Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f32342d3234203d3e203130323137.roa
File: 3131392e31312e3132382e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier: MDLrRGAGehtrLY4wOG2DACgumy00wH3ZoE9pUkesdH0=
Subject key identifier: 8A:CC:4F:93:72:41:D0:23:13:58:E6:AD:8A:9B:FC:93:7A:22:9B:30
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 02D1FF8B6B96F28894B72C05696CDFB04CD5C2EF
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f32342d3234203d3e203130323137.roa
Signing time: Fri 08 Sep 2023 07:19:01 +0000
ROA not before: Fri 08 Sep 2023 07:14:01 +0000
ROA not after: Fri 06 Sep 2024 07:19:01 +0000
asID: 10217
IP address blocks: 119.11.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d1:ff:8b:6b:96:f2:88:94:b7:2c:05:69:6c:df:b0:4c:d5:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Sep 8 07:14:01 2023 GMT
Not After : Sep 6 07:19:01 2024 GMT
Subject: CN=8ACC4F937241D0231358E6AD8A9BFC937A229B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:11:6e:b1:40:1c:a2:2e:68:fc:1d:e6:ee:
24:04:94:0b:dc:d9:11:30:4c:d8:67:47:fa:7b:91:
25:67:93:6b:fa:97:68:44:51:97:c2:7b:40:3b:1c:
10:e9:5e:b6:40:c4:df:33:d0:eb:b5:d7:3c:15:50:
8a:b5:c8:43:46:ee:b1:92:6d:f7:72:5e:84:63:b9:
42:1a:34:3a:9b:be:82:5a:28:e6:50:33:fe:2b:0f:
30:5b:99:9b:0f:ba:c9:e0:be:82:65:03:0b:43:16:
6d:dc:f6:44:d3:26:05:8b:5d:46:c6:26:e1:8b:03:
1f:25:41:bc:46:9b:ee:67:d2:8e:dd:ea:90:8f:a9:
3f:11:0e:ae:68:1d:86:65:b2:b8:0d:74:4d:5a:7e:
35:ed:a0:2f:95:86:f8:0a:f2:9e:34:68:ce:83:b7:
90:fb:d0:48:8b:b8:ea:a8:67:c8:fa:5b:b7:cf:64:
be:d2:4b:0a:9d:48:45:c1:28:57:ed:92:c3:ff:90:
a2:25:0f:f7:00:4e:24:6a:d8:fe:1e:ac:12:b2:4c:
36:44:39:0a:6c:1f:ff:36:6c:6b:4b:37:d6:0c:7f:
e4:ba:dc:fc:10:fd:d8:04:8b:a8:9c:98:10:53:cd:
f7:d9:8e:15:8c:0c:3e:41:33:bb:64:89:5f:ae:e6:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CC:4F:93:72:41:D0:23:13:58:E6:AD:8A:9B:FC:93:7A:22:9B:30
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132382e302f32342d3234203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.128.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a4:ad:4c:c7:64:c1:38:79:c2:73:2d:bc:7f:a3:60:45:d2:
13:2c:99:e6:08:a3:2c:90:d2:ce:fe:d0:88:81:28:6b:31:b5:
a1:ac:3c:91:d3:f2:1d:b3:ff:6c:53:a8:71:64:2c:b1:38:f7:
70:a6:8d:6b:11:be:01:9d:c0:a9:cb:b2:f7:f1:c6:2c:82:92:
c1:bf:8d:11:54:8c:b2:5d:31:1b:e4:49:ee:12:10:0e:3d:ec:
7f:b3:00:e7:60:a3:70:74:d4:7b:86:f9:58:10:17:92:dc:3b:
0b:88:79:04:11:23:37:c1:7d:a2:46:9b:5f:16:2b:d4:84:04:
ae:63:94:6f:5c:9a:25:08:a6:b9:67:4f:00:19:b0:d0:64:7b:
14:f8:57:0e:1e:54:d2:c8:9a:d9:67:22:a7:da:63:29:52:01:
55:62:b0:60:f2:0d:a7:01:a6:40:96:76:e0:e3:95:aa:75:c1:
86:3b:cd:7e:43:14:f7:50:57:03:10:dc:ff:a3:7c:81:37:62:
c4:28:7c:a0:68:cf:e1:2c:9f:1d:9d:6b:e7:f9:1f:3e:18:67:
e3:fc:26:e6:a9:1d:24:47:ff:f9:c3:12:47:d1:ae:5e:3e:9e:
03:69:37:08:dc:06:7b:64:f4:58:03:14:bc:1e:99:10:25:fe:
54:60:7f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 10:32:48 2023 by rpki-client on console-ams.rpki-client.org