Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31322e302f32322d3232203d3e203436303233.roa
File: 3137352e3130362e31322e302f32322d3232203d3e203436303233.roa (raw, json)
Hash identifier: B6AdHejdrOl9zQjhqKMDiYuf9R1xs/qzkain80YXdZ0=
Subject key identifier: 50:C1:C1:22:57:84:41:0C:EF:CC:12:65:C5:02:AA:5D:96:E7:D1:5E
Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial: 3EF21EBDCA5A2400C13D3C2918DAD225C4FA21CE
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31322e302f32322d3232203d3e203436303233.roa
Signing time: Mon 12 Aug 2024 15:27:50 +0000
ROA not before: Mon 12 Aug 2024 15:22:50 +0000
ROA not after: Mon 11 Aug 2025 15:27:50 +0000
asID: 46023
IP address blocks: 175.106.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 12 Nov 2024 12:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f2:1e:bd:ca:5a:24:00:c1:3d:3c:29:18:da:d2:25:c4:fa:21:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Validity
Not Before: Aug 12 15:22:50 2024 GMT
Not After : Aug 11 15:27:50 2025 GMT
Subject: CN=50C1C1225784410CEFCC1265C502AA5D96E7D15E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e6:6f:db:91:50:50:38:e8:ab:4f:9a:9d:d7:
1a:e1:ab:37:74:80:60:38:b8:4e:a2:c2:d9:0d:40:
bb:d6:54:c3:c4:4d:38:0a:84:ed:9b:a9:93:e5:ed:
8a:c2:3e:15:f5:77:f3:0f:ff:3a:d2:24:c3:bc:d5:
86:aa:f1:3d:24:53:c7:f5:84:60:fa:a0:f4:81:16:
cf:ce:eb:ca:6f:65:da:1a:d1:f6:85:45:f0:f6:a2:
43:1f:c2:03:11:0e:f6:8c:07:7b:b3:54:a4:19:ab:
6a:fb:c7:d3:04:8e:7a:2c:8f:b0:e7:be:8f:14:67:
0b:92:af:ba:2f:63:dc:a0:6c:f7:66:b1:67:7a:b7:
cd:2c:7b:11:43:b9:90:e2:3b:c2:69:60:57:5e:8e:
5f:42:be:0a:b8:d8:54:0f:51:07:92:1c:8a:5c:9e:
92:fa:06:5f:42:36:c9:f4:32:af:78:2a:53:e9:94:
bb:52:c2:7f:41:38:2a:1c:76:56:a0:b1:e9:aa:3e:
ca:47:a3:2c:7b:ff:2b:81:5f:fc:9c:d6:bb:f6:04:
58:ab:4b:c4:d2:c9:15:a3:5d:22:72:66:a3:e5:87:
12:38:87:e9:bb:e6:ee:a6:89:32:79:d7:54:38:84:
d3:dc:46:8d:c5:e3:6a:ec:6e:85:b8:bf:8f:b9:73:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C1:C1:22:57:84:41:0C:EF:CC:12:65:C5:02:AA:5D:96:E7:D1:5E
X509v3 Authority Key Identifier:
keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31322e302f32322d3232203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.106.12.0/22
Signature Algorithm: sha256WithRSAEncryption
63:a3:64:48:a1:1d:2c:9e:ba:c7:10:8b:80:99:a1:07:04:41:
09:a8:db:91:c7:82:fc:8e:76:00:6e:90:14:f6:e3:26:35:91:
88:89:52:8d:24:93:53:0c:cd:e7:04:1d:51:08:d8:9a:6e:46:
c8:8d:a7:b9:e1:e4:65:70:71:70:c6:8b:ba:a5:93:52:dc:d8:
96:34:0e:fa:26:64:da:67:c0:6b:54:c8:d6:6a:f6:d8:89:f2:
ff:2e:77:23:33:a3:aa:d4:fb:91:a4:5e:2c:d2:04:a4:d9:ed:
68:2e:28:d7:2a:99:fa:5e:d0:16:65:a5:c1:de:84:27:68:fb:
bd:64:00:17:ea:74:16:6c:fd:fd:34:52:29:6c:c8:07:d1:d4:
7d:dd:81:b4:bb:a5:f6:45:3d:da:2a:b8:93:d8:ce:00:6f:02:
22:d1:0e:eb:e5:c2:f1:82:ea:fd:dc:5e:c4:30:9f:1c:4c:6d:
bc:73:29:95:4f:5b:a0:c9:97:fe:68:e0:46:4d:d4:0a:b4:7f:
93:41:fb:de:cc:6d:48:6b:57:ae:4f:41:9c:27:ca:d7:a5:81:
d8:03:03:f4:bd:eb:c2:0d:97:d4:e0:01:ad:d0:49:01:ae:3d:
ad:71:22:9a:57:f6:97:91:f7:1c:71:27:07:82:cb:32:64:cc:
2d:bc:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:10 2024 by rpki-client on console-ams.rpki-client.org