Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31302e302f32332d3233203d3e203436303233.roa
File: 3137352e3130362e31302e302f32332d3233203d3e203436303233.roa (raw, json)
Hash identifier: dpAKWmPuUQsSRvZa14kgeBCTAXpKJsK9f5TCx+C/dv4=
Subject key identifier: 8A:53:59:45:51:CA:10:BA:4D:41:9A:6B:DE:06:D0:0C:EB:09:AF:11
Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial: 5A5A3BE88A33806BE15FDCB1B32DD7BB9FB0ECC6
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31302e302f32332d3233203d3e203436303233.roa
Signing time: Mon 12 Aug 2024 15:26:48 +0000
ROA not before: Mon 12 Aug 2024 15:21:48 +0000
ROA not after: Mon 11 Aug 2025 15:26:48 +0000
asID: 46023
IP address blocks: 175.106.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 12 Nov 2024 12:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5a:3b:e8:8a:33:80:6b:e1:5f:dc:b1:b3:2d:d7:bb:9f:b0:ec:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Validity
Not Before: Aug 12 15:21:48 2024 GMT
Not After : Aug 11 15:26:48 2025 GMT
Subject: CN=8A53594551CA10BA4D419A6BDE06D00CEB09AF11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:0a:22:27:81:69:c2:9b:ca:1e:cd:dd:9a:
39:04:7e:67:5b:14:61:f8:ae:1d:b6:95:b8:c3:6b:
b4:bd:32:5a:68:fc:b3:71:09:1a:d7:cc:00:9f:91:
5d:8e:0d:85:ad:f9:00:cf:cd:0f:ca:11:22:e1:f0:
2b:51:0b:b5:d6:e8:8e:d0:2f:93:1f:0d:bb:ee:5e:
cf:62:3e:c1:26:81:9f:db:7b:4b:5f:7c:f0:f7:9f:
41:5e:c8:a2:83:80:14:26:6c:c7:6e:42:0b:33:e6:
80:cf:43:e3:0b:c3:de:47:b6:8e:26:43:31:6a:bb:
b5:e5:7e:4f:0d:dd:18:1d:0b:7a:37:20:9d:a4:6d:
6a:b7:6d:f8:c8:72:eb:9b:d2:c2:8e:8b:10:6f:91:
98:c0:39:38:09:2b:a6:9a:c8:15:d3:98:6b:65:e0:
d7:db:24:ef:6a:87:16:40:db:4a:a8:57:cc:34:95:
de:80:3e:6d:6a:45:45:c3:b5:0d:57:8f:52:3e:c5:
a4:18:b6:4a:d4:de:93:21:28:59:a6:89:c3:4b:f5:
e1:45:73:15:96:fa:4d:dc:2d:03:43:47:10:da:b0:
c1:e6:52:5d:e9:72:94:6d:99:b9:37:5e:f0:e2:59:
30:d6:db:83:86:0a:df:8f:70:f3:f7:f2:6b:34:6e:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:59:45:51:CA:10:BA:4D:41:9A:6B:DE:06:D0:0C:EB:09:AF:11
X509v3 Authority Key Identifier:
keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31302e302f32332d3233203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.106.10.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:f3:a2:07:39:28:ec:cc:8f:ca:ea:ad:15:38:38:71:3f:18:
07:eb:f9:59:ef:fa:dd:07:3e:55:b4:6d:7f:46:2f:50:50:73:
fc:cb:59:0a:5d:0d:a1:fc:27:06:4d:f9:4d:5b:4e:14:bf:0d:
3a:12:e9:6d:ec:1f:f3:d4:fb:13:6f:20:eb:8d:94:25:8e:b6:
7d:53:03:b4:4a:90:de:7b:c5:8e:8e:a2:77:1a:18:5d:f5:f4:
8e:d9:de:b7:82:de:3c:b9:6a:9d:1f:64:d1:b5:de:7a:2a:35:
17:58:4d:e9:35:17:c2:4e:b4:60:0f:78:44:62:99:86:aa:ad:
7d:86:4e:fb:ba:58:06:d5:42:57:0f:32:57:79:71:aa:af:1e:
d0:4b:ab:74:b3:0d:6a:cc:fa:d6:39:e0:5f:f0:6c:b2:12:e8:
30:4d:14:a4:e5:90:f9:a3:6d:fc:14:ed:e6:7d:05:c4:ce:f6:
ac:41:f5:b5:ae:bb:00:ab:7f:0c:8a:95:98:92:ce:71:a1:30:
df:f4:6d:6c:b2:f8:d9:e3:5e:49:34:ce:73:5d:b5:ce:13:45:
4e:86:0f:f1:00:fe:ed:f1:a4:19:5e:71:fd:77:4e:e1:e6:f1:
fe:58:6f:b4:29:67:4c:29:be:ab:ef:74:1a:1e:af:bb:ae:4a:
b9:d3:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:10 2024 by rpki-client on console-ams.rpki-client.org