Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3230382e302f32302d3230203d3e203130323137.roa
File: 3131392e31312e3230382e302f32302d3230203d3e203130323137.roa (raw, json)
Hash identifier: I4tuuCaEzlOHV7W69YrnOcqCpM7nQZMYKj5bC3pafn4=
Subject key identifier: 34:5C:6D:D0:20:34:F6:A6:88:78:C6:B3:4D:6E:D3:6B:62:B0:B0:0B
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 63614005C0D370E6737DBA3BAF739FFF07012A80
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3230382e302f32302d3230203d3e203130323137.roa
Signing time: Wed 22 Nov 2023 08:29:12 +0000
ROA not before: Wed 22 Nov 2023 08:24:12 +0000
ROA not after: Wed 20 Nov 2024 08:29:12 +0000
asID: 10217
IP address blocks: 119.11.208.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:61:40:05:c0:d3:70:e6:73:7d:ba:3b:af:73:9f:ff:07:01:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 22 08:24:12 2023 GMT
Not After : Nov 20 08:29:12 2024 GMT
Subject: CN=345C6DD02034F6A68878C6B34D6ED36B62B0B00B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:d4:ca:14:94:ac:4a:c9:e9:d5:82:33:b4:
0e:68:b2:ff:9f:dd:44:01:97:57:d8:d7:c4:bd:28:
b7:93:86:0b:0a:75:ec:b8:6f:e7:a7:58:40:c4:a8:
c9:4d:5c:f8:62:28:5b:cb:e9:d9:57:9c:77:fa:f9:
ce:9c:0a:dc:9e:2e:06:f9:1d:c9:ca:d8:a1:ad:2b:
78:93:53:7f:89:b2:3b:d8:98:57:4e:b7:04:de:97:
a0:6a:eb:16:03:1e:cf:8f:18:be:dd:d5:db:47:33:
86:47:7d:e8:21:a2:de:f5:9d:3e:6b:60:8b:e8:84:
fe:01:95:b9:be:af:9c:f0:df:52:3c:48:f1:78:a6:
1a:c1:93:dd:73:c4:ac:f7:d9:21:f4:be:d6:76:14:
c7:bc:b3:35:79:f7:a9:40:fa:c2:6f:d9:a0:1c:27:
54:d8:c7:ca:0b:3b:fe:d7:da:a4:d2:b1:46:5d:b6:
84:07:da:7d:a0:56:16:d8:e7:74:00:29:20:b0:fb:
e6:41:f9:63:9d:8d:ce:43:e1:03:55:a7:c1:fa:7e:
2d:65:ec:60:ed:bb:0d:b8:bc:e1:be:e6:0b:af:00:
43:29:9c:3b:47:75:26:37:6c:67:bd:2e:be:16:07:
9c:8d:68:b9:98:36:15:45:0c:40:4e:4c:27:e1:76:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:6D:D0:20:34:F6:A6:88:78:C6:B3:4D:6E:D3:6B:62:B0:B0:0B
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3230382e302f32302d3230203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.208.0/20
Signature Algorithm: sha256WithRSAEncryption
80:84:8c:22:0e:e4:a7:ee:64:f7:66:e0:a6:d0:e9:fd:0c:9c:
45:0a:79:d4:e6:5f:91:fa:2a:03:8b:23:46:4a:d7:8b:07:61:
fd:ad:70:c7:52:82:ea:1a:d4:95:cf:d1:b5:7c:90:3d:82:20:
35:77:57:02:24:23:c0:1c:3c:bd:8f:b0:49:27:0e:38:90:ed:
4b:fc:47:34:19:17:3d:7f:da:11:f1:d9:ec:49:d4:f4:81:fd:
9e:88:08:49:8f:fc:6f:92:3b:21:d4:61:c8:ae:74:f0:eb:46:
53:ce:10:52:31:0b:25:b4:64:31:97:03:f3:6a:cb:82:86:8d:
2f:33:77:03:fa:58:75:77:01:ff:92:db:f8:4c:4e:9e:38:bc:
b5:8d:36:19:3c:7a:56:d9:6f:ec:aa:19:dc:26:7e:fb:72:68:
00:ec:bf:64:ba:68:93:11:61:0d:8b:ff:4a:28:7d:73:88:6b:
f5:f1:19:ed:ff:ed:20:ef:8c:48:5b:30:92:39:52:72:a5:e9:
4b:75:b6:da:1c:c4:93:87:bd:59:c5:02:05:fd:5a:72:d9:b1:
fd:f2:52:02:a6:cb:98:6c:4e:32:aa:77:da:f2:ce:81:04:bf:
74:33:a6:c6:08:2a:3a:75:18:3e:4f:4d:2f:38:35:15:de:5d:
16:ff:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org