Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/323430343a366434303a3a2f33322d3332203d3e20313338383130.roa
File: 323430343a366434303a3a2f33322d3332203d3e20313338383130.roa (raw, json)
Hash identifier: BCf/HHFa12i7zn7PaBmDmmVbgUzlpE/Y3dCel0BDkhA=
Subject key identifier: 32:B0:10:A4:61:30:88:AF:26:C2:FD:F4:44:58:59:1D:31:42:72:13
Certificate issuer: /CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C
Certificate serial: 5B6955186E0728A04B00C385E533AB53DA746A26
Authority key identifier: B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/323430343a366434303a3a2f33322d3332203d3e20313338383130.roa
Signing time: Mon 01 Jul 2024 01:04:51 +0000
ROA not before: Mon 01 Jul 2024 00:59:51 +0000
ROA not after: Mon 30 Jun 2025 01:04:51 +0000
asID: 138810
IP address blocks: 2404:6d40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 31 Oct 2024 01:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:69:55:18:6e:07:28:a0:4b:00:c3:85:e5:33:ab:53:da:74:6a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C
Validity
Not Before: Jul 1 00:59:51 2024 GMT
Not After : Jun 30 01:04:51 2025 GMT
Subject: CN=32B010A4613088AF26C2FDF44458591D31427213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9a:ff:58:c0:1d:bb:d1:06:9b:b9:a8:69:9c:
66:a4:ed:4e:1a:80:0c:47:93:dd:d1:8d:34:d8:ca:
41:05:67:74:0d:ad:55:b7:9f:a1:44:1b:fb:d6:8f:
0b:0d:23:17:7d:28:63:d0:c1:8a:ab:cf:0d:12:32:
90:29:fa:81:8e:85:34:b6:1a:1a:18:73:4a:6e:6b:
b6:03:5d:89:94:a7:dc:1b:0e:d7:61:22:0d:4d:56:
47:4f:1f:46:4d:0c:ec:6c:dc:fe:8e:44:ca:2a:fd:
bb:a0:95:ba:61:9d:f7:b2:0a:1c:b1:ac:be:4e:4a:
ed:e9:93:54:ff:4b:28:45:04:5b:20:a0:bb:fb:3b:
ca:33:9c:98:cf:84:61:a6:20:6c:3c:26:c9:da:a2:
ae:63:d5:97:ba:6c:0a:3d:e9:30:0f:13:c1:54:1c:
7f:cb:67:9a:3e:fe:a4:be:f8:3d:b2:55:80:ff:45:
aa:2c:0a:69:a5:09:e4:26:37:56:b0:7d:d3:e4:5f:
6f:04:93:5d:07:1f:d5:7a:4c:18:b2:68:35:32:2b:
33:a0:90:9c:a9:31:89:c3:a4:ce:86:ac:d2:39:f2:
2a:03:c4:5e:8f:7e:76:db:eb:2a:a0:23:6a:a0:fb:
4a:48:31:51:4a:98:63:b5:fe:1c:f7:2a:fb:60:ce:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:10:A4:61:30:88:AF:26:C2:FD:F4:44:58:59:1D:31:42:72:13
X509v3 Authority Key Identifier:
keyid:B3:26:3D:68:7D:5B:DF:B2:FB:4E:80:2A:B3:B0:03:FC:FD:26:6B:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3263D687D5BDFB2FB4E802AB3B003FCFD266B5C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b36e88d-d573-4cbb-b460-a0b969aa84d5/0/323430343a366434303a3a2f33322d3332203d3e20313338383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:6d40::/32
Signature Algorithm: sha256WithRSAEncryption
8c:22:60:14:e5:cc:ad:14:0b:24:09:a7:51:93:ae:31:5d:02:
71:8b:f3:c1:7c:be:af:61:b3:93:ee:6f:db:ac:80:c6:b8:2f:
fe:47:1c:cc:2b:47:bb:81:c0:ac:51:36:8e:88:fd:43:35:3f:
76:8c:66:6d:a1:8c:a4:b5:c8:1b:1a:de:81:4a:a3:c5:0b:0f:
15:9b:b7:aa:1a:9f:09:69:42:e2:cf:67:05:ff:87:d9:9b:9d:
42:33:78:38:15:f0:19:c5:6e:00:b5:5d:d7:f5:cf:90:c7:62:
be:b4:4e:3a:1e:27:07:d2:90:58:3c:44:56:a0:f1:33:90:0b:
0d:55:f7:2d:dc:ad:f0:26:60:72:8c:9c:3a:87:17:5e:cb:fb:
d4:cf:e6:68:3f:41:6e:54:97:64:a3:72:5e:ac:31:54:20:0c:
7b:9c:dc:cc:48:2e:52:69:4e:c1:b5:20:7d:93:0f:66:6d:20:
81:0f:f3:33:e5:13:3e:da:b4:68:a8:40:00:b7:ce:ab:58:79:
fc:d8:14:cf:ba:ea:16:f4:cf:8f:e7:bd:fd:ef:04:cd:c3:b5:
85:79:88:4b:c4:be:ec:4a:15:6c:a3:3e:2b:83:fe:ac:ee:ee:
d7:3e:e8:18:d0:30:43:93:0c:45:6e:26:79:b9:b3:c3:6a:c1:
09:32:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:34 2024 by rpki-client on console-fra.rpki-client.org