Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31332e302f32342d3234203d3e203130323137.roa
File: 3230322e3137312e31332e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier: pl1rqiVbzbKG/L6Yxz/yolPj9Mc7We5QXppPpVZcMx0=
Subject key identifier: C5:14:01:53:43:65:5E:90:4E:58:B6:9B:1C:55:C3:D1:7C:D2:CB:2F
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 3F75BFBAE88EF5BDCABEEA0447EF4E9FBAE3FD51
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31332e302f32342d3234203d3e203130323137.roa
Signing time: Thu 31 Aug 2023 06:00:01 +0000
ROA not before: Thu 31 Aug 2023 05:55:01 +0000
ROA not after: Thu 29 Aug 2024 06:00:01 +0000
asID: 10217
IP address blocks: 202.171.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:75:bf:ba:e8:8e:f5:bd:ca:be:ea:04:47:ef:4e:9f:ba:e3:fd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Aug 31 05:55:01 2023 GMT
Not After : Aug 29 06:00:01 2024 GMT
Subject: CN=C514015343655E904E58B69B1C55C3D17CD2CB2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:31:bd:04:9e:25:32:5e:fd:fd:cb:66:22:
ae:ce:4d:d2:10:7c:75:7a:50:10:a5:14:ba:3f:20:
8a:f3:84:70:e4:c5:18:f4:a3:12:f7:0d:68:c7:64:
d4:89:31:67:3e:dd:d2:69:f4:d4:c3:6e:88:f5:41:
51:2a:cb:cc:27:cc:3c:4f:dc:13:38:fe:a4:29:a6:
76:a9:f6:4a:21:ad:16:e6:3e:89:c7:37:ff:2b:d2:
99:d8:e1:40:f3:72:8f:15:09:a2:b7:05:66:24:20:
58:7c:e8:73:46:41:63:78:c7:79:f9:69:e5:fe:ae:
91:c7:1f:4f:67:64:d0:a3:94:fc:3d:21:d6:e6:e5:
c0:39:68:20:4b:1f:1e:05:7e:a6:e2:4c:64:67:a0:
b8:bc:5a:04:91:e8:44:c6:03:76:80:a9:50:62:d8:
8e:9a:ac:b1:ff:14:7e:af:60:8f:d4:ed:77:4a:d9:
72:d1:85:fe:69:59:e9:3f:d9:6f:6d:7c:47:c6:bc:
e7:ec:9b:78:e9:77:c6:93:aa:4a:93:cb:21:72:44:
42:92:3d:57:13:ed:72:8b:fa:5c:60:96:b3:35:81:
40:1c:d6:3d:74:ab:2a:ee:df:bb:6d:1d:d5:67:82:
1b:a4:0d:cf:40:f0:72:29:9a:e4:84:86:d7:c3:fe:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:14:01:53:43:65:5E:90:4E:58:B6:9B:1C:55:C3:D1:7C:D2:CB:2F
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31332e302f32342d3234203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.13.0/24
Signature Algorithm: sha256WithRSAEncryption
52:47:5d:d5:86:69:5c:c1:6f:fd:e6:ab:37:ed:d8:18:c9:25:
fd:bf:01:f1:61:d3:35:0d:37:e3:93:a9:46:42:fc:e6:50:4e:
99:5c:05:67:65:ed:60:b3:f8:50:9a:f7:63:a8:db:79:70:32:
8e:d5:a0:8f:67:51:e8:73:04:fd:db:4e:af:6a:a4:bd:98:6b:
30:d5:69:12:ba:10:e7:29:20:42:55:56:e7:a6:17:32:73:f5:
66:df:7d:90:3d:ea:4f:8e:2e:61:b6:0c:88:9b:42:46:79:05:
76:d6:4f:8e:da:77:8a:0d:bb:f1:53:c4:b0:31:62:c4:27:33:
65:46:1e:80:a9:b9:ec:66:a8:f0:6c:a6:7c:45:a4:ac:58:c5:
ef:c2:96:ab:c9:3f:a0:31:5e:86:65:4a:57:84:ed:dd:8c:33:
60:1d:b7:46:96:42:9b:04:01:73:5d:7d:35:e1:8c:ed:72:3c:
2b:9a:f8:de:7a:44:88:36:37:87:aa:43:0a:db:59:96:db:fc:
a7:ed:bb:43:b2:5a:9e:60:a0:38:a8:fc:0c:cd:85:d6:4c:15:
e6:2a:20:71:96:0d:66:6b:9f:8b:d8:c5:fd:50:f6:bc:b8:18:
0e:60:c1:4c:d0:0c:9a:65:30:46:60:bb:7f:47:41:83:c3:81:
8f:70:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org