Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a663a3a2f34382d3438203d3e203435373235.roa
File: 323430323a3738303a663a3a2f34382d3438203d3e203435373235.roa (raw, json)
Hash identifier: XuHCPoC+E+hsg4gMddJ9rPGi+Ow0HipZH1eMSbbsAu8=
Subject key identifier: 96:1D:0A:55:99:CB:33:90:5D:4C:15:87:A3:E5:3B:95:98:C7:70:DC
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 2AE4D7EF13DF0DAF7AD610E650ACCF3A9F7B04BB
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a663a3a2f34382d3438203d3e203435373235.roa
Signing time: Wed 07 Feb 2024 04:02:43 +0000
ROA not before: Wed 07 Feb 2024 03:57:43 +0000
ROA not after: Wed 05 Feb 2025 04:02:43 +0000
asID: 45725
IP address blocks: 2402:780:f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e4:d7:ef:13:df:0d:af:7a:d6:10:e6:50:ac:cf:3a:9f:7b:04:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Feb 7 03:57:43 2024 GMT
Not After : Feb 5 04:02:43 2025 GMT
Subject: CN=961D0A5599CB33905D4C1587A3E53B9598C770DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:ff:e6:a0:2e:cb:d2:f3:5f:1c:ad:1b:4d:
e0:13:51:05:b1:74:3a:a9:e4:6c:c6:93:9e:85:f7:
c5:05:61:8f:7c:2b:29:41:65:49:88:49:9d:0b:33:
6b:3a:61:95:45:a0:42:94:73:a6:b6:61:b3:4e:e4:
51:7d:f1:c3:d5:a2:8d:e1:98:b2:01:c4:34:ed:7f:
82:50:7f:cf:da:6f:28:9e:9b:3a:39:4d:25:25:8a:
3d:f5:5a:a2:3e:d5:fa:df:f3:ad:2b:52:fc:dd:29:
dd:95:ff:d2:c2:92:7e:b8:8f:75:f3:e2:73:00:54:
bb:bc:1e:dd:83:3c:9c:92:5d:12:d8:f6:f6:6f:a1:
f6:9b:4f:fd:27:92:3e:11:bf:8a:35:af:5d:62:91:
0d:20:55:3f:76:c2:da:e0:a4:e6:c4:b7:1e:21:4b:
aa:86:dc:43:0a:cc:39:00:86:98:a5:7f:35:01:33:
0e:db:6e:c3:e3:6c:87:a5:6c:63:b0:bf:5a:ce:09:
c6:a9:86:83:5b:7f:19:2a:47:3f:54:92:1d:d8:ac:
9a:df:ac:53:ad:45:9c:46:ca:1a:f4:b5:90:f5:40:
04:f5:ef:45:8f:eb:55:e4:f2:45:fc:a0:d4:99:6b:
8c:14:13:fe:ca:bf:74:94:95:a1:be:b4:45:aa:56:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1D:0A:55:99:CB:33:90:5D:4C:15:87:A3:E5:3B:95:98:C7:70:DC
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/323430323a3738303a663a3a2f34382d3438203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:780:f::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ff:40:e1:3c:47:39:e1:db:7f:45:8e:ee:d9:fa:47:e9:39:
40:a4:b5:02:55:c4:c3:71:ad:2b:ff:29:ae:71:c6:59:21:5d:
7e:d0:3c:92:26:10:21:b3:19:ac:67:70:1e:d4:64:d6:51:e9:
d6:d5:13:d9:e7:ac:1d:82:18:c0:7a:3d:0d:33:32:66:3e:6c:
0a:83:72:a9:0e:c8:dc:f8:55:72:08:4b:53:30:ad:61:6a:ae:
b3:d3:5b:bb:8b:a3:30:c2:6c:e6:04:02:ec:51:b6:a8:93:e4:
35:f7:ba:e6:80:aa:95:a6:a0:40:dc:9d:ef:68:e1:c6:95:7f:
4c:20:4f:b1:16:75:39:f9:aa:30:d5:15:90:ca:c9:aa:cd:06:
3a:fc:b8:df:1c:24:ef:72:ae:63:54:97:cb:d4:d2:d5:b3:36:
82:4e:5f:d3:c5:57:22:18:a1:a5:18:dc:cb:79:3a:81:6c:25:
d0:6b:f6:2e:9a:aa:6f:47:30:b5:c5:f3:33:a7:58:35:e1:ec:
24:22:89:be:ca:a5:a6:15:53:50:33:2c:1f:92:ee:bb:8a:23:
cc:d3:d5:5f:53:63:05:af:96:0e:1c:f1:a6:0b:07:e0:ae:ea:
31:86:ec:7e:e4:9a:52:7c:69:bb:54:52:c9:28:8a:08:c3:fa:
0f:c2:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org