwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepLf4T9msvYDJMHG4JfL/SmpC
GlyaNHWWWas6SeemRfTw+DSNfLbyFxlqxXRFWZ3ozMgTvMGJU6LWzmuB9wh+pYiu
4mcPcRVrgsoPvvC0k2WoHOgSvR56iU2yRnIyN26XxOm84NoHgffusaPLmxYwrCc/
KB/vFaM1dZnON7ePJfBEkiURQzbqbpVmtMSX15dNeSxVMDWHbX0vQRzKmTtaIcdM
MCGPUEhaezctqwxBw+xZImNYrT1NoirMklVsICJ4xA47OytIf44A5a5XZaHh+zhI
T+rucUwwVwLlaMRAgr5fwP5fYQF328lCDzi+hX4S1NCYGX/E4l8D6ooiIIGfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUC+JA2o1gVdkMNc5DedUkYgAk0CgwHwYDVR0j
BBgwFoAULRiVY5f6YFWkQVPKvwcwP9blXkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ODU4Zjg1Yy1hNDU4LTRhNTgtYmJkZS00YmZiMzQzZGM0YjAvMC8yRDE4OTU2Mzk3
RkE2MDU1QTQ0MTUzQ0FCRjA3MzAzRkQ2RTU1RTQ0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkQxODk1NjM5N0ZBNjA1NUE0NDE1M0NBQkYwNzMwM0ZENkU1
NUU0NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4NThmODVjLWE0NTgtNGE1OC1i
YmRlLTRiZmIzNDNkYzRiMC8wLzMyMzQzMDM2M2EzNzM3MzQzMDNhM2EyZjMzMzYy
ZDM0MzgyMDNkM2UyMDMxMzQzMTMwMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQGd0AAMA0GCSqG
SIb3DQEBCwUAA4IBAQAn1quWt/sNadCrk+1Lj7NQb4Csy2Izrzyzr6DamlZE9KYD
6RN0Zwq2QlCb+/lH4f5IIYlQGdkjNOiXRc5u91l6aamZk4hHrjLkkJE6c1abSfSO
0v5gVE3+LW7/Ewy7K374BAGDBfk+Ty/L5u4cZVZk+EKvxy4AMYzlvCGRxT0CUVCg
AtCHxSJzUPGTrAqjbfb+MjvoBUHzG0z670R/zFGAAHRWqrnzHJ25jIJUkK97Nbim
S7yuvMtMQ2J7Wv6zg2iUSW0Veb+D9BHd6rlFbHZ6ZZ8BGQt0fkkHs9ZiceIQZKHx
LCRQUyx0lA84NXIsB2aiyDF1hUfMdyC9kfTndrts
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org