Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e31302e302f32332d3233203d3e203436303233.roa
File: 34332e3235322e31302e302f32332d3233203d3e203436303233.roa (raw, json)
Hash identifier: zXp++nwLzahb49ktu+3dZOY7tASvWjLqju04MCOg5yk=
Subject key identifier: 50:45:F9:A9:BD:19:C9:4A:FD:58:20:B6:23:29:1C:25:C4:BB:C6:64
Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial: 3566CBAAB7E200C22589351B7EDF7DE33D1A195B
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e31302e302f32332d3233203d3e203436303233.roa
Signing time: Mon 12 Aug 2024 15:17:52 +0000
ROA not before: Mon 12 Aug 2024 15:12:52 +0000
ROA not after: Mon 11 Aug 2025 15:17:52 +0000
asID: 46023
IP address blocks: 43.252.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 12 Nov 2024 15:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:66:cb:aa:b7:e2:00:c2:25:89:35:1b:7e:df:7d:e3:3d:1a:19:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Validity
Not Before: Aug 12 15:12:52 2024 GMT
Not After : Aug 11 15:17:52 2025 GMT
Subject: CN=5045F9A9BD19C94AFD5820B623291C25C4BBC664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:a2:40:2c:ee:e0:a3:cf:88:d1:ff:96:10:
35:d5:1a:c4:9e:8d:e9:d8:96:f4:1b:33:3a:01:c6:
55:10:d3:1c:db:62:4e:74:e4:c8:a0:45:42:0a:68:
1f:89:ac:0a:68:86:dd:3b:bc:02:63:9d:15:e2:07:
b3:77:cb:04:be:ac:ef:2b:01:87:b9:0c:dd:53:b2:
06:b6:c6:74:22:32:98:8d:ce:77:76:34:eb:37:83:
b3:8c:da:db:13:fb:3a:50:79:9d:03:90:8b:93:4f:
6b:1f:e8:4a:2e:af:c5:57:a9:0f:d8:c8:54:c8:f2:
14:b8:63:f6:33:e3:1d:ef:fc:38:39:18:29:30:1d:
78:c1:6e:1f:36:57:be:0f:d1:52:eb:2a:9a:73:a0:
cb:a5:c3:26:e0:15:d1:c8:79:02:98:79:ae:90:a1:
d7:05:49:8e:11:e2:bf:8b:8f:e4:59:4f:a7:47:b8:
81:32:60:6d:7b:e6:37:8f:a7:3c:16:ff:cb:7d:44:
0c:26:a4:90:b4:9b:9d:5e:83:29:20:2d:28:6a:7c:
68:7f:19:06:45:af:9f:76:19:ce:4e:29:c5:cc:38:
4b:b0:b1:0f:4b:d0:b7:c6:01:43:38:50:7b:b2:a7:
d7:9b:2f:e4:71:87:80:2f:9a:a0:74:b9:1d:16:0a:
a2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:45:F9:A9:BD:19:C9:4A:FD:58:20:B6:23:29:1C:25:C4:BB:C6:64
X509v3 Authority Key Identifier:
keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/34332e3235322e31302e302f32332d3233203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.10.0/23
Signature Algorithm: sha256WithRSAEncryption
34:cb:c0:06:c1:e6:e9:2d:0b:5e:eb:ba:e8:b8:6b:47:d2:5f:
b1:21:44:93:a6:68:bd:8c:6f:92:3f:34:f4:fc:70:23:e0:a5:
05:55:67:f5:c2:ae:3a:c6:21:39:b5:82:4a:c5:31:c7:16:f2:
e9:44:6d:4b:d3:c4:12:69:f3:5c:bf:6e:f2:11:af:82:0e:72:
d1:07:3e:15:08:c8:61:6e:31:d1:d8:6b:7b:b4:cf:5f:e8:86:
88:54:d5:e8:5b:68:95:c7:3a:ac:47:56:f7:c7:55:82:4c:8d:
f3:46:8e:fc:43:36:2d:6e:a8:65:73:13:5a:8d:07:d8:e5:16:
49:c4:ef:ff:61:22:8e:e4:7b:ca:00:a3:39:1a:7a:8d:81:52:
ca:75:68:80:ba:ba:39:40:b3:e3:32:d5:f6:98:8d:39:25:13:
ba:e4:6c:88:69:47:6d:e5:49:fa:ff:31:8d:cb:8c:0d:57:6d:
a9:d6:67:8c:c2:4a:cd:db:60:9f:54:17:c4:e9:1c:51:54:c0:
f8:0e:23:5d:9a:2c:4b:1e:30:3e:c8:09:44:0f:57:9f:3d:c2:
06:0f:07:a3:3d:1a:51:09:34:0f:f6:dd:5e:08:8f:64:97:ea:
7b:14:e2:40:f7:44:31:1e:aa:0e:a2:c1:5e:76:d7:11:3b:ad:
e3:55:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:11 2024 by rpki-client on console-fra.rpki-client.org