Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f31392d3139203d3e203130323137.roa
File: 3131392e31312e3139322e302f31392d3139203d3e203130323137.roa (raw, json)
Hash identifier: 3phXpIUzTZDERcx+5uXSvlVP6BMa6VOzq1M59ZUvsWA=
Subject key identifier: DA:90:AA:67:9F:22:43:EF:AF:AE:17:4B:B3:BD:C0:16:5D:4E:0A:37
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 43B59DD16343709215E69C3D2CD439E5BD3F605C
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f31392d3139203d3e203130323137.roa
Signing time: Wed 22 Nov 2023 08:15:50 +0000
ROA not before: Wed 22 Nov 2023 08:10:50 +0000
ROA not after: Wed 20 Nov 2024 08:15:50 +0000
asID: 10217
IP address blocks: 119.11.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b5:9d:d1:63:43:70:92:15:e6:9c:3d:2c:d4:39:e5:bd:3f:60:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 22 08:10:50 2023 GMT
Not After : Nov 20 08:15:50 2024 GMT
Subject: CN=DA90AA679F2243EFAFAE174BB3BDC0165D4E0A37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7c:fd:0f:38:94:a1:d6:03:42:83:7b:9f:07:
3b:36:19:39:1b:d4:91:68:ad:f9:53:f6:75:cf:b5:
6c:6a:99:16:e5:39:71:43:d9:f0:1c:98:02:eb:7f:
d7:af:cb:6a:af:ad:1e:a5:6f:99:c7:08:03:86:40:
61:9b:42:88:5e:e9:cc:6c:e5:b3:25:21:82:05:52:
2d:75:b9:0c:cf:2e:35:d2:78:0a:c8:fb:41:6a:0c:
2e:86:6e:81:e0:1a:e3:c6:0b:99:ad:c9:1f:67:88:
76:e0:31:8e:18:ef:83:fb:3e:e7:84:1e:1d:2a:07:
11:6f:03:87:9f:ac:5a:fa:ab:39:b7:19:ca:ec:7d:
65:f3:c2:c4:93:31:c1:29:d4:91:61:ca:df:6e:c6:
82:1b:84:66:55:b8:e8:0f:f8:94:6f:36:b3:91:42:
86:83:e8:0a:5e:a3:fb:80:03:cc:12:8c:79:8e:cf:
62:a6:cf:e4:0c:7c:88:ac:ff:b8:fd:e0:b1:3b:f5:
dd:ac:8e:c9:e5:57:70:a5:93:ca:aa:ab:58:46:73:
02:92:64:2e:60:62:9d:12:7d:c0:0a:8e:f4:f0:12:
90:ac:76:ec:d3:55:83:8b:30:f8:53:f3:68:d0:b4:
20:e9:3c:7b:3f:25:34:df:ce:4a:dd:ff:99:c8:95:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:90:AA:67:9F:22:43:EF:AF:AE:17:4B:B3:BD:C0:16:5D:4E:0A:37
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f31392d3139203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.192.0/19
Signature Algorithm: sha256WithRSAEncryption
60:be:0d:39:55:00:ce:0e:38:22:f8:88:d9:93:65:67:8a:08:
f6:38:b5:bf:6e:72:87:82:bb:a2:df:5f:72:e1:88:17:d0:0a:
b6:b6:12:26:63:a8:2d:e3:1e:70:52:b1:0d:76:29:e8:7d:d2:
55:0d:42:15:92:87:69:d9:e8:68:58:b5:23:4a:2b:3f:b9:42:
f5:77:43:d0:50:66:36:44:3e:a6:0e:6b:ac:c2:38:f9:16:27:
be:c9:f5:d3:7e:6d:22:fe:9d:c0:12:c0:62:0a:ab:a7:2f:44:
dd:3f:58:41:51:b9:76:b1:0c:9d:22:07:1d:1e:43:78:06:31:
4d:76:9d:5d:24:03:69:b0:00:fd:85:73:86:cd:dd:ee:56:9a:
10:ef:ba:26:ee:ac:c9:a7:8c:5e:ed:2c:53:74:3e:a6:ed:18:
e3:4e:23:1f:b1:5b:58:0d:2e:1c:c0:cb:b2:f2:02:57:51:ba:
94:94:47:a0:a3:c5:0c:e9:d8:f6:e1:e6:21:97:c8:94:67:8d:
c6:b4:c0:72:6a:c0:01:df:9e:39:df:d2:b0:01:a7:58:ef:b7:
63:9c:90:6f:1e:f0:1b:53:86:72:20:7a:40:59:b1:a7:76:77:
54:14:01:90:2a:a0:c3:23:c2:bf:4c:56:e4:c4:40:7a:71:64:
de:d0:ae:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org