Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3134342e302f32312d3231203d3e203130323137.roa
File: 3131392e31312e3134342e302f32312d3231203d3e203130323137.roa (raw, json)
Hash identifier: q3dwqkBew/E8w/T+VlgNHXnUB3mZpwGuaoMymd72H0c=
Subject key identifier: 17:02:AD:73:CD:F2:0C:EA:C6:9E:0A:EF:8D:04:03:61:3A:87:D9:35
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 672F352E04CA98D3BA16908112DCFD528E0764DE
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3134342e302f32312d3231203d3e203130323137.roa
Signing time: Wed 22 Nov 2023 08:40:08 +0000
ROA not before: Wed 22 Nov 2023 08:35:08 +0000
ROA not after: Wed 20 Nov 2024 08:40:08 +0000
asID: 10217
IP address blocks: 119.11.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:2f:35:2e:04:ca:98:d3:ba:16:90:81:12:dc:fd:52:8e:07:64:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 22 08:35:08 2023 GMT
Not After : Nov 20 08:40:08 2024 GMT
Subject: CN=1702AD73CDF20CEAC69E0AEF8D0403613A87D935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:da:7b:66:69:6f:ff:b2:aa:49:10:b6:a2:
b5:8d:e3:7e:30:28:61:5f:00:cf:89:77:86:e6:68:
c2:d2:e9:a5:f1:90:e1:fd:4e:9f:f3:26:5a:8b:a3:
df:da:ec:e3:6d:01:fa:f5:aa:25:0b:2c:7e:a8:30:
03:5c:ca:18:d7:90:6b:d5:2f:f9:df:75:3c:7f:ce:
bf:48:90:d1:6e:68:06:9d:e5:14:36:37:35:64:58:
da:86:e8:1f:92:6c:64:39:9d:9f:c4:ec:68:17:2b:
c1:dc:31:8f:98:02:ed:47:52:46:7e:4b:79:c0:6e:
bb:0a:28:63:40:f9:be:ca:a6:0f:c6:24:cb:5f:d3:
91:01:29:f7:a5:35:e2:dc:b8:dc:8e:11:66:e5:94:
0c:fd:1c:8a:f3:c7:3f:ff:43:a5:06:aa:c5:7d:a3:
78:63:7d:35:17:9e:ef:3e:ed:23:9e:99:1b:f4:18:
e8:06:22:b0:f1:56:9f:1a:c2:54:71:6b:50:2f:39:
f1:e8:59:0c:bb:d3:91:ed:6a:1f:a8:1e:53:5a:e0:
b6:e7:2f:78:9a:91:fe:d1:fe:09:21:44:d6:af:f1:
f9:b0:b3:ac:7a:7a:35:6b:1e:24:43:8c:db:bb:0c:
df:f7:c0:8f:b2:43:e6:f7:3e:44:9e:49:12:cb:6d:
2f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:AD:73:CD:F2:0C:EA:C6:9E:0A:EF:8D:04:03:61:3A:87:D9:35
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3134342e302f32312d3231203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.144.0/21
Signature Algorithm: sha256WithRSAEncryption
74:7d:3c:ab:1c:c6:0f:99:67:3d:f6:b4:9e:29:ab:36:66:d9:
36:39:15:e2:0c:f3:44:f5:fe:16:31:60:85:2f:fb:92:97:9f:
c4:71:6c:46:2a:07:bb:ef:a3:45:21:cf:9a:0f:be:57:01:7c:
4a:d4:92:1d:ba:28:cb:33:89:13:b4:1d:aa:4f:04:1d:7e:56:
c9:f2:11:19:e5:61:cc:99:c6:2c:d2:a9:3a:57:4b:7f:b6:94:
e3:7b:c6:8f:2c:aa:3a:ac:c1:e4:18:43:77:81:4b:f4:e4:94:
c0:06:ab:9e:3d:07:5c:e4:31:65:e7:66:b0:17:dd:c1:bc:3a:
46:95:d7:05:3c:12:76:fc:52:44:a4:3d:48:ad:93:3a:2c:7b:
a4:ae:01:96:d5:2a:0b:b9:e1:31:d9:44:7f:17:44:c2:94:7b:
57:12:b1:bd:ae:82:9e:9c:c6:ae:c7:07:c5:e7:10:64:e6:25:
3f:80:b2:12:fc:34:8f:38:61:76:fc:24:46:6b:f1:45:8f:55:
8f:3d:7b:1b:2b:1f:f4:36:56:06:63:fb:8e:a8:79:a9:73:f9:
77:61:f4:94:cf:5c:03:31:2e:97:37:cc:f2:b6:97:25:d8:6c:
ea:9f:6f:1b:92:06:04:87:f7:ec:a6:a4:d4:0b:cc:54:8d:b2:
80:cb:8c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org