Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3134342e302f32302d3230203d3e203130323137.roa
File: 3131392e31312e3134342e302f32302d3230203d3e203130323137.roa (raw, json)
Hash identifier: GqAov0SXcKkD0OrUdQL1MExXOXBa9IU/60LFZXVSnlE=
Subject key identifier: 6C:DF:11:F6:32:75:82:6F:12:30:0E:58:7B:7F:C1:57:D1:CD:BB:F5
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 3E64532300F1ED9CECC5101A8D8D52961E900264
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3134342e302f32302d3230203d3e203130323137.roa
Signing time: Wed 22 Nov 2023 08:26:44 +0000
ROA not before: Wed 22 Nov 2023 08:21:44 +0000
ROA not after: Wed 20 Nov 2024 08:26:44 +0000
asID: 10217
IP address blocks: 119.11.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:64:53:23:00:f1:ed:9c:ec:c5:10:1a:8d:8d:52:96:1e:90:02:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 22 08:21:44 2023 GMT
Not After : Nov 20 08:26:44 2024 GMT
Subject: CN=6CDF11F63275826F12300E587B7FC157D1CDBBF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b2:35:0e:1c:f7:3f:2f:c7:c5:8d:a8:e8:02:
ad:4e:96:09:b9:35:f1:9e:48:b3:be:da:f9:d6:32:
37:41:91:2c:a4:1b:2c:d9:4d:15:b2:20:a0:eb:11:
d9:c8:97:ed:82:b5:d5:d9:9b:ba:89:75:87:e5:51:
50:54:cf:64:c4:36:07:0c:83:92:7d:bd:16:fc:52:
30:6a:6d:5c:cf:18:d1:df:fb:a1:4f:7f:f1:16:7c:
f6:a7:3b:c0:a8:72:5d:ae:2c:c3:b5:32:07:0d:76:
09:e5:f1:90:85:cc:cb:73:b4:55:0b:11:50:03:46:
43:99:20:71:40:e0:cf:b8:58:e7:9e:01:02:cf:a0:
8e:ad:2e:2d:e9:d3:c8:a4:ce:96:fd:43:8b:96:45:
2b:3a:85:53:e9:a8:14:d1:04:aa:64:b7:cd:ed:9e:
9b:ed:e5:4d:94:de:ad:aa:f7:c2:86:9e:d8:71:81:
95:5d:b4:26:73:b0:02:d6:c3:8c:82:82:65:fc:7f:
63:09:82:a0:06:fb:c1:44:25:02:e9:55:7f:1f:53:
1f:2a:24:e6:27:31:e0:7f:4a:f0:40:b2:66:c8:94:
9b:8a:a1:de:1d:2a:d2:bd:1f:e1:24:ed:15:ca:88:
16:fd:a6:10:fa:b1:fb:e3:69:6c:c7:12:ba:8e:5a:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DF:11:F6:32:75:82:6F:12:30:0E:58:7B:7F:C1:57:D1:CD:BB:F5
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3134342e302f32302d3230203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.144.0/20
Signature Algorithm: sha256WithRSAEncryption
02:ee:cb:f9:c9:03:ac:8e:72:71:1b:b9:cf:2f:4b:42:5b:3a:
8e:a3:9f:e2:c4:39:78:68:10:ca:cb:ff:aa:39:1b:c1:27:92:
6d:20:ca:12:8b:df:93:44:94:3f:79:bc:0d:51:08:3a:43:fe:
61:0f:f3:e9:d8:c5:f8:2c:35:58:f6:fb:93:87:a3:97:15:a7:
56:d3:1f:16:0b:4b:24:ee:9b:15:f2:31:24:62:76:53:2b:23:
1c:51:ef:a3:18:db:b1:25:a4:b6:fa:a7:8c:f7:dd:29:8b:e4:
ac:fd:84:b4:a5:50:19:44:4c:02:63:cd:09:d1:95:84:fb:b1:
e2:9f:3d:c0:c7:5e:f6:46:d4:73:e4:b4:9a:77:34:a0:db:f1:
2f:d7:67:19:66:6e:ab:27:0c:e9:69:b8:50:5b:b5:3f:5b:b4:
0f:cb:21:bd:cd:92:98:a2:d7:6d:27:81:35:df:0a:a6:a4:91:
7e:21:e4:58:d3:79:7b:ef:f7:46:5a:c2:cf:a1:1b:0a:71:da:
f8:bf:9a:fe:8a:62:6e:12:80:bd:f2:bc:34:84:15:db:a0:38:
b8:bb:75:28:a3:88:6b:1f:a6:91:82:90:d5:22:c1:30:b0:fa:
bc:81:d3:aa:79:52:71:2b:83:1d:23:17:34:50:e8:ac:80:36:
ad:b3:4f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org