Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31362e302f32312d3234203d3e203138313132.roa
File: 3230322e35372e31362e302f32312d3234203d3e203138313132.roa (raw, json)
Hash identifier: 4zd5fxG/umjET34D4V+hFyzZ9wTabvO7GfPmnwMP/eQ=
Subject key identifier: A0:4D:B8:F5:5F:5A:D3:0C:D6:C3:EC:DE:E1:FB:58:5D:28:97:DB:20
Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial: 3344FDDD4EA88B418A749A1B966313045390F0C9
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31362e302f32312d3234203d3e203138313132.roa
Signing time: Tue 18 Apr 2023 06:00:01 +0000
ROA not before: Tue 18 Apr 2023 05:55:01 +0000
ROA not after: Tue 16 Apr 2024 06:00:01 +0000
asID: 18112
IP address blocks: 202.57.16.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:44:fd:dd:4e:a8:8b:41:8a:74:9a:1b:96:63:13:04:53:90:f0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Validity
Not Before: Apr 18 05:55:01 2023 GMT
Not After : Apr 16 06:00:01 2024 GMT
Subject: CN=A04DB8F55F5AD30CD6C3ECDEE1FB585D2897DB20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5f:49:40:71:09:78:06:b9:b6:e7:4a:c9:0d:
10:b7:47:56:7d:a9:0b:7f:7f:35:f1:d3:53:82:73:
fb:c6:e4:87:53:23:3d:d1:6b:b2:32:bc:a0:53:f4:
8f:5d:92:b1:4d:db:37:a8:1a:09:0b:af:4f:8d:91:
90:37:bf:f1:56:8d:e4:53:29:3a:d0:68:93:f3:b3:
9b:41:08:60:14:4e:21:58:4e:47:49:6f:41:a5:57:
f0:8d:5e:df:59:c2:3e:98:80:63:1e:71:3d:6d:7a:
08:7b:28:ae:ce:bc:a4:21:03:d4:eb:3e:53:93:1c:
a6:f0:8a:85:ab:65:0f:e2:bc:26:65:4a:09:ba:fd:
2a:be:75:c4:e2:b5:74:22:ff:23:51:f6:d2:5b:16:
b7:05:6c:c1:94:00:b8:21:f0:37:ad:ff:1b:01:a7:
93:72:f6:95:a3:2d:ec:8e:a3:01:3b:68:2b:f7:68:
9c:14:ac:6b:af:cc:52:09:ce:0b:81:92:3a:ea:2e:
f6:7b:13:86:e4:71:d2:c4:80:97:99:a9:b0:17:aa:
c9:00:30:8d:41:fd:1b:22:92:03:06:00:07:f9:14:
e2:a0:f5:b3:bb:02:4f:4b:12:11:d0:39:ed:dc:fc:
6b:4b:79:b5:49:27:c0:ca:a3:ec:7f:9f:2f:51:da:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:B8:F5:5F:5A:D3:0C:D6:C3:EC:DE:E1:FB:58:5D:28:97:DB:20
X509v3 Authority Key Identifier:
keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31362e302f32312d3234203d3e203138313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.16.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:8f:b9:a4:c1:92:b9:38:54:a3:f3:0d:27:61:f3:fe:8e:dc:
69:aa:73:52:1c:99:ee:15:d5:f7:2b:86:9e:c4:51:11:fb:54:
d7:5f:fa:1f:ca:46:88:03:fc:08:75:c9:03:fc:8b:ae:a1:6a:
be:12:cf:79:4e:3f:a5:93:e0:f3:59:b3:40:8d:66:c0:0e:ec:
19:73:1c:2c:cf:aa:9e:2e:c4:99:48:ab:dd:6b:fc:67:81:70:
ca:7f:e0:34:a7:16:19:28:02:68:3b:75:7e:9b:6e:0c:a3:78:
0a:9b:2a:59:1c:a1:0a:62:95:d7:52:f7:d6:8f:92:59:56:0b:
d4:a6:ba:2c:f6:ce:88:e7:b6:fb:b2:55:2e:c8:87:71:ec:49:
f1:14:23:5a:68:c6:85:b1:e7:05:c9:e4:79:b5:5b:bd:eb:0b:
a2:c0:c3:b4:8d:85:62:6f:73:dc:37:6b:58:e7:fe:2d:cb:1e:
7f:23:ea:7b:37:24:9e:2a:73:d2:72:01:60:3c:08:87:89:04:
88:df:e0:9c:ad:d5:56:bf:92:2d:8d:cb:12:a4:02:bf:77:7d:
52:1b:7c:31:e4:2e:26:3a:91:fd:1c:fa:14:1a:e9:8f:5f:9d:
3f:08:3d:d6:ac:37:de:39:30:0f:9e:7a:23:77:db:24:ad:31:
e1:e5:e0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org