Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3332203d3e203234323032.roa
File: 323430363a323134303a3a2f33322d3332203d3e203234323032.roa (raw, json)
Hash identifier: y0FGu7/q0SMyrXX7vQEML29qaiPHFLvU9K2v8cNDIw8=
Subject key identifier: 64:CC:92:BB:CF:EC:42:80:83:44:8E:39:A4:7C:9C:E8:7A:9A:23:4B
Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
Certificate serial: 79D45ED48F64D83D2CC4F77973B8B9F6DB3CD981
Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3332203d3e203234323032.roa
Signing time: Sun 24 Dec 2023 04:05:20 +0000
ROA not before: Sun 24 Dec 2023 04:00:20 +0000
ROA not after: Sun 22 Dec 2024 04:05:20 +0000
asID: 24202
IP address blocks: 2406:2140::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Jun 2024 21:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d4:5e:d4:8f:64:d8:3d:2c:c4:f7:79:73:b8:b9:f6:db:3c:d9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
Validity
Not Before: Dec 24 04:00:20 2023 GMT
Not After : Dec 22 04:05:20 2024 GMT
Subject: CN=64CC92BBCFEC428083448E39A47C9CE87A9A234B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:8c:3d:a9:b0:14:28:9c:f2:76:3a:ff:a4:
5d:87:66:a5:5b:f4:fb:0d:4e:f8:d3:4d:83:0d:7d:
63:57:b5:a4:ac:69:d8:18:72:d9:bf:d1:72:c9:a6:
47:99:28:d3:b2:23:54:60:5a:c5:4f:4e:21:cf:7d:
05:87:f9:1d:1a:a6:33:03:f0:23:63:e8:be:9f:b2:
4d:5d:63:31:92:d5:40:e9:93:5c:5c:2f:25:0d:41:
fa:c3:02:bb:9a:81:91:30:d7:d3:6b:47:6c:53:e3:
61:63:a8:01:3e:05:b7:c0:dc:d4:1b:eb:db:bc:b0:
55:e1:8f:66:eb:4a:8e:c9:e4:b2:5b:73:2c:e1:e5:
f5:b7:81:84:0e:15:b2:49:b3:44:ac:88:9b:87:7c:
43:54:76:1e:30:17:c7:8f:87:ff:96:63:6c:98:84:
a9:d1:71:e5:5f:5f:1a:74:c0:2b:1d:5b:87:f1:9a:
58:95:e5:ee:0f:21:e3:46:3c:dc:76:71:57:18:3b:
62:95:5d:ab:47:73:db:f2:26:1b:35:4d:59:5d:15:
11:f2:08:20:76:f7:cd:d7:ac:a2:97:ba:83:76:c9:
03:3c:a0:e7:76:47:93:fa:79:4a:fe:fb:8b:51:2f:
ab:b9:8d:49:f6:3e:39:a7:1a:e2:6d:b4:59:fa:12:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:92:BB:CF:EC:42:80:83:44:8E:39:A4:7C:9C:E8:7A:9A:23:4B
X509v3 Authority Key Identifier:
keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3332203d3e203234323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:2140::/32
Signature Algorithm: sha256WithRSAEncryption
51:f3:c0:9f:65:0b:3e:d9:27:87:56:26:b2:86:2e:2a:77:4b:
d1:61:32:68:7e:40:01:eb:c5:b4:fa:1d:67:59:8b:55:16:0c:
48:a9:09:08:f5:38:9b:e7:9b:38:a2:3d:0b:75:91:76:ac:5e:
bb:49:9e:9a:ae:bd:a2:87:f1:98:99:45:67:b9:8e:a8:25:03:
68:fc:36:09:7b:0d:90:33:62:d1:d1:2b:77:f1:77:4a:1f:e9:
cd:ec:88:76:20:b1:1f:de:1a:01:d6:93:d7:37:b9:4b:3d:43:
b3:c5:07:fb:a3:79:c9:94:ca:de:0e:41:8d:71:57:b0:37:6f:
d1:24:24:e0:74:16:ef:6d:3d:c7:25:a6:f3:6e:9f:23:d4:e1:
0c:47:ca:67:a2:24:2a:26:52:d8:5a:90:30:ca:79:28:af:77:
bd:97:23:5c:4e:8b:cc:c0:f0:16:43:c3:b0:a5:4f:db:20:9e:
c9:43:96:bc:57:01:0a:65:11:a6:90:55:9c:09:3d:b2:3a:5a:
06:64:e3:c3:be:6f:98:2a:0b:cb:ea:8c:0e:62:99:f9:02:4a:
48:e8:9c:3a:a8:c0:51:27:49:5d:78:a9:01:fe:90:48:ca:f2:
08:6d:6c:5a:14:c1:88:c6:ae:81:5a:80:c2:d0:27:00:95:f1:
f4:00:6c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org