Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a363a3a2f34382d3438203d3e203435373235.roa
File: 323430323a3738303a363a3a2f34382d3438203d3e203435373235.roa (raw, json)
Hash identifier: E4ks+iHSeIRmqEQZ+CEjpdr+Z2MOKh1ZEA2U2jAIEiY=
Subject key identifier: 8F:28:D2:5E:09:86:66:F2:E4:EE:6E:32:0F:CA:17:01:13:FF:08:86
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 270F3FB0C389AAF0730A255181BC43E4443ECD2C
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a363a3a2f34382d3438203d3e203435373235.roa
Signing time: Fri 12 Apr 2024 03:06:31 +0000
ROA not before: Fri 12 Apr 2024 03:01:31 +0000
ROA not after: Fri 11 Apr 2025 03:06:31 +0000
asID: 45725
IP address blocks: 2402:780:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:0f:3f:b0:c3:89:aa:f0:73:0a:25:51:81:bc:43:e4:44:3e:cd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Apr 12 03:01:31 2024 GMT
Not After : Apr 11 03:06:31 2025 GMT
Subject: CN=8F28D25E098666F2E4EE6E320FCA170113FF0886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:ef:e6:92:7c:fc:e1:77:66:ab:74:50:b5:
23:8e:67:a4:2a:f5:64:85:e6:35:69:20:4b:34:bc:
25:db:00:b3:64:77:81:33:3f:d5:0d:87:c3:52:4d:
f4:44:92:62:f7:97:eb:56:17:95:00:10:31:76:0c:
88:81:1e:a4:c5:a6:ec:a5:b8:f7:52:3b:9f:08:de:
65:89:80:7c:bf:91:13:61:80:de:c4:e6:37:ec:4a:
a2:0e:22:91:08:8d:ec:38:3a:26:b0:47:a7:68:3e:
cf:74:b3:84:e5:85:1e:f4:f3:0d:58:a4:0b:77:ec:
7e:ba:98:28:f3:9b:9e:97:23:75:7f:cb:72:3b:9e:
9c:4b:a8:0e:db:e4:a9:49:ba:c6:85:17:60:4b:e0:
83:1e:76:52:f1:67:67:4b:44:78:13:64:87:96:02:
64:f9:ea:f5:1a:c8:da:ea:10:2f:10:2a:59:d4:11:
fe:ec:de:19:41:c3:c5:ad:5d:62:37:59:7d:6c:83:
4b:25:e4:78:34:c9:2a:37:e6:31:ef:2a:d9:15:23:
ad:a2:84:f6:07:dd:a0:e3:f9:ef:90:b3:5a:5d:89:
5c:1b:29:56:04:91:c7:80:94:bb:12:d5:3d:22:35:
24:bd:18:d8:6f:de:4c:92:4e:2c:46:84:87:08:b8:
83:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:D2:5E:09:86:66:F2:E4:EE:6E:32:0F:CA:17:01:13:FF:08:86
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a363a3a2f34382d3438203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:780:6::/48
Signature Algorithm: sha256WithRSAEncryption
53:7b:0a:c4:5a:71:ee:84:ea:e0:df:6a:f0:d0:be:1b:e5:32:
b7:06:e8:1a:6a:ca:a6:e0:bc:bf:4f:a0:3f:83:0f:12:5b:71:
a8:fd:dd:2e:2d:2c:cc:91:af:56:a5:ff:d5:90:73:17:06:12:
63:5b:fd:fc:26:4f:84:af:23:9f:51:aa:4e:3a:7b:17:a0:ab:
7d:5a:8f:c7:35:8f:c1:02:2d:92:a4:6b:24:42:e9:af:ac:fe:
21:f5:44:a5:05:c4:98:84:2f:c0:8d:bc:7a:dc:92:0c:8c:6f:
56:3f:d2:d2:cf:3e:0b:aa:d0:5e:a5:9f:78:aa:8b:b5:bf:bd:
d2:df:af:51:c0:f2:68:c2:5f:7a:91:e1:7c:7f:76:0a:b2:74:
96:22:ab:1a:b5:97:3f:89:1d:d8:15:1b:5c:99:d1:8b:e5:15:
a2:75:90:bb:57:68:89:e9:a4:29:a7:9c:97:bb:28:d0:ee:f5:
19:72:ea:1b:ff:24:49:e9:1a:c6:20:5e:a6:16:03:f1:2b:12:
20:04:99:17:8e:dc:ac:a7:b2:41:76:49:17:b0:b5:c3:0d:c8:
2c:dd:27:12:92:5d:b4:41:af:23:c8:22:a1:98:d7:d7:d9:16:
ca:01:0f:b8:f6:4a:c2:d4:38:9f:7f:98:a1:57:35:ca:53:24:
be:4f:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org