Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132392e302f32342d3234203d3e203130323137.roa
File: 3131392e31312e3132392e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier: oQ92OHLOWhsVq7zRcklRsfSHitFaF/ZCFzVrymHS89Q=
Subject key identifier: 67:83:4C:48:98:AB:96:0E:4A:CD:B4:16:F2:D8:B9:D4:F1:0C:59:06
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 45D8A6AC5FF7B19A28575EA31C7E6D448051E492
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132392e302f32342d3234203d3e203130323137.roa
Signing time: Mon 13 Nov 2023 05:18:05 +0000
ROA not before: Mon 13 Nov 2023 05:13:05 +0000
ROA not after: Mon 11 Nov 2024 05:18:05 +0000
asID: 10217
IP address blocks: 119.11.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:d8:a6:ac:5f:f7:b1:9a:28:57:5e:a3:1c:7e:6d:44:80:51:e4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 13 05:13:05 2023 GMT
Not After : Nov 11 05:18:05 2024 GMT
Subject: CN=67834C4898AB960E4ACDB416F2D8B9D4F10C5906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:0a:fc:50:bf:68:af:af:3a:4a:5e:b3:37:
65:34:b1:b9:65:a5:7a:72:65:01:2a:2a:b1:e4:78:
6c:32:d1:98:b7:6f:a6:98:9e:3d:fc:1a:30:32:bd:
dc:82:11:c0:fc:6e:d1:5f:4d:eb:23:b7:67:43:e3:
b6:62:b9:3b:c7:d8:6f:c4:25:53:98:bb:ef:b9:b0:
86:f1:ad:13:c7:b7:1b:98:cd:86:b7:58:a1:a0:9b:
d9:32:6f:75:e4:e7:be:e7:59:31:55:b9:91:15:59:
94:64:18:50:eb:4f:d1:6d:f9:da:dc:b0:24:59:31:
6f:6a:4c:65:0b:cc:a9:7a:5a:1f:7d:62:39:e1:2c:
21:cd:6b:93:4b:d7:2b:69:26:3a:ac:2e:05:29:0e:
a5:4c:d0:45:62:c6:b3:ed:36:42:e2:d1:e6:12:38:
0f:7a:81:40:df:e1:b0:16:54:41:37:79:2b:8a:93:
d2:a0:de:c8:7a:f3:87:00:05:1a:a6:0f:e8:66:5d:
00:86:e8:5c:38:f2:0d:44:1e:6b:34:02:46:95:2a:
5e:e5:8c:9a:7e:d4:03:17:5e:2f:77:d0:1f:d1:b7:
30:45:af:5f:1a:c7:91:d2:23:aa:da:56:5d:ca:35:
55:59:0f:75:a0:b7:ad:8e:60:bd:c7:9a:62:6f:ce:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:4C:48:98:AB:96:0E:4A:CD:B4:16:F2:D8:B9:D4:F1:0C:59:06
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3132392e302f32342d3234203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.129.0/24
Signature Algorithm: sha256WithRSAEncryption
71:52:7b:5f:2b:8a:31:a5:09:90:2f:e7:d5:79:03:57:84:5f:
46:e3:a2:f8:8e:55:66:5c:e7:32:e7:0b:fe:4d:83:95:41:92:
9d:36:88:d7:d0:01:e3:f4:35:36:cd:ea:8d:a2:0d:f6:44:f0:
ca:dc:89:7b:6d:b7:2f:c2:68:6d:03:a8:85:44:ff:f4:8b:4e:
26:24:82:a1:5f:a1:8c:04:05:87:d0:11:15:75:ff:ac:7a:b7:
a7:a8:80:82:c1:3a:29:d9:41:e3:6c:9a:34:50:64:e3:53:fd:
8d:31:36:47:49:b0:b1:23:e5:ba:64:a5:70:48:17:f5:18:1b:
8c:95:fb:d0:b7:24:70:ce:5e:79:4f:c2:e2:1e:aa:4a:6a:78:
f8:3a:ae:d2:b8:75:74:77:cc:55:15:85:72:1f:99:c0:22:b2:
10:31:0d:c2:c7:39:63:70:59:17:5b:28:ad:58:bb:36:d4:b1:
45:96:f8:2d:d7:1d:9b:16:05:31:11:d1:8a:13:ee:c4:52:ff:
80:ee:d1:80:d8:ea:ac:b5:c0:11:8a:2f:91:fe:93:21:7d:66:
c5:a5:07:f6:ba:69:be:11:4d:d9:16:bf:34:c6:34:4c:e3:ce:
fd:b6:04:20:6c:f0:86:9c:8a:ef:d7:ca:ce:7d:c4:29:97:9b:
3d:07:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 10:32:48 2023 by rpki-client on console-ams.rpki-client.org