Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130362e302f32342d3234203d3e2034383231.roa
File: 3232332e32352e3130362e302f32342d3234203d3e2034383231.roa (raw, json)
Hash identifier: MSoI3kcUDasMST8qMcfMRQERCD2Qp2dNgZAmG7mqL0g=
Subject key identifier: 92:44:2F:87:55:52:C1:46:7C:4C:1B:A7:EC:9F:3F:7F:A8:C9:AD:B3
Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial: 6473E38C98053589E44F8B3ACCADFCDDF8B8C72F
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130362e302f32342d3234203d3e2034383231.roa
Signing time: Mon 31 Jul 2023 00:08:27 +0000
ROA not before: Mon 31 Jul 2023 00:03:27 +0000
ROA not after: Mon 29 Jul 2024 00:08:27 +0000
asID: 4821
IP address blocks: 223.25.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:73:e3:8c:98:05:35:89:e4:4f:8b:3a:cc:ad:fc:dd:f8:b8:c7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Validity
Not Before: Jul 31 00:03:27 2023 GMT
Not After : Jul 29 00:08:27 2024 GMT
Subject: CN=92442F875552C1467C4C1BA7EC9F3F7FA8C9ADB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:50:93:80:95:30:a7:14:1a:32:f1:3e:13:
18:bb:b9:93:75:e3:80:c6:23:13:76:a7:3e:52:35:
45:d8:c5:08:73:f5:4f:c5:cf:15:3f:7a:30:cb:9a:
ab:40:b4:06:42:bd:9b:b1:5b:3e:b6:43:be:39:fc:
67:51:6c:3b:85:d0:77:7a:2d:9d:18:7f:ea:aa:4f:
da:93:ba:b9:5c:0c:bd:f0:c8:fc:06:72:f7:77:ab:
df:ec:cb:32:98:17:cd:38:d7:4f:60:31:01:bf:46:
25:c1:93:97:39:d5:d5:4b:e4:f6:5e:69:36:cd:23:
93:96:18:12:1b:d1:d9:dd:91:09:fe:8e:98:c7:65:
0b:f7:90:68:47:b9:d2:0b:f9:85:7f:3b:da:85:4d:
29:e3:17:2a:0f:31:50:af:0b:33:05:3e:07:4d:fb:
34:79:7f:3e:01:35:7b:1b:84:44:b3:f2:dd:f6:21:
ad:37:8d:d7:bc:b3:e6:2a:47:66:4d:7c:bf:30:b2:
f6:16:2d:1c:bf:c4:a9:30:75:2e:c3:c4:3b:f1:19:
84:1a:db:b9:3f:9e:6f:6a:48:ae:ed:9c:d8:1b:38:
22:52:e6:7c:06:11:16:33:89:82:01:c7:50:27:e5:
1a:fa:34:90:b9:8c:15:8d:b0:53:99:4c:91:b8:a9:
33:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:44:2F:87:55:52:C1:46:7C:4C:1B:A7:EC:9F:3F:7F:A8:C9:AD:B3
X509v3 Authority Key Identifier:
keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130362e302f32342d3234203d3e2034383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.25.106.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ad:af:1c:4b:a2:6a:1d:f7:78:82:2f:83:64:a2:f2:fd:6e:
2c:6f:b9:e0:e4:82:87:be:e3:a6:ba:f2:3a:fd:f2:a2:7f:e4:
d3:88:64:23:58:57:7d:f4:cd:8a:36:65:12:fe:ea:17:e3:12:
17:f7:62:eb:96:6a:bc:05:5c:d6:6f:2f:3f:0e:10:20:5e:9e:
b1:9d:31:14:56:e8:b9:ed:36:e1:34:b5:4a:1d:3e:9f:61:c1:
7c:60:f0:75:76:f3:24:e4:7e:77:cd:94:5c:5e:42:1c:2e:5c:
b0:76:9c:de:78:1f:75:9d:3b:3b:88:34:f1:a0:3b:91:8d:b9:
65:75:8d:d1:ba:df:f2:e3:e5:86:d2:e2:91:48:7e:38:09:1b:
c7:f0:26:78:2a:2a:e5:4d:a2:1b:05:f3:b7:4b:09:3a:87:5b:
bc:6a:e4:b2:12:e8:bb:d8:c7:e9:84:bd:87:53:51:c5:b1:76:
17:ac:bb:82:4d:c2:47:39:aa:9d:a8:b7:cc:45:99:4b:21:12:
2e:8d:30:6c:e3:57:f6:9f:77:2e:5c:3a:78:f4:e5:bd:db:e1:
ec:fc:15:d2:d8:bc:6b:74:23:07:8e:00:f6:13:9c:d6:b3:2e:
73:39:dc:b8:6e:1a:92:06:03:bb:cd:3b:e4:3e:a7:eb:41:ef:
a2:4f:5f:0c
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 9 01:05:42 2023 by rpki-client on console-ams.rpki-client.org