Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f32302d3230203d3e203130323137.roa
File: 3131392e31312e3139322e302f32302d3230203d3e203130323137.roa (raw, json)
Hash identifier: qleTxwM0/qEstS1/N4/ekR+wLnfbnG56LjoFmYuAngY=
Subject key identifier: 4C:D0:8F:1A:95:D2:65:57:2C:27:B1:6A:CB:E5:44:C9:CD:9A:41:4D
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 350CD3C6B25B5552EA60B4375138A5E7C979B077
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f32302d3230203d3e203130323137.roa
Signing time: Wed 22 Nov 2023 08:28:27 +0000
ROA not before: Wed 22 Nov 2023 08:23:27 +0000
ROA not after: Wed 20 Nov 2024 08:28:27 +0000
asID: 10217
IP address blocks: 119.11.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:0c:d3:c6:b2:5b:55:52:ea:60:b4:37:51:38:a5:e7:c9:79:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 22 08:23:27 2023 GMT
Not After : Nov 20 08:28:27 2024 GMT
Subject: CN=4CD08F1A95D265572C27B16ACBE544C9CD9A414D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:cb:77:c9:12:56:ff:e4:f4:c4:5f:3c:27:
c2:ac:84:fe:b9:69:93:6c:10:c1:78:a5:3e:8c:5b:
57:92:aa:c3:42:67:00:92:b6:45:6b:2a:c6:cd:88:
3b:6a:86:54:27:46:d0:86:78:c8:f6:c9:98:3e:29:
66:00:50:39:d6:ab:74:b3:3a:86:98:86:b3:70:e7:
25:46:4c:e6:ed:0d:a1:85:65:7f:33:75:2c:b3:ed:
44:12:2e:b1:bd:2b:55:14:05:4e:9f:2c:98:7b:76:
57:c7:39:e7:be:9e:c6:1b:6c:62:be:d8:89:60:82:
e0:cc:09:f1:6b:bc:49:ba:38:af:07:01:31:33:01:
84:10:4c:71:80:83:eb:89:ba:4d:61:1b:cf:a0:5f:
85:4a:73:66:13:99:50:76:de:25:b7:ca:4d:f6:57:
a9:26:5b:44:2a:84:a3:62:04:72:c2:5c:ce:04:8a:
a7:4d:e7:1b:6e:59:7c:48:55:cd:a6:4b:15:87:db:
07:ea:2f:fa:9a:83:3c:4e:7b:d6:1d:dd:5d:39:1a:
e2:88:b6:84:60:f4:e9:3f:74:5b:3e:4a:70:5a:8b:
a7:7d:0d:87:25:90:b9:aa:cb:4a:b6:6e:4b:9e:12:
ba:1f:84:56:29:1e:71:8e:bb:d2:45:b0:f9:51:5c:
ce:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D0:8F:1A:95:D2:65:57:2C:27:B1:6A:CB:E5:44:C9:CD:9A:41:4D
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3139322e302f32302d3230203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.192.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:e3:37:b2:e9:40:cf:8f:ae:98:d0:4a:a2:4c:8f:0c:54:8d:
8b:66:1d:c9:aa:7b:82:49:ed:c2:da:4f:a8:f2:a1:05:ee:8e:
7b:44:4f:42:5d:12:a8:47:6a:21:a5:72:b5:b2:56:66:d9:6e:
3b:1b:f0:27:a7:44:2b:92:94:8d:06:5d:19:0f:4d:7b:6c:3b:
be:f7:24:07:0e:ce:c5:97:30:23:be:4f:23:b1:11:e7:73:55:
54:eb:5f:d7:11:ba:73:99:9f:37:43:b8:83:bb:1c:98:e4:60:
38:b7:2d:c9:b6:f2:05:4b:c9:b8:2c:8f:d5:2d:f1:04:49:f4:
09:dd:4b:5d:4b:04:eb:03:72:aa:9d:c2:34:c4:6e:78:b1:a1:
06:86:19:7a:b4:c8:13:8d:72:fe:f4:67:34:05:f1:33:db:ae:
06:80:23:73:b7:45:e8:c9:df:f5:0b:43:47:da:16:70:a9:44:
62:58:18:3d:34:cd:06:ba:d3:cb:9d:bd:41:4b:64:a0:ae:5d:
05:62:18:a7:56:70:11:45:f5:1f:65:6b:f6:84:ef:18:03:d8:
2d:ff:21:ff:20:f6:97:49:96:12:4b:9e:46:76:5c:55:9f:33:
05:93:7b:3e:5c:4e:33:47:c2:e3:f2:81:26:62:01:c3:59:7f:
ab:f6:93:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org