Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/3136302e32322e31322e302f32332d3233203d3e20313532373935.roa
File: 3136302e32322e31322e302f32332d3233203d3e20313532373935.roa (raw, json)
Hash identifier: Kvi+amxrHxyIsfV0EjHgF1eni9TtBsrSwYUrSWYWk1k=
Subject key identifier: 11:9C:57:B3:2B:EC:4C:B0:45:52:2A:6A:8A:25:24:5F:5D:A2:32:81
Certificate issuer: /CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069
Certificate serial: 70E1F477DC0552C529C2435D5BCCBDB212D3F2D9
Authority key identifier: 58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/3136302e32322e31322e302f32332d3233203d3e20313532373935.roa
Signing time: Mon 19 Aug 2024 02:02:45 +0000
ROA not before: Mon 19 Aug 2024 01:57:45 +0000
ROA not after: Mon 18 Aug 2025 02:02:45 +0000
asID: 152795
IP address blocks: 160.22.12.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 23 Aug 2024 05:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e1:f4:77:dc:05:52:c5:29:c2:43:5d:5b:cc:bd:b2:12:d3:f2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069
Validity
Not Before: Aug 19 01:57:45 2024 GMT
Not After : Aug 18 02:02:45 2025 GMT
Subject: CN=119C57B32BEC4CB045522A6A8A25245F5DA23281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:ee:b8:9a:2b:44:32:db:4f:b7:c9:9d:59:
63:bc:9d:5c:52:a6:b3:86:44:11:91:5f:88:ed:7d:
e5:1e:00:a7:e4:61:4c:e9:9d:30:e7:13:a0:3f:e5:
21:ba:06:b3:fc:4f:cf:70:06:52:9d:d6:a3:ba:57:
c4:e1:72:44:89:ce:29:36:41:f0:2c:9d:2d:f6:6e:
44:db:a6:27:43:66:9b:61:ee:22:62:cc:69:52:88:
d9:31:42:04:d0:b7:ae:c2:1c:47:14:1a:60:0a:f9:
3a:11:37:e2:21:36:ce:90:d1:b0:58:af:5f:cf:fb:
12:00:b8:af:1c:c4:aa:8a:bb:d8:54:22:68:ef:2a:
e2:08:17:2e:c3:ec:66:d7:96:6c:b8:a3:a6:59:16:
39:ae:ac:0c:4f:ad:74:a0:17:20:b0:4b:a3:b3:dd:
a2:19:5f:9c:ac:4e:2b:f1:98:ec:4f:56:d9:67:af:
ee:e8:cb:97:c5:e2:5a:ec:bf:6a:46:13:40:89:ca:
ed:33:b0:bc:36:39:0c:ff:a0:b5:0b:f8:41:43:eb:
ca:23:2b:0f:15:cd:bb:12:d3:81:77:bd:c0:38:e4:
a2:9a:aa:d0:6c:aa:13:24:20:74:b2:b4:49:7a:e5:
e9:ca:7d:55:0e:88:5a:fc:f7:f0:58:6a:3b:22:fc:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:57:B3:2B:EC:4C:B0:45:52:2A:6A:8A:25:24:5F:5D:A2:32:81
X509v3 Authority Key Identifier:
keyid:58:8D:D0:FC:E4:BC:24:3C:C9:C6:D6:8A:E0:4E:84:67:E0:E4:D0:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/588DD0FCE4BC243CC9C6D68AE04E8467E0E4D069.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/0/3136302e32322e31322e302f32332d3233203d3e20313532373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.12.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:ae:d7:b0:ea:4e:d1:2c:77:23:ce:f3:d3:85:8d:1e:fe:43:
1b:08:0a:32:72:ad:44:0a:8e:74:98:e7:17:65:44:dc:2f:d9:
72:0e:24:31:3a:a3:0f:61:53:14:ac:43:4e:7c:b7:34:61:d9:
33:d6:d7:16:28:72:e9:dd:8a:33:89:a8:6c:07:f1:d0:05:c0:
cb:c6:a0:32:90:95:cd:9a:88:9a:c1:d3:29:a7:b8:bb:5e:0d:
d0:b2:81:31:9e:b4:63:ea:22:45:a4:6e:a2:e3:14:47:e2:05:
62:e2:68:96:8f:1d:8c:69:48:10:44:8f:d0:e1:59:d2:8c:16:
f2:aa:5c:7c:66:d0:0d:de:71:ad:31:11:21:7c:33:fd:49:da:
ca:79:3e:50:c7:62:b3:37:38:90:ba:70:81:a2:8d:6a:d9:b5:
48:89:49:4a:28:5e:b7:35:d5:f5:f0:53:65:97:e2:cb:bf:0b:
d7:8b:27:c9:73:98:fe:8e:fc:e9:38:ff:10:5a:d7:d0:87:e5:
0e:aa:5f:24:db:df:35:42:a0:f7:d2:ad:f1:ef:36:f5:bd:d0:
77:0f:90:16:e7:00:50:fe:3b:ac:ac:a7:49:b4:0f:07:af:1a:
bb:50:93:62:b9:64:5a:7a:7c:63:27:28:42:be:b6:80:ca:a9:
13:0c:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 09:29:20 2024 by rpki-client on console-ams.rpki-client.org