Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3438203d3e20323030323430.roa
File: 323430313a633432303a383030303a3a2f33332d3438203d3e20323030323430.roa (raw, json)
Hash identifier: cMc8d+LbVH0l10iXLL3MRifoPp/Y71SqyG/YmjLZvnM=
Subject key identifier: B4:C6:20:12:28:F5:3B:CF:6D:80:CE:CA:AA:19:FE:5B:34:83:D9:C8
Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Certificate serial: 5E8E689BDD1D95B4FBA70DA8D4E36FBA6E840F07
Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3438203d3e20323030323430.roa
Signing time: Thu 26 Sep 2024 01:05:07 +0000
ROA not before: Thu 26 Sep 2024 01:00:07 +0000
ROA not after: Thu 25 Sep 2025 01:05:07 +0000
asID: 200240
IP address blocks: 2401:c420:8000::/33 maxlen: 48
Validation: Failed, certificate revoked on Sat 05 Apr 2025 20:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8e:68:9b:dd:1d:95:b4:fb:a7:0d:a8:d4:e3:6f:ba:6e:84:0f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Validity
Not Before: Sep 26 01:00:07 2024 GMT
Not After : Sep 25 01:05:07 2025 GMT
Subject: CN=B4C6201228F53BCF6D80CECAAA19FE5B3483D9C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:8c:07:75:38:37:b5:70:2a:9d:7e:52:2d:
4c:ac:c8:ed:9f:f8:1e:0c:bf:58:44:f6:3d:95:b8:
73:68:f6:14:0f:ba:5b:fb:84:2e:ce:d5:0d:ac:7e:
07:79:de:d0:17:25:80:5e:28:74:b0:62:2a:a4:25:
28:66:b1:1d:ed:83:c2:63:27:5d:fb:41:fe:7b:45:
7b:f0:50:8c:2d:f6:fe:cb:57:66:c0:9a:9c:59:df:
67:38:5f:20:d2:a9:20:76:d0:16:1c:49:ac:98:b4:
3a:7c:75:bb:dd:e6:46:75:83:94:8a:6d:3c:78:07:
4a:9a:be:aa:16:5d:c9:db:d6:aa:7f:f9:21:84:0e:
e6:ff:e8:22:b6:a6:ee:90:73:db:73:a6:4c:cb:dd:
4c:7e:c5:21:5e:68:19:bc:8d:52:de:a6:e6:53:b9:
bb:b4:41:58:b8:8b:13:9b:7c:21:b8:43:15:1b:4e:
13:1f:e7:05:08:cb:ce:e0:eb:e2:f7:08:26:ed:db:
c4:00:5f:ec:03:de:13:9e:a9:15:c7:91:33:35:6a:
e5:19:e1:c1:c7:19:25:c0:59:3b:26:6f:77:4d:00:
bc:6a:78:17:da:69:8a:e1:3b:58:5e:ae:0b:3d:24:
2d:12:fe:5d:c4:d9:02:95:12:1a:8f:dc:a6:f0:8d:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C6:20:12:28:F5:3B:CF:6D:80:CE:CA:AA:19:FE:5B:34:83:D9:C8
X509v3 Authority Key Identifier:
keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3438203d3e20323030323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:c420:8000::/33
Signature Algorithm: sha256WithRSAEncryption
e5:b8:60:6f:aa:ec:41:60:01:39:22:2d:20:2a:4e:56:97:b3:
65:86:87:8c:2f:3c:7e:b5:70:90:02:64:33:03:43:5b:61:1c:
e0:4f:fc:e5:d3:96:d8:cb:e7:17:c9:b3:12:0f:bb:0a:a0:84:
e7:1e:22:d4:fb:96:d2:42:74:c4:1b:63:ba:1c:21:52:2b:66:
0b:e1:22:83:9e:78:ca:11:ef:cd:3b:b3:ca:46:80:44:00:47:
76:f9:66:0a:a8:3d:dd:52:4f:d2:0b:8b:0c:55:87:3a:49:3c:
73:49:01:94:50:1e:30:2c:c9:94:a6:93:d1:2a:96:f0:ef:5b:
00:41:2c:e7:31:3a:82:e8:28:e4:10:5b:23:71:2d:d7:b4:b4:
0f:e6:44:be:17:42:a8:c8:ac:59:06:7b:49:de:a9:2b:84:ed:
b9:6d:a3:9c:66:6e:94:63:67:8e:91:3a:99:c3:61:e7:41:ad:
b0:62:85:7f:9f:59:72:82:52:91:a3:46:3e:1b:c3:ef:e5:36:
d7:db:ae:b8:f3:73:72:24:bf:57:98:17:2d:26:eb:2e:87:5a:
90:97:a4:3d:6e:67:cd:94:8e:4e:5b:7b:67:37:8d:c5:1f:32:
65:fc:7c:23:c4:01:31:85:e7:3a:4e:ce:8f:21:39:09:0e:8e:
38:b0:2a:dc
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUXo5om90dlbT7pw2o1ONvum6EDwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2
MEY3OEZDQTAeFw0yNDA5MjYwMTAwMDdaFw0yNTA5MjUwMTA1MDdaMDMxMTAvBgNV
BAMTKEI0QzYyMDEyMjhGNTNCQ0Y2RDgwQ0VDQUFBMTlGRTVCMzQ4M0Q5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinIwHdTg3tXAqnX5SLUysyO2f
+B4Mv1hE9j2VuHNo9hQPulv7hC7O1Q2sfgd53tAXJYBeKHSwYiqkJShmsR3tg8Jj
J137Qf57RXvwUIwt9v7LV2bAmpxZ32c4XyDSqSB20BYcSayYtDp8dbvd5kZ1g5SK
bTx4B0qavqoWXcnb1qp/+SGEDub/6CK2pu6Qc9tzpkzL3Ux+xSFeaBm8jVLepuZT
ubu0QVi4ixObfCG4QxUbThMf5wUIy87g6+L3CCbt28QAX+wD3hOeqRXHkTM1auUZ
4cHHGSXAWTsmb3dNALxqeBfaaYrhO1hergs9JC0S/l3E2QKVEhqP3Kbwje/RAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUtMYgEij1O89tgM7Kqhn+WzSD2cgwHwYDVR0j
BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG
RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3
OEZDQS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjg1OGY2LWRlMjAtNDEyMS1i
Y2VhLTkwNzZlZGNjYzA5Ny8wLzMyMzQzMDMxM2E2MzM0MzIzMDNhMzgzMDMwMzAz
YTNhMmYzMzMzMmQzNDM4MjAzZDNlMjAzMjMwMzAzMjM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgck
AcQggDANBgkqhkiG9w0BAQsFAAOCAQEA5bhgb6rsQWABOSItICpOVpezZYaHjC88
frVwkAJkMwNDW2Ec4E/85dOW2MvnF8mzEg+7CqCE5x4i1PuW0kJ0xBtjuhwhUitm
C+Eig554yhHvzTuzykaARABHdvlmCqg93VJP0guLDFWHOkk8c0kBlFAeMCzJlKaT
0SqW8O9bAEEs5zE6gugo5BBbI3Et17S0D+ZEvhdCqMisWQZ7Sd6pK4TtuW2jnGZu
lGNnjpE6mcNh50GtsGKFf59ZcoJSkaNGPhvD7+U219uuuPNzciS/V5gXLSbrLoda
kJekPW5nzZSOTlt7ZzeNxR8yZfx8I8QBMYXnOk7OjyE5CQ6OOLAq3A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:31 2025 by rpki-client