Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3235312e302f32342d3234203d3e203130323137.roa
File: 3131392e31312e3235312e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier: 98JeIazJy5rDA5qpDVoK++yLwvhp2+Zkzv2PSCkL/lY=
Subject key identifier: 34:87:68:44:C0:CA:01:66:35:BE:C7:CC:25:8E:C9:9C:4C:1B:D7:0D
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 0CD0AA81DA5A7462E7D3721721885768CF5221C3
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3235312e302f32342d3234203d3e203130323137.roa
Signing time: Thu 31 Aug 2023 06:00:03 +0000
ROA not before: Thu 31 Aug 2023 05:55:03 +0000
ROA not after: Thu 29 Aug 2024 06:00:03 +0000
asID: 10217
IP address blocks: 119.11.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d0:aa:81:da:5a:74:62:e7:d3:72:17:21:88:57:68:cf:52:21:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Aug 31 05:55:03 2023 GMT
Not After : Aug 29 06:00:03 2024 GMT
Subject: CN=34876844C0CA016635BEC7CC258EC99C4C1BD70D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:94:69:de:1e:05:39:e1:df:86:26:5c:fb:
13:4a:e3:04:28:da:ef:13:08:cf:8a:eb:10:dc:00:
af:ba:83:83:05:ad:31:d8:59:27:03:bf:e0:35:11:
eb:80:79:48:6f:fb:6a:23:3d:29:56:64:ca:af:73:
f1:11:7c:d0:36:42:f1:21:43:3d:ee:51:fd:b9:30:
b6:45:bb:1e:9a:ec:55:56:f3:1b:ad:a7:af:c0:8d:
0e:24:77:fc:57:7a:8a:66:8b:0d:7f:45:20:70:14:
de:d2:07:48:2e:36:ef:0d:b0:b5:58:29:7a:97:63:
4f:6d:4b:6c:c5:ee:e8:2a:84:55:77:2a:8e:6e:35:
3d:34:4c:8d:c5:ca:11:33:80:fb:e5:97:b4:13:f0:
99:9d:6f:63:a0:76:c6:50:4e:fc:7d:6c:50:96:19:
0b:08:aa:9d:89:a3:1a:25:e3:12:26:ba:68:3f:fc:
39:78:ab:57:54:0c:dc:69:1d:68:29:1f:42:92:61:
ab:f1:bc:e2:41:39:0b:de:d9:3f:6b:44:1f:0e:f3:
4b:97:e0:d3:7c:3a:e7:c5:19:2e:c8:15:c5:31:0d:
9d:72:53:76:ad:09:df:54:44:17:79:ee:f1:14:f1:
9f:7d:77:e2:70:89:4a:97:ef:b8:7a:36:d5:86:8d:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:87:68:44:C0:CA:01:66:35:BE:C7:CC:25:8E:C9:9C:4C:1B:D7:0D
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3235312e302f32342d3234203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.251.0/24
Signature Algorithm: sha256WithRSAEncryption
07:53:a9:3d:0e:53:cd:5e:9e:ef:0d:2a:8a:19:61:84:01:73:
4a:cb:21:9d:7b:0c:49:a5:36:72:80:3b:d9:ff:37:cf:77:7a:
21:68:fe:d0:36:0f:ab:88:2d:cb:dd:3b:26:d0:95:e0:87:3a:
73:a2:f2:69:a9:d1:51:f4:a8:e0:0a:55:46:19:c2:c2:6e:af:
5f:41:a4:e4:14:e4:8b:cb:e2:78:a5:34:37:41:89:a7:28:48:
73:f4:31:06:3f:75:22:63:a1:57:71:57:d4:45:0b:57:8d:f6:
71:ec:46:ca:d9:e0:0c:8a:82:14:57:20:54:27:7e:e8:e2:3c:
b6:91:88:99:ef:06:9c:58:96:a3:d0:9b:a5:98:55:75:08:b1:
4d:44:18:08:cc:de:1a:3e:9a:0d:f8:bf:22:4f:91:84:71:7f:
99:e4:c1:e7:7c:4f:a9:dd:16:29:7e:36:7e:2c:8e:8e:84:aa:
55:e9:1c:67:39:1f:82:ed:6e:b9:57:4e:9a:c6:10:d6:29:34:
56:a5:d1:01:20:28:9b:5f:88:ef:7c:2d:74:97:5a:f3:d9:1b:
b5:c6:68:0c:f0:1e:64:06:e8:16:f2:d6:cd:ff:f3:78:bb:6a:
59:e7:e0:99:9c:d6:7c:bf:3d:4b:a7:c7:9a:5e:9b:99:3c:9d:
f9:1e:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org