Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3232342e302f31392d3139203d3e203130323137.roa
File: 3131392e31312e3232342e302f31392d3139203d3e203130323137.roa (raw, json)
Hash identifier: EsztjANn05x3wYvn/JBCjWtMRYXD1WxqyYHezsaFwno=
Subject key identifier: 44:5F:CC:4F:FF:89:AD:A4:EC:BA:BE:1D:22:27:87:05:5A:FB:4C:99
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 269ABABB4755FFF1BFCF180D48D31794DFCE6F93
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3232342e302f31392d3139203d3e203130323137.roa
Signing time: Wed 22 Nov 2023 08:16:28 +0000
ROA not before: Wed 22 Nov 2023 08:11:28 +0000
ROA not after: Wed 20 Nov 2024 08:16:28 +0000
asID: 10217
IP address blocks: 119.11.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9a:ba:bb:47:55:ff:f1:bf:cf:18:0d:48:d3:17:94:df:ce:6f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 22 08:11:28 2023 GMT
Not After : Nov 20 08:16:28 2024 GMT
Subject: CN=445FCC4FFF89ADA4ECBABE1D222787055AFB4C99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:59:11:d4:cf:9f:c9:86:5a:3d:78:a2:3c:
46:91:75:52:62:0a:00:fd:64:ff:f2:48:35:90:0b:
aa:5b:f5:27:c1:20:c6:20:86:b2:fc:24:26:10:1f:
85:e5:00:39:3f:23:0d:7c:4a:16:8b:d7:e3:ec:c2:
e9:78:d7:30:f2:45:5b:e3:0d:02:35:06:b8:ac:8f:
a3:fb:4a:d7:29:98:a3:88:74:23:e2:ad:c3:8a:12:
75:f3:e5:9d:18:22:a4:66:c0:af:c7:b9:f4:d0:ac:
f8:67:bb:aa:05:6d:dd:71:71:45:37:3a:02:11:e8:
77:6c:e9:8a:e6:32:19:ac:45:2c:7e:e5:d1:c4:b7:
85:49:df:fc:05:63:8b:4c:7d:d6:ff:6b:e1:0b:d9:
b7:2e:f1:aa:c7:32:48:41:f9:fb:d0:5a:41:9a:e4:
57:e9:da:23:06:fa:6a:64:10:b7:6b:45:9b:c9:ca:
37:81:48:46:c0:cd:ca:8b:73:ba:8c:f9:be:d5:59:
ac:ce:a1:fc:97:af:e4:c3:cc:a8:93:6c:e1:c2:5a:
4c:f5:aa:83:7e:7d:fd:c9:c5:a6:0f:64:4b:66:7e:
31:ce:9e:77:0c:71:7d:7d:00:a8:ef:22:3c:12:e3:
29:18:de:d8:85:b9:a5:c8:51:71:b5:ae:ce:fe:fd:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5F:CC:4F:FF:89:AD:A4:EC:BA:BE:1D:22:27:87:05:5A:FB:4C:99
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3232342e302f31392d3139203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:0f:0c:da:01:72:cc:69:77:cc:bb:e0:31:8e:50:d9:7b:14:
f9:14:f1:8b:d3:e2:41:d6:ca:a9:6b:19:f1:9f:00:37:c3:b4:
65:ab:a8:06:03:9d:76:9f:d3:56:8a:82:cc:a7:3e:eb:21:c3:
a7:9a:93:d7:7c:6f:1d:8a:47:1d:a6:e0:d4:b7:6a:e0:d0:8c:
11:d9:89:2b:72:1a:d0:51:9f:11:ae:26:0a:65:a9:d5:0c:51:
bd:94:23:d1:34:50:8a:d5:67:7d:bb:f4:bf:ab:38:2c:6a:63:
93:1e:43:66:a4:79:18:94:d3:91:2f:22:83:3c:e2:a0:de:7e:
30:47:bb:95:a4:1e:f9:80:21:8f:5d:d2:46:fc:2c:c7:0c:6f:
02:96:69:61:1c:aa:a4:5c:20:ae:97:8c:20:33:d1:b7:87:4e:
f5:92:ef:d0:33:87:c8:e7:b4:bd:c6:8c:1e:4b:5e:3d:3e:ff:
c9:60:2e:cf:7f:ca:ea:2b:54:42:e4:ca:00:e9:c3:34:54:39:
01:7f:dd:d5:8e:bc:66:e3:0b:bf:9a:65:8b:c6:ab:19:e4:fb:
60:46:98:ec:96:a9:12:33:9c:cf:a7:5e:49:32:bb:ad:c9:63:
b5:b5:a2:97:02:2c:05:67:57:7d:3b:09:14:48:80:85:60:e8:
1f:d8:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org