Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/3230322e35312e3233312e302f32342d3234203d3e203338313434.roa
File: 3230322e35312e3233312e302f32342d3234203d3e203338313434.roa (raw, json)
Hash identifier: 0rDLEJvBazH8N0mREFK9NqLZeFgiMfjEFevgHpVnr0Y=
Subject key identifier: 34:42:41:60:E7:D0:B8:FB:89:15:38:A9:3C:37:2B:94:2F:F5:EA:6D
Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101
Certificate serial: 479AF3DD36A896435D9FAE352637660B188E9B8E
Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/3230322e35312e3233312e302f32342d3234203d3e203338313434.roa
Signing time: Wed 13 Mar 2024 05:36:39 +0000
ROA not before: Wed 13 Mar 2024 05:31:39 +0000
ROA not after: Wed 12 Mar 2025 05:36:39 +0000
asID: 38144
IP address blocks: 202.51.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 04:41:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:9a:f3:dd:36:a8:96:43:5d:9f:ae:35:26:37:66:0b:18:8e:9b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101
Validity
Not Before: Mar 13 05:31:39 2024 GMT
Not After : Mar 12 05:36:39 2025 GMT
Subject: CN=34424160E7D0B8FB891538A93C372B942FF5EA6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:eb:4e:c0:8d:93:3a:75:50:9e:5c:89:13:
15:d6:6b:57:d9:79:fd:c5:17:ae:0b:20:d8:3b:e5:
32:7b:b8:6e:d5:4c:94:0f:f8:2d:6b:a2:0e:a5:53:
57:26:f4:a4:dc:9b:c5:72:ea:fc:e8:8d:4e:db:81:
d6:66:87:c5:f1:e3:a3:03:30:be:da:49:c2:86:0a:
c7:8b:57:9e:18:97:87:97:01:00:4b:fc:82:76:6a:
f1:8e:6a:4a:84:39:fa:d8:5e:ff:21:4a:61:20:3a:
e7:12:9d:40:64:f3:be:95:f2:9d:ac:63:69:1c:34:
60:cf:e4:a3:c3:ef:ec:a7:dc:ea:25:6a:a7:bb:8d:
4b:cf:96:d7:d0:61:25:cc:bd:0e:b0:09:c3:eb:40:
1e:3b:e8:dd:53:98:7d:e6:f9:3a:58:15:31:30:81:
7d:cd:bd:8f:32:47:55:9a:8d:38:d8:68:22:78:2a:
fe:90:ab:17:e8:22:c4:e4:00:24:7b:07:5b:09:58:
75:80:08:ad:97:15:42:45:28:a2:96:7e:23:7d:34:
1f:67:36:12:b5:18:28:d9:0f:97:b7:ba:a9:aa:ed:
e9:2c:a8:ca:e4:be:08:a6:6e:7c:59:8a:1a:0b:b8:
43:fa:a1:d5:ac:e3:89:c7:f0:a1:31:42:27:11:fd:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:42:41:60:E7:D0:B8:FB:89:15:38:A9:3C:37:2B:94:2F:F5:EA:6D
X509v3 Authority Key Identifier:
keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/3230322e35312e3233312e302f32342d3234203d3e203338313434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.231.0/24
Signature Algorithm: sha256WithRSAEncryption
66:17:c8:14:d6:17:1f:bf:7c:2f:c4:3b:d5:f0:ed:ff:cb:d2:
10:66:7c:01:73:73:72:17:6a:2b:5c:1c:34:46:92:2e:f3:79:
6a:95:cc:4a:78:6f:54:96:98:dc:61:3c:50:66:80:55:dc:ff:
aa:6e:18:be:4c:e4:8a:de:74:34:35:bd:ce:8b:cf:8c:d6:40:
4d:56:fb:fc:f9:b2:f3:51:dd:71:94:70:4b:c9:86:42:f6:50:
88:e6:df:01:5d:45:fa:6c:6e:96:ad:fd:ea:36:ca:83:cd:6c:
7b:b9:b7:0a:cb:7c:14:55:dd:b9:b5:b9:81:ba:8c:82:61:7d:
9b:8e:a5:ee:79:a2:ee:61:d3:ff:f6:24:f7:86:07:01:1a:36:
2f:b3:a0:c4:3e:b3:3b:00:cd:93:b7:f2:5f:c1:cb:50:cd:50:
99:c7:34:cb:44:e2:99:ed:ae:69:0c:4d:61:c8:27:d2:1b:e9:
be:0a:c9:e5:e7:ee:a2:11:f7:bc:1b:f8:07:a9:6c:24:ed:0a:
b4:37:1c:ed:41:fe:d8:e1:77:a5:4d:ef:31:ad:05:3f:d4:1f:
c2:0c:b5:8e:0d:a4:ef:f7:8f:00:12:c7:58:63:44:3e:6e:dd:
f1:bb:3b:e6:c2:ab:5e:a7:82:36:64:bb:1a:d7:25:00:a7:1f:
77:d9:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org