Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f33322d3332203d3e203234313938.roa
File: 323430323a623234303a3a2f33322d3332203d3e203234313938.roa (raw, json)
Hash identifier: hE8Mz/Nb7TDYahfwWTjEoLS4pJmR57mQU408nExE1kY=
Subject key identifier: FC:35:8F:FB:DD:63:06:64:E4:BD:62:30:C6:24:93:5C:76:92:85:48
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 762BE6338B231E347653DCEBCFBACE3F61726BAE
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f33322d3332203d3e203234313938.roa
Signing time: Mon 13 Nov 2023 04:50:22 +0000
ROA not before: Mon 13 Nov 2023 04:45:22 +0000
ROA not after: Mon 11 Nov 2024 04:50:22 +0000
asID: 24198
IP address blocks: 2402:b240::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 04 Jun 2024 11:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2b:e6:33:8b:23:1e:34:76:53:dc:eb:cf:ba:ce:3f:61:72:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: Nov 13 04:45:22 2023 GMT
Not After : Nov 11 04:50:22 2024 GMT
Subject: CN=FC358FFBDD630664E4BD6230C624935C76928548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:6c:80:db:82:ee:29:2d:40:85:18:00:9d:
37:85:8e:06:0f:3d:11:bb:e5:aa:a2:c3:10:59:e6:
60:7e:8b:78:52:68:f0:f4:67:71:21:1a:7a:9c:56:
a1:f6:55:91:01:aa:4d:c1:0e:21:06:44:18:93:fb:
44:19:41:73:e5:a4:95:bb:ec:56:59:23:2e:f1:c6:
f9:72:6b:a1:0f:08:a9:9f:65:ea:2c:02:e2:ba:11:
9c:fb:13:ec:83:f6:6d:21:35:c5:c6:bc:0f:d5:ce:
8d:87:13:64:aa:f1:ec:2e:0b:20:12:80:d8:45:13:
e4:2a:ba:f6:8a:9d:b4:c5:66:b9:78:91:a6:41:0a:
a8:13:cc:7b:d4:ad:81:d7:00:8b:5e:45:4a:33:ec:
f4:cc:c0:54:16:39:8c:22:03:93:27:d0:4e:52:1f:
48:bf:4d:e7:83:1f:d4:26:35:dd:cc:48:e5:5a:a4:
72:78:19:83:a7:07:da:9d:8f:d3:c8:92:8c:61:47:
9a:f0:ab:39:bc:d7:78:bb:d0:6e:68:4c:4d:6f:1f:
b3:de:23:45:59:a8:19:8b:73:da:ed:ed:fe:9f:25:
ff:77:db:16:7a:2e:cf:82:f0:32:db:2e:8f:61:21:
87:f7:da:09:5d:d1:84:41:d8:33:d2:2b:d7:26:67:
38:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:35:8F:FB:DD:63:06:64:E4:BD:62:30:C6:24:93:5C:76:92:85:48
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f33322d3332203d3e203234313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:b240::/32
Signature Algorithm: sha256WithRSAEncryption
12:a7:48:7d:2f:95:86:b5:69:b4:1e:05:9f:93:a1:6e:79:4b:
b8:c9:12:dc:04:ef:0d:4a:7e:5f:63:59:c7:fe:31:7c:94:e1:
ca:01:e9:40:9a:ca:2d:2c:5d:90:9b:29:e2:19:70:eb:aa:33:
d8:af:22:62:bc:0a:4e:45:12:a7:8f:25:62:36:ea:33:3c:e2:
69:3b:98:ef:2f:2d:f8:da:52:0d:de:9d:07:f7:74:58:38:ce:
18:50:2f:65:8a:11:65:7a:06:37:3f:79:99:6d:4d:63:f2:91:
10:de:27:51:a9:bc:8a:e4:1d:9e:76:31:8f:dc:85:9d:7c:92:
af:fe:ab:62:fc:57:ff:e3:dc:4c:ed:59:0d:83:1f:e1:a5:24:
9f:08:45:26:b7:26:08:85:80:3e:b1:1d:7e:ea:63:d9:2d:7a:
92:b6:f9:85:29:63:99:12:50:ab:80:32:22:55:33:8b:bd:f9:
90:1b:12:7b:ba:b1:b8:19:93:0f:b2:9b:bc:74:d3:c0:20:21:
e4:53:bf:c5:9a:33:aa:fd:5f:2d:a9:01:69:68:58:88:d0:54:
b4:ae:b4:07:56:4c:06:a5:d7:83:cc:d5:df:b0:dc:45:ad:ba:
7f:6b:28:b9:c1:89:3d:37:0a:ae:36:22:57:d0:5f:3e:29:76:
48:3e:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org