Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f31372d3137203d3e203130323137.roa
File: 3131392e31312e3132382e302f31372d3137203d3e203130323137.roa (raw, json)
Hash identifier: IhgpdujkbMGhaFcf7nL7YR0R5QE15tEEB3El/aeQSPg=
Subject key identifier: 47:0C:E7:40:C1:14:17:31:7D:D9:78:5F:2B:D0:EC:70:AC:B8:77:81
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 02F887B592CCCBEABB8FF6E36C16A4FA937E41F0
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f31372d3137203d3e203130323137.roa
Signing time: Thu 31 Aug 2023 06:00:03 +0000
ROA not before: Thu 31 Aug 2023 05:55:03 +0000
ROA not after: Thu 29 Aug 2024 06:00:03 +0000
asID: 10217
IP address blocks: 119.11.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f8:87:b5:92:cc:cb:ea:bb:8f:f6:e3:6c:16:a4:fa:93:7e:41:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Aug 31 05:55:03 2023 GMT
Not After : Aug 29 06:00:03 2024 GMT
Subject: CN=470CE740C11417317DD9785F2BD0EC70ACB87781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ae:a8:00:a4:a1:ae:22:63:77:c7:2d:3e:94:
2a:18:44:6d:2b:f7:fb:c2:75:9c:20:62:7e:f7:63:
d5:8a:bc:60:ac:c8:53:5a:58:33:ed:a5:c9:97:cc:
36:0e:e1:9a:a5:2b:04:9f:a2:8e:87:36:16:72:68:
cb:2a:73:95:6d:09:9f:58:c1:03:c6:1a:fc:3c:cb:
93:05:1a:05:34:19:44:1e:1d:0b:5f:f4:c1:39:45:
eb:fa:03:e2:90:73:73:b4:08:6e:6a:fb:cb:f5:c4:
9b:f5:a1:33:92:85:f5:25:92:8b:01:c9:a3:ab:93:
c0:13:38:d6:89:9e:5b:4d:de:5e:6d:a6:60:16:c4:
71:82:10:02:dc:77:6d:88:0d:f4:3a:9e:3f:b5:89:
64:7b:7c:2c:3e:e3:44:01:c3:7e:7b:c5:45:e0:81:
85:9f:01:02:87:1e:84:bc:b7:58:48:19:c0:a4:1d:
c2:24:d8:15:94:b4:35:c1:9f:e9:ed:1b:27:ae:90:
ab:4a:40:d7:e5:92:79:c8:40:32:85:83:46:9c:4e:
bf:5f:3d:26:cc:29:8c:7a:30:7c:8f:59:d9:65:8b:
eb:56:db:ab:ab:b6:45:cc:f7:99:b5:fd:71:c7:c1:
57:2e:4f:a9:c4:10:6c:66:8a:94:42:4e:cf:c7:19:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0C:E7:40:C1:14:17:31:7D:D9:78:5F:2B:D0:EC:70:AC:B8:77:81
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f31372d3137203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1c:ae:db:f0:f1:0b:27:fe:6e:17:55:77:30:0a:78:7d:20:29:
33:7d:c8:85:99:69:79:c5:73:d0:7a:4c:7d:4f:27:36:5d:cb:
5a:31:4b:3d:ec:32:7e:80:0f:b7:d4:29:2f:05:64:5b:cb:95:
c2:60:54:f7:34:8b:b1:c1:5b:ed:48:d3:28:c4:25:fe:e8:e9:
11:44:a5:1c:0b:f0:9c:ea:84:f3:0b:ca:b7:0d:45:9b:34:50:
07:15:76:31:ff:7a:4e:d4:1c:2b:7a:c4:12:cd:6b:9b:77:70:
cd:e8:61:a0:6c:59:cf:4f:39:16:a1:95:da:ba:6b:62:fc:b7:
58:6d:f8:0c:81:a5:e6:77:dc:23:e7:63:d3:52:b3:37:1d:82:
bf:9b:02:8e:60:14:17:56:c5:45:5b:65:4a:4d:cf:80:77:a2:
3b:4b:1e:51:f3:87:90:b9:8f:9a:3e:ac:b3:82:ad:49:80:ee:
de:bc:71:2e:fa:1a:55:f6:87:c1:64:52:f8:79:80:bf:63:e9:
ca:a7:16:45:af:d7:09:23:04:97:ac:63:75:cb:ec:77:ef:88:
9a:82:a3:61:2d:60:21:40:55:e5:09:34:e2:e7:24:8e:91:e0:
f7:d9:7b:b8:5e:e0:b8:90:bf:7c:2e:54:a3:b5:81:e8:47:cf:
19:ae:8e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org