Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32382e302f32322d3234203d3e2039333431.roa
File: 3230322e35372e32382e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier: rV0Vw6E8saYGnw893v/v2m1j/esAf15GTzHqtJ+E2PA=
Subject key identifier: 7E:13:8F:01:AD:8E:E4:15:61:D2:3E:2A:58:DE:CF:88:8F:FE:B7:62
Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial: 51A4B1863EAE8F2C09CB3FBAB3B9D5397D507B49
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32382e302f32322d3234203d3e2039333431.roa
Signing time: Tue 06 Dec 2022 08:50:05 +0000
ROA not before: Tue 06 Dec 2022 08:45:05 +0000
ROA not after: Tue 05 Dec 2023 08:50:05 +0000
asID: 9341
IP address blocks: 202.57.28.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a4:b1:86:3e:ae:8f:2c:09:cb:3f:ba:b3:b9:d5:39:7d:50:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Validity
Not Before: Dec 6 08:45:05 2022 GMT
Not After : Dec 5 08:50:05 2023 GMT
Subject: CN=7E138F01AD8EE41561D23E2A58DECF888FFEB762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:07:87:7c:ff:99:6a:c7:cf:72:90:48:ea:
aa:20:c5:35:f2:a5:ae:14:fe:22:a0:4a:c9:39:da:
6f:c2:70:9a:18:48:37:dd:bb:08:13:c0:18:3e:a8:
77:2f:2d:5b:1d:5c:61:1d:12:36:86:f1:9d:fc:c9:
6f:9c:a0:20:de:06:04:06:4e:be:27:b9:22:c7:b6:
28:50:61:76:00:ca:e0:ba:d4:ba:e9:a6:92:93:6f:
14:44:93:dc:cc:48:9e:19:e8:1b:29:0e:be:c0:93:
53:57:ef:3f:bd:cb:99:53:3b:5c:12:a4:96:4f:03:
b0:c1:1a:c7:41:a5:2b:f9:80:ae:1e:8c:d6:23:52:
c5:51:0f:63:19:b3:0b:f9:a8:f3:58:6e:98:10:41:
61:e9:98:90:03:41:a9:08:46:30:d1:36:71:b6:f1:
87:b5:35:43:02:52:85:96:bc:4b:3f:6e:eb:6d:bb:
0b:98:3f:2f:91:eb:79:ec:9e:02:fa:c2:24:1e:21:
a4:40:d4:66:34:c1:b1:f0:66:18:b1:89:b6:85:10:
f0:ab:15:6a:7a:b5:70:45:4f:6f:cd:ec:06:d4:92:
d9:58:6c:88:d7:2e:8b:3f:92:0c:9b:64:f0:a1:64:
67:09:9f:df:24:7f:27:09:bd:b5:2c:2c:b2:2e:0f:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:8F:01:AD:8E:E4:15:61:D2:3E:2A:58:DE:CF:88:8F:FE:B7:62
X509v3 Authority Key Identifier:
keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32382e302f32322d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.28.0/22
Signature Algorithm: sha256WithRSAEncryption
33:38:9c:9e:60:2a:0b:1d:ac:43:37:72:0d:1e:3d:b3:d1:74:
50:95:33:e1:05:52:48:ba:06:fb:90:c0:e9:95:68:bd:4a:91:
67:f4:dd:29:89:d6:27:d9:64:1b:e8:07:d9:f5:ba:bb:a0:dd:
b1:e9:7e:97:9f:52:a2:60:e5:3b:5f:50:e9:2e:bd:39:bd:90:
8c:6e:38:b1:0c:b2:2a:35:3b:e3:4b:6a:38:0b:7c:4e:ee:6a:
a2:79:72:43:f5:40:30:cc:49:7c:41:f8:79:10:fd:46:15:1f:
e9:31:f3:db:72:3e:62:71:0b:7f:2f:df:d9:98:93:b9:02:24:
a1:ba:36:1f:27:01:2e:3c:cc:17:42:5f:b7:e3:fe:62:1b:63:
d7:2b:56:d0:7e:e0:d0:61:1c:2e:1a:e8:bd:07:24:29:48:46:
46:99:6d:07:7c:9f:97:f3:fc:05:f7:ee:53:06:76:ce:5d:2a:
f4:c1:29:4c:3a:d1:fc:7d:8c:f7:dd:39:fb:0d:a7:1f:73:f1:
7e:cc:7f:3a:9e:40:be:9a:e4:98:f3:06:61:6a:2f:d6:0a:d5:
82:37:16:1f:83:05:ea:10:3b:03:fc:a2:e8:2d:65:2e:42:ab:
c7:4f:9a:c7:b7:57:13:f0:14:5b:49:bc:b9:57:16:7b:1d:c6:
cf:2a:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org