Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3234382e302f32332d3233203d3e203538333831.roa
File: 3230322e34332e3234382e302f32332d3233203d3e203538333831.roa (raw, json)
Hash identifier: ZU1HEpye1EkkTb+MDaH7lFxqkp518lbfQGlZ5V2oNoY=
Subject key identifier: F7:95:3D:3A:3D:60:D8:9C:80:ED:5F:EB:9F:0E:BE:FA:04:6E:2A:11
Certificate issuer: /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Certificate serial: 462A17167B41D590AF03EB0DFD5481649C0DEE35
Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3234382e302f32332d3233203d3e203538333831.roa
Signing time: Mon 31 Jul 2023 00:09:41 +0000
ROA not before: Mon 31 Jul 2023 00:04:41 +0000
ROA not after: Mon 29 Jul 2024 00:09:41 +0000
asID: 58381
IP address blocks: 202.43.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 29 Jan 2024 01:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:2a:17:16:7b:41:d5:90:af:03:eb:0d:fd:54:81:64:9c:0d:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB
Validity
Not Before: Jul 31 00:04:41 2023 GMT
Not After : Jul 29 00:09:41 2024 GMT
Subject: CN=F7953D3A3D60D89C80ED5FEB9F0EBEFA046E2A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:85:ad:22:9f:0e:38:76:44:62:62:10:ed:
35:38:42:fa:cc:bb:94:90:71:9f:1e:dd:6e:99:7a:
41:2c:54:8c:f3:b7:1a:5c:ae:f0:a0:01:35:57:3a:
e0:11:6e:c6:15:2f:1b:3c:5a:c8:86:0c:c1:f4:86:
dd:b2:8c:a5:26:35:2b:dd:0d:09:f4:b5:13:90:d4:
a6:48:ce:97:b9:f7:24:c9:4b:7c:1c:1e:5c:bc:9c:
89:5e:5b:67:c0:eb:81:c5:54:fe:c6:f6:7f:b0:b0:
81:57:39:f4:bb:a5:5e:5b:fe:5f:49:fd:9e:3e:91:
f1:e9:73:f9:70:ed:8a:4c:98:91:5c:f7:cf:98:65:
0d:72:4f:2c:f7:50:9a:7e:69:da:88:c9:b5:60:35:
36:26:22:e1:d0:be:23:1a:23:41:6c:b4:da:bd:7e:
21:99:db:2e:79:42:f0:eb:c1:47:4f:92:47:2c:24:
cf:a3:c7:62:f0:38:74:89:2b:73:7d:1d:53:c4:30:
b3:1c:7f:7d:4b:4a:ee:c5:db:69:23:c0:06:1d:55:
e8:5d:9e:62:e1:87:96:73:0f:33:a2:3f:71:d6:6d:
e0:ee:1d:47:bc:1d:58:a3:c2:ea:1d:c1:90:42:09:
0a:70:97:fa:82:8c:ed:f9:57:4e:26:22:4d:04:7c:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:95:3D:3A:3D:60:D8:9C:80:ED:5F:EB:9F:0E:BE:FA:04:6E:2A:11
X509v3 Authority Key Identifier:
keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3234382e302f32332d3233203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.43.248.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:ed:47:7d:83:97:8e:1d:d7:07:95:c6:d9:f7:3d:ff:bc:10:
fc:4e:8b:da:39:d0:c6:ee:44:f0:ce:f9:bb:0c:c7:a2:33:b3:
ef:38:b1:d4:3b:b9:fb:42:a2:31:8a:dc:e9:ca:b2:a5:1b:a7:
31:ca:b8:ac:67:9a:2e:d4:d3:5a:c6:74:a0:e4:88:f1:a9:1a:
6f:5b:9f:1e:f0:82:f6:24:75:f1:05:3b:6e:87:5c:02:5e:95:
b6:e0:5f:61:81:d9:6a:8c:8f:0d:e9:5d:6a:00:ea:1b:28:00:
b4:90:bf:44:6f:29:c7:f1:1a:e0:2c:01:ae:e7:cf:ef:2d:e7:
00:64:9e:6c:a2:40:3e:f6:32:a8:d9:30:44:a5:54:27:ac:75:
09:31:42:28:54:b0:6e:23:5b:3d:89:cf:10:68:ed:f2:1c:8d:
ad:0b:15:ef:93:d9:ad:51:ac:28:d3:e7:5d:aa:c2:0b:a4:99:
ce:fa:59:f9:95:56:a6:71:82:7d:4b:44:ba:17:f5:13:65:6b:
dc:67:1a:0d:2b:91:da:62:87:de:47:b1:43:3c:42:be:0d:da:
34:95:3f:48:65:3e:cd:45:2d:2c:19:e6:56:50:b8:63:8e:27:
b7:0a:55:40:80:eb:de:40:a7:d3:44:2f:29:2d:0c:6f:cd:9f:
ab:20:5b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 02:30:30 2024 by rpki-client on console-ams.rpki-client.org