Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3136302e302f32302d3230203d3e203130323137.roa
File: 3131392e31312e3136302e302f32302d3230203d3e203130323137.roa (raw, json)
Hash identifier: eV91Etc9j/x6lOu7ixFxR93a49FmY8/lsCb6XOd7ddo=
Subject key identifier: A9:D7:7F:0C:5C:FA:24:F4:6A:78:BB:EE:8D:45:E4:1D:04:B2:22:4F
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 036F175F851310B1BDC47FE2DBCDD13459D70D98
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3136302e302f32302d3230203d3e203130323137.roa
Signing time: Wed 22 Nov 2023 08:27:16 +0000
ROA not before: Wed 22 Nov 2023 08:22:16 +0000
ROA not after: Wed 20 Nov 2024 08:27:16 +0000
asID: 10217
IP address blocks: 119.11.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:6f:17:5f:85:13:10:b1:bd:c4:7f:e2:db:cd:d1:34:59:d7:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 22 08:22:16 2023 GMT
Not After : Nov 20 08:27:16 2024 GMT
Subject: CN=A9D77F0C5CFA24F46A78BBEE8D45E41D04B2224F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:15:69:c7:20:54:4d:0d:b6:a3:54:ef:04:4f:
db:92:6d:27:7d:bc:74:1c:db:6b:01:4a:2c:bf:86:
65:98:14:fa:19:96:44:56:ab:07:94:dc:10:f1:7f:
35:aa:f4:6e:25:b7:c6:67:86:32:96:6b:2c:9b:b8:
ce:22:06:93:0b:2d:b5:7c:30:b7:bf:78:59:d4:f9:
e8:57:b0:5b:1b:f8:92:9b:b0:17:61:b2:e0:a9:c4:
14:ef:0b:06:15:df:57:b9:9a:d9:ca:06:03:31:66:
fe:0c:e5:d6:0d:7b:18:17:46:3d:a6:bf:84:91:92:
a3:b8:36:77:5a:a3:9a:6f:df:86:d0:3f:5d:6f:13:
5e:fb:ef:34:91:0e:14:64:a1:2f:a7:90:51:33:43:
0b:cb:e5:fa:d5:37:53:1a:f4:12:a3:e5:d2:a8:54:
ef:fd:09:24:d8:3d:03:34:e0:dc:15:84:da:75:dc:
0d:58:12:ed:52:4d:84:73:68:30:45:98:65:65:ac:
92:73:ed:df:ea:1a:8e:5a:da:88:70:ad:f0:67:7f:
4a:7d:bf:45:45:3f:0d:aa:e8:87:b3:b7:b1:3b:d1:
fe:a4:6f:18:27:d4:83:b5:e4:ac:11:37:43:1a:6e:
e6:19:93:b1:6f:cf:c9:69:e0:5b:7d:b6:4b:20:6e:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D7:7F:0C:5C:FA:24:F4:6A:78:BB:EE:8D:45:E4:1D:04:B2:22:4F
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3136302e302f32302d3230203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.160.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:23:73:84:08:0b:40:d9:e0:76:9f:31:f8:34:43:63:a0:50:
72:dd:ee:f8:4a:96:be:5a:e5:9a:5f:81:8a:36:a5:de:ee:d3:
a2:cb:d6:50:74:7d:a2:e3:78:9a:7e:68:36:20:cd:ff:10:8a:
0b:99:73:92:b2:d9:e5:0d:0f:a1:da:cb:c8:e6:73:36:f0:22:
98:38:3d:cf:e6:ae:15:25:e7:cd:56:fa:58:f8:69:25:3f:fe:
04:4e:af:63:17:70:08:fe:9a:52:ef:44:3c:8d:2c:b7:7c:92:
eb:96:e6:2c:31:5f:35:dc:14:50:27:bb:f7:fe:93:28:de:49:
89:ab:33:79:02:a1:ba:4e:0a:9f:08:a8:74:47:87:3f:de:67:
c1:44:da:cb:15:8e:12:3a:91:4e:c5:4a:84:a4:ee:34:90:06:
94:71:cd:fe:2b:fe:ea:27:0a:3e:30:5b:c1:40:d2:42:e3:50:
03:4c:5f:1b:f8:1e:15:37:eb:62:a8:4b:85:42:18:04:80:70:
9a:4f:5c:55:81:1d:f1:1e:2c:ae:e1:46:3f:a0:06:14:9f:5f:
5c:54:0d:af:f3:07:fb:25:be:29:2a:b4:30:81:7f:7e:a9:bf:
ae:ae:f2:91:d6:83:ed:33:89:7f:53:53:3b:37:e0:23:9c:6a:
c4:39:46:6a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUA28XX4UTELG9xH/i283RNFnXDZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yMzExMjIwODIyMTZaFw0yNDExMjAwODI3MTZaMDMxMTAvBgNV
BAMTKEE5RDc3RjBDNUNGQTI0RjQ2QTc4QkJFRThENDVFNDFEMDRCMjIyNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FWnHIFRNDbajVO8ET9uSbSd9
vHQc22sBSiy/hmWYFPoZlkRWqweU3BDxfzWq9G4lt8ZnhjKWayybuM4iBpMLLbV8
MLe/eFnU+ehXsFsb+JKbsBdhsuCpxBTvCwYV31e5mtnKBgMxZv4M5dYNexgXRj2m
v4SRkqO4Nndao5pv34bQP11vE1777zSRDhRkoS+nkFEzQwvL5frVN1Ma9BKj5dKo
VO/9CSTYPQM04NwVhNp13A1YEu1STYRzaDBFmGVlrJJz7d/qGo5a2ohwrfBnf0p9
v0VFPw2q6Iezt7E70f6kbxgn1IO15KwRN0MabuYZk7Fvz8lp4Ft9tksgbvKRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUqdd/DFz6JPRqeLvujUXkHQSyIk8wHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmYjcwODE4LTIzNjYtNDJlMC05
ZGJkLTI1NDM4MTA2OWU1Ny8wLzMxMzEzOTJlMzEzMTJlMzEzNjMwMmUzMDJmMzIz
MDJkMzIzMDIwM2QzZTIwMzEzMDMyMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHcLoDANBgkqhkiG
9w0BAQsFAAOCAQEAKyNzhAgLQNngdp8x+DRDY6BQct3u+EqWvlrlml+Bijal3u7T
osvWUHR9ouN4mn5oNiDN/xCKC5lzkrLZ5Q0PodrLyOZzNvAimDg9z+auFSXnzVb6
WPhpJT/+BE6vYxdwCP6aUu9EPI0st3yS65bmLDFfNdwUUCe79/6TKN5JiaszeQKh
uk4KnwiodEeHP95nwUTayxWOEjqRTsVKhKTuNJAGlHHN/iv+6icKPjBbwUDSQuNQ
A0xfG/geFTfrYqhLhUIYBIBwmk9cVYEd8R4sruFGP6AGFJ9fXFQNr/MH+yW+KSq0
MIF/fqm/rq7ykdaD7TOJf1NTOzfgI5xqxDlGag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org