Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3133302e302f32342d3234203d3e203130323137.roa
File: 3131392e31312e3133302e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier: QZ7Z21TfIzCjDgagb+j+siNJkxJIyJK8DX6+xo81mpU=
Subject key identifier: 82:4B:47:E6:0D:F1:18:0E:49:1F:5C:3F:35:2E:24:B0:7C:5C:7F:06
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 3716F1074363466187CD4050066203CA21C9065D
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3133302e302f32342d3234203d3e203130323137.roa
Signing time: Mon 13 Nov 2023 05:18:26 +0000
ROA not before: Mon 13 Nov 2023 05:13:26 +0000
ROA not after: Mon 11 Nov 2024 05:18:26 +0000
asID: 10217
IP address blocks: 119.11.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:16:f1:07:43:63:46:61:87:cd:40:50:06:62:03:ca:21:c9:06:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 13 05:13:26 2023 GMT
Not After : Nov 11 05:18:26 2024 GMT
Subject: CN=824B47E60DF1180E491F5C3F352E24B07C5C7F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:b2:2d:06:5e:30:80:2f:bf:b7:ee:de:e3:
24:e1:81:48:61:ff:89:c6:73:71:58:0e:2a:a8:89:
b9:f9:f3:c9:79:54:40:9c:68:d5:2b:39:34:e6:36:
63:12:f8:22:59:3b:8e:1e:89:c9:c0:d2:6d:5a:3e:
18:fb:ad:6b:65:73:c1:46:99:d4:ff:d9:e0:31:0d:
0f:92:6a:d3:03:45:7d:53:71:8c:6a:db:cf:9c:da:
30:94:76:3f:10:c3:02:6c:19:8d:7f:85:e0:ea:58:
e8:20:80:80:3a:2a:dc:be:b5:41:74:8e:5c:a9:c8:
45:8b:d0:c5:bd:09:e4:b1:bc:b0:e3:a0:7d:9f:48:
79:e8:f0:77:2c:bc:a7:58:6e:67:a9:a0:77:d2:b7:
dd:78:2c:d7:af:88:c7:90:4a:4a:47:c0:f6:83:d7:
ab:e6:b9:bf:ae:a2:f1:a7:30:51:02:d1:6d:52:67:
78:c1:0d:f4:94:a2:5b:ef:f1:d3:b0:cf:1b:45:9e:
e8:76:88:ce:46:69:19:d3:12:1b:c5:4e:36:b6:ec:
8c:ec:e6:11:1f:e4:24:41:fa:8a:e4:31:30:ca:78:
2c:2f:ea:b6:b9:fa:18:23:3f:ec:7c:1c:e4:92:2f:
ce:4c:df:fd:d8:ed:55:4a:0b:44:b4:f1:5e:be:dc:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:47:E6:0D:F1:18:0E:49:1F:5C:3F:35:2E:24:B0:7C:5C:7F:06
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3133302e302f32342d3234203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.130.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d4:33:09:a3:00:4b:db:9a:4c:af:c5:e6:2d:52:f1:b2:ac:
97:7f:f9:a1:4d:20:ce:43:c0:1f:c1:3a:e3:5b:09:2a:8a:32:
5b:60:ee:64:eb:b9:0b:bf:d8:bc:e7:e5:4b:e5:34:d6:65:e6:
4e:73:29:a7:ba:74:09:80:fc:bc:c0:e3:64:47:eb:44:bf:a9:
0c:1a:73:6f:1f:bb:af:f8:9c:4f:0d:fe:3c:24:0f:b8:b1:e0:
6c:9b:fa:6f:8e:95:a3:b7:ff:9b:1b:e3:38:94:9b:ea:c4:3b:
2c:a4:69:3d:d5:cf:3b:ba:c4:62:1a:2a:0e:69:b2:4a:82:f8:
9d:9a:f9:a5:05:f6:5a:07:83:2f:9d:cb:a5:78:30:e2:ca:55:
96:33:65:c2:bb:f8:9c:51:f6:81:2f:c4:3d:51:fd:94:52:60:
84:ed:28:20:6e:96:38:7d:b2:48:26:bd:1d:e2:22:26:6f:4e:
50:8f:bb:e3:0c:af:3f:67:d1:ba:36:3f:54:cb:3b:37:59:76:
0e:3b:03:fe:31:3e:17:c8:af:ff:3b:f2:66:c2:9a:94:5f:c8:
a7:7a:fd:fd:76:a6:a5:6d:fd:e4:74:17:fc:36:ea:64:f4:89:
a1:cf:9b:4b:44:1e:e2:67:fa:38:04:5c:c7:ea:ac:13:a0:73:
ff:0e:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 10:32:48 2023 by rpki-client on console-ams.rpki-client.org