Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa
File: 3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier: v1UW8osaEUbEk2jqzSIgGLB75hzBlc2OLaIWoK4N4Xw=
Subject key identifier: 4A:A1:9D:B2:A3:66:E0:AF:8C:28:90:C5:FE:D9:0B:84:10:58:5C:B1
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 6639EC8FD2D5FACD059D0FF7B15531980363ED9B
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 05:00:01 +0000
ROA not before: Mon 26 Sep 2022 04:55:01 +0000
ROA not after: Mon 25 Sep 2023 05:00:01 +0000
asID: 59282
IP address blocks: 116.206.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:39:ec:8f:d2:d5:fa:cd:05:9d:0f:f7:b1:55:31:98:03:63:ed:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 04:55:01 2022 GMT
Not After : Sep 25 05:00:01 2023 GMT
Subject: CN=4AA19DB2A366E0AF8C2890C5FED90B8410585CB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:fb:79:84:84:74:ac:f9:a3:52:89:60:f7:
33:64:56:15:b9:49:60:c6:14:d0:1e:d0:d7:e7:3c:
a9:af:67:a8:99:42:2b:07:35:64:c4:8c:df:f6:59:
b1:d3:12:7a:85:3a:29:5f:17:57:2e:d9:c4:83:f5:
e5:ec:a3:5e:07:ec:a4:b2:03:ce:9e:9b:d8:ce:39:
57:90:6b:bb:d2:59:70:54:1e:9d:78:40:1f:15:ea:
59:16:9a:00:c9:91:7d:aa:b8:83:bf:80:45:14:a1:
a8:1a:8f:48:70:e8:66:e6:3b:7c:ba:85:6a:c8:81:
58:15:54:ea:9a:da:32:b5:33:2e:6b:1f:96:4c:0a:
6c:e7:ba:05:ae:48:bd:3d:50:f1:65:ae:6a:a6:1c:
3e:5b:88:75:7d:84:6d:55:88:f7:8b:c5:22:ab:fb:
da:53:ac:20:56:00:41:34:8c:d8:6f:c2:8a:42:2b:
f1:41:4b:93:c2:6f:fe:e5:8b:8f:1d:0c:d8:c0:01:
92:c4:07:3d:78:33:da:1d:fd:bd:5e:1e:eb:ee:3c:
d0:24:78:38:1a:6c:4b:50:13:0e:8d:d9:9e:d9:87:
1b:e2:c8:e3:78:f9:4a:f6:21:69:70:45:f9:17:d7:
17:e1:7c:5c:02:0f:0c:a9:45:00:cf:85:59:50:d1:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:9D:B2:A3:66:E0:AF:8C:28:90:C5:FE:D9:0B:84:10:58:5C:B1
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f2:cd:de:2d:b0:53:94:90:93:56:3d:d6:5c:b5:32:13:8c:
d6:f2:81:8b:91:14:41:5f:56:42:b3:5d:a7:7c:b4:ac:13:2f:
dd:b7:dc:87:45:25:6c:12:3b:7e:99:76:19:93:48:0d:93:3f:
ce:79:50:1a:99:ff:63:e8:97:5e:00:95:ff:02:a5:e4:ab:d6:
4a:76:a8:cb:a9:a3:0f:ec:23:9e:48:fa:66:5a:67:72:46:3a:
d8:9b:bd:d5:3f:06:6c:86:2c:e7:e0:ee:b9:a0:94:98:ef:65:
00:58:4a:b5:99:7d:b6:6f:55:9a:9c:60:58:d2:25:ae:d3:be:
07:aa:8d:52:e8:49:c1:cf:96:07:48:3a:0f:3e:3b:ae:a4:39:
51:bd:d6:df:3e:60:51:7c:f7:6b:47:c3:98:9f:9f:ca:79:b0:
09:21:b9:2c:09:5e:f8:86:63:1d:8d:28:75:d5:4c:79:18:98:
c2:aa:73:36:aa:dd:40:61:36:d0:6c:12:56:48:00:6d:2f:3b:
29:10:51:e6:d0:25:9e:f0:5e:a9:7e:c6:84:3a:d7:11:7c:f1:
06:1c:5c:b5:89:c5:e7:17:90:53:a0:13:fa:45:0d:1d:82:27:
d5:d5:8c:8b:2f:2b:9b:2f:37:63:f1:ca:4f:33:4f:c7:d2:61:
f7:53:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:56 2023 by rpki-client on console-fra.rpki-client.org