Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3a2f33322d3332203d3e203435373235.roa
File: 323430323a3738303a3a2f33322d3332203d3e203435373235.roa (raw, json)
Hash identifier: a/vSQKmXcHoEPVbcye+hqk/ZF73y9WzYmRsLeW5ufP0=
Subject key identifier: A4:BA:45:D9:2C:7E:A8:E1:7B:6B:51:0A:27:2E:39:5C:7B:6F:6E:9F
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 49641DBDC4EF9ED6615C6C7533D2A5279BE58866
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3a2f33322d3332203d3e203435373235.roa
Signing time: Tue 14 Nov 2023 06:00:00 +0000
ROA not before: Tue 14 Nov 2023 05:55:00 +0000
ROA not after: Tue 12 Nov 2024 06:00:00 +0000
asID: 45725
IP address blocks: 2402:780::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:64:1d:bd:c4:ef:9e:d6:61:5c:6c:75:33:d2:a5:27:9b:e5:88:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Nov 14 05:55:00 2023 GMT
Not After : Nov 12 06:00:00 2024 GMT
Subject: CN=A4BA45D92C7EA8E17B6B510A272E395C7B6F6E9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:7f:9f:ce:bf:cf:dc:71:d2:e3:80:64:fe:
ff:0a:1a:20:37:13:68:66:0e:36:ac:e9:3f:c9:15:
86:9c:e7:5d:05:7d:a3:68:d3:5d:7a:33:00:c3:67:
16:7c:73:66:02:94:17:8e:31:d3:e9:f8:11:4d:ef:
4e:33:a6:c1:54:ca:39:39:42:b0:3c:b7:07:eb:38:
40:c9:4b:d6:37:9f:45:cd:18:46:9f:7a:0c:69:92:
7f:07:df:1f:58:4c:89:20:7a:65:38:ab:f7:88:44:
8d:95:fc:fd:a6:b1:9f:93:db:93:55:94:5c:4c:9b:
19:8d:6b:43:c7:a1:35:9f:08:81:b0:55:73:05:97:
37:de:63:3b:6c:55:b6:23:88:36:d0:96:2e:a6:00:
19:cc:a1:c1:06:50:b8:df:7b:13:7e:be:f9:57:da:
38:9f:29:ad:a1:9d:46:d9:1e:79:44:6b:08:aa:bc:
42:1d:2d:08:b8:b5:24:71:bd:d9:bd:53:73:69:34:
be:7d:b4:51:9c:51:2c:df:e7:0a:ba:53:0c:9a:ab:
11:f0:58:89:99:6d:2f:0e:e5:be:e9:31:7a:5b:12:
4d:d7:11:0e:02:f6:21:be:17:15:5a:e3:d3:90:6c:
cb:c0:4d:5a:09:c7:75:68:b5:e5:2e:37:f3:ea:b9:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:45:D9:2C:7E:A8:E1:7B:6B:51:0A:27:2E:39:5C:7B:6F:6E:9F
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a3a2f33322d3332203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:780::/32
Signature Algorithm: sha256WithRSAEncryption
99:07:66:63:e9:18:41:a5:7c:df:2e:6a:36:06:af:ae:8d:e1:
7d:ba:e0:cc:00:59:35:25:8b:d2:19:c3:be:a4:db:a4:24:d1:
03:ef:da:b4:34:64:a2:e4:d2:c4:ca:9e:ec:a8:b4:d4:fe:88:
5b:80:91:45:a5:7e:95:11:c9:5f:44:4b:d2:48:51:74:a1:ab:
34:61:a5:db:02:bc:06:c1:f8:0f:97:6d:6f:78:e5:cd:61:b4:
62:21:24:c9:00:02:bc:4b:04:42:28:82:19:62:00:0a:8e:64:
df:62:5c:60:f4:c0:7e:99:98:3e:1f:97:ec:0a:89:62:33:d6:
da:52:7a:63:e3:ee:91:54:4f:a7:f4:63:5c:c9:b1:96:14:22:
92:f7:bb:5d:1f:42:22:82:78:0b:76:c4:8b:3b:9d:10:3f:f0:
00:f0:38:52:58:01:42:35:20:bc:11:70:cb:c9:55:ef:d4:75:
b4:8b:ab:e6:c6:c6:c9:d3:21:91:a2:e1:fd:e0:31:a9:35:43:
ef:10:e8:09:e1:45:89:10:a2:a2:c3:86:5c:d0:1f:55:b1:69:
ef:28:02:e3:45:dd:2e:e8:ac:79:d8:25:80:2b:9d:d7:c8:a0:
24:2f:82:2c:19:94:53:ba:66:3f:da:6f:a4:43:0a:f0:ac:ab:
74:6e:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org