Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e2034383231.roa
File: 3232332e32352e3131302e302f32342d3234203d3e2034383231.roa (raw, json)
Hash identifier: a2h9ssVzLQJpgOPsJVnCp6+ml9RilIEjmIk7m2PFr+c=
Subject key identifier: 50:7E:BD:59:F0:7E:C9:43:FF:2D:2E:3D:9B:AE:25:49:C8:F5:54:DD
Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial: 42E9BDDDA3BDE9D486DA0CD6041D042EDD457041
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e2034383231.roa
Signing time: Sun 28 Aug 2022 23:08:20 +0000
ROA not before: Sun 28 Aug 2022 23:03:20 +0000
ROA not after: Sun 27 Aug 2023 23:08:20 +0000
asID: 4821
IP address blocks: 223.25.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e9:bd:dd:a3:bd:e9:d4:86:da:0c:d6:04:1d:04:2e:dd:45:70:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Validity
Not Before: Aug 28 23:03:20 2022 GMT
Not After : Aug 27 23:08:20 2023 GMT
Subject: CN=507EBD59F07EC943FF2D2E3D9BAE2549C8F554DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:5c:0b:6d:57:36:4e:fa:0a:a5:94:1e:b8:
60:e1:e4:b7:41:93:54:14:85:c7:7a:14:ba:01:21:
e7:70:b6:c1:b3:4e:5a:d8:db:cb:f4:b8:cb:09:e7:
a1:1e:db:d9:f8:49:24:a3:cc:1d:ed:3f:3a:cb:99:
b2:2e:c4:ca:f9:ce:32:5e:85:80:20:e8:fd:a6:9e:
7c:e5:9d:21:86:32:e1:67:99:8c:4a:43:62:1d:3c:
20:07:87:0f:bd:f1:83:2c:e4:53:0d:11:e3:db:63:
61:93:83:e8:9e:a0:20:62:38:28:62:e8:c8:4c:ac:
5e:fe:22:48:29:b0:eb:41:f8:2c:77:80:13:2a:83:
26:d2:56:78:3a:30:12:f5:f2:49:4d:62:43:25:20:
07:62:ca:05:06:ea:57:e3:40:05:67:1c:92:6e:37:
61:a5:15:4e:85:50:3e:ca:8e:62:22:b5:1b:be:c3:
7b:ea:fe:dd:b1:9e:3a:a4:79:b9:9a:7a:37:15:65:
92:74:19:c1:4f:00:d7:5d:5d:8a:ea:9c:a5:bf:09:
65:3e:3a:6d:17:e7:5f:95:21:54:b5:09:6b:e1:fc:
de:d0:3f:08:6d:50:68:7b:8e:d3:d6:7d:e0:fa:fb:
4d:d8:08:1d:1f:0c:05:c7:6d:21:c0:b2:9d:eb:0f:
46:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7E:BD:59:F0:7E:C9:43:FF:2D:2E:3D:9B:AE:25:49:C8:F5:54:DD
X509v3 Authority Key Identifier:
keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131302e302f32342d3234203d3e2034383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.25.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:63:dd:be:e0:0b:14:5b:36:c7:b7:c8:70:bb:de:6f:dc:df:
1a:d3:33:cf:d7:52:70:6f:9d:4c:5a:09:6d:48:26:70:84:e9:
2a:d6:4e:85:16:8d:9d:46:f9:7b:48:07:50:27:30:53:ed:c8:
b2:7f:81:44:9a:ee:a7:3e:c9:8a:ce:5d:55:43:b0:5b:7d:ab:
b3:2f:6c:52:c8:11:84:82:2b:9b:0e:fc:aa:46:b5:e3:36:1e:
de:a7:6b:25:aa:ec:41:79:47:3f:7a:bd:9c:83:98:75:85:67:
07:3c:f8:ef:52:6b:68:0a:09:5f:26:9c:92:4c:2f:f5:4f:8f:
71:93:60:b0:49:23:8c:04:0e:89:49:56:77:95:1c:16:bc:8c:
55:cb:99:bd:72:f6:38:e1:fb:b2:1e:16:c7:7a:78:0f:ec:c4:
f2:7c:d6:64:2f:93:9b:1a:a3:7a:43:c3:38:dd:5f:8c:1b:c0:
ac:bc:20:ee:69:ef:25:e2:fa:ab:58:bb:27:e4:0a:0b:34:36:
13:75:93:09:3a:43:ce:85:fd:d7:a7:3a:0e:1f:08:59:da:b8:
4a:e2:a9:42:7a:00:d5:31:a7:8b:53:9d:b8:46:45:a8:0c:8d:
cb:03:92:5e:8d:13:f4:95:96:80:39:7c:cb:e2:67:e1:1b:ef:
d3:55:43:80
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQum93aO96dSG2gzWBB0ELt1FcEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3
RkMzODc4NzAeFw0yMjA4MjgyMzAzMjBaFw0yMzA4MjcyMzA4MjBaMDMxMTAvBgNV
BAMTKDUwN0VCRDU5RjA3RUM5NDNGRjJEMkUzRDlCQUUyNTQ5QzhGNTU0REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/VwLbVc2TvoKpZQeuGDh5LdB
k1QUhcd6FLoBIedwtsGzTlrY28v0uMsJ56Ee29n4SSSjzB3tPzrLmbIuxMr5zjJe
hYAg6P2mnnzlnSGGMuFnmYxKQ2IdPCAHhw+98YMs5FMNEePbY2GTg+ieoCBiOChi
6MhMrF7+IkgpsOtB+Cx3gBMqgybSVng6MBL18klNYkMlIAdiygUG6lfjQAVnHJJu
N2GlFU6FUD7KjmIitRu+w3vq/t2xnjqkebmaejcVZZJ0GcFPANddXYrqnKW/CWU+
Om0X51+VIVS1CWvh/N7QPwhtUGh7jtPWfeD6+03YCB0fDAXHbSHAsp3rD0Z9AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUUH69WfB+yUP/LS49m64lScj1VN0wHwYDVR0j
BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD
QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz
ODc4Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i
ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADfGW4wDQYJKoZIhvcN
AQELBQADggEBAJ5j3b7gCxRbNse3yHC73m/c3xrTM8/XUnBvnUxaCW1IJnCE6SrW
ToUWjZ1G+XtIB1AnMFPtyLJ/gUSa7qc+yYrOXVVDsFt9q7MvbFLIEYSCK5sO/KpG
teM2Ht6nayWq7EF5Rz96vZyDmHWFZwc8+O9Sa2gKCV8mnJJML/VPj3GTYLBJI4wE
DolJVneVHBa8jFXLmb1y9jjh+7IeFsd6eA/sxPJ81mQvk5sao3pDwzjdX4wbwKy8
IO5p7yXi+qtYuyfkCgs0NhN1kwk6Q86F/denOg4fCFnauEriqUJ6ANUxp4tTnbhG
RagMjcsDkl6NE/SVloA5fMviZ+Eb79NVQ4A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:48 2023 by rpki-client on console-fra.rpki-client.org