Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f33322d3438203d3e203234313938.roa
File: 323430323a623234303a3a2f33322d3438203d3e203234313938.roa (raw, json)
Hash identifier: gKJL/u4Oym0TDB2/ReYA3EQ0pyNk0zlegbrcFF32QG4=
Subject key identifier: 31:CF:01:ED:36:EB:F7:95:E0:57:D8:A2:C1:78:58:9E:D3:75:0E:8B
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 5B87361167978206EDF398DBDE081190E5E502B9
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f33322d3438203d3e203234313938.roa
Signing time: Fri 01 Dec 2023 01:18:33 +0000
ROA not before: Fri 01 Dec 2023 01:13:33 +0000
ROA not after: Fri 29 Nov 2024 01:18:33 +0000
asID: 24198
IP address blocks: 2402:b240::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Sep 2024 09:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:87:36:11:67:97:82:06:ed:f3:98:db:de:08:11:90:e5:e5:02:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: Dec 1 01:13:33 2023 GMT
Not After : Nov 29 01:18:33 2024 GMT
Subject: CN=31CF01ED36EBF795E057D8A2C178589ED3750E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:3f:06:8f:9d:d0:f3:de:63:0b:53:85:1b:
71:e7:a0:18:7f:30:62:99:51:41:23:4e:c4:7c:f8:
56:1b:ee:dc:ea:9e:30:10:4b:09:f9:2b:80:52:54:
73:56:4c:fb:c8:be:1f:65:3f:cf:29:45:f2:9b:91:
72:43:df:09:7f:1f:15:5e:39:0d:82:5e:24:94:df:
5a:c3:fc:8e:c6:6d:3f:93:f4:04:83:bb:17:3e:01:
17:d1:bb:f6:ac:72:27:91:47:94:d2:7c:d4:ba:bf:
2a:eb:75:59:20:e9:62:c4:a9:c4:4f:4c:bb:3e:62:
69:12:f2:5b:00:ae:cb:75:c6:d4:97:9a:6c:1b:28:
e4:b0:f7:c7:a9:85:dc:7f:b7:28:e2:73:6b:76:cc:
e7:6a:aa:93:aa:17:f8:25:6f:d5:c6:a4:45:25:63:
e8:89:04:87:58:d6:15:24:05:3b:1d:c2:25:6d:97:
17:1d:5b:f0:b0:e5:ac:e3:17:e6:38:ec:5f:49:8d:
f5:fc:d7:5b:82:95:1f:e7:7b:73:da:be:91:2f:2d:
47:46:84:2f:99:9e:11:a1:76:89:08:d6:77:0b:ce:
5a:27:9e:9f:1c:31:b5:0d:e3:cd:60:d9:9d:a2:cb:
5b:9e:81:a1:7b:13:34:eb:fc:51:0c:a6:45:9b:cf:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CF:01:ED:36:EB:F7:95:E0:57:D8:A2:C1:78:58:9E:D3:75:0E:8B
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/323430323a623234303a3a2f33322d3438203d3e203234313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:b240::/32
Signature Algorithm: sha256WithRSAEncryption
85:67:e0:30:8b:0a:3f:b6:0d:f8:2d:ab:ed:6c:34:1c:1a:51:
a1:75:19:67:fa:d3:c2:f9:c9:6b:54:3a:91:0e:d0:fa:ac:62:
2a:b0:0c:64:5b:52:e4:24:64:1d:a7:da:c8:15:43:d4:fd:ff:
f1:49:fb:f3:e1:35:3c:c3:e1:96:94:79:2b:1c:a2:68:47:94:
46:1e:11:c6:63:bd:12:f2:99:29:cd:2d:66:16:16:19:14:c2:
7b:1e:e9:7e:5a:9c:86:5b:a3:4a:3d:49:2b:3e:10:4d:21:23:
67:5d:ba:d7:fe:d0:9a:21:ca:ff:9c:e1:49:7c:f3:ca:59:36:
cc:07:95:20:54:d5:68:a6:2d:f8:e1:46:91:a9:b9:72:9d:e3:
be:a4:ad:d1:d7:36:65:0d:17:cb:87:49:1b:35:75:4c:7b:8c:
65:44:56:d3:75:5d:f8:d7:40:5c:b4:60:e4:e8:7e:a3:aa:d3:
bf:0c:de:15:80:49:a1:5c:91:b6:b9:17:58:e1:fc:4a:d5:52:
f6:d7:8e:e8:4e:94:c6:4c:16:b8:a7:49:ce:f1:db:31:2f:90:
06:a7:f0:b5:24:0e:82:f3:a2:4c:fa:8a:69:3e:80:d0:18:46:
21:12:c0:95:1a:8f:ea:72:a8:11:58:b3:4c:5f:84:78:2c:38:
43:b1:fc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 13:34:35 2024 by rpki-client on console-ams.rpki-client.org