Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32302d3230203d3e203130323137.roa
File: 3230322e3137312e31362e302f32302d3230203d3e203130323137.roa (raw, json)
Hash identifier: jNlmSGpriOpc1rxfdP2e20OSDsW42NqRYndyUx+FXX0=
Subject key identifier: 9D:C0:6B:17:22:E4:2F:63:E7:BD:CC:D5:36:29:E8:2B:83:30:97:6E
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 7464DBAA6F17D24BEDB8724D381F42E2492685F1
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32302d3230203d3e203130323137.roa
Signing time: Thu 31 Aug 2023 06:00:01 +0000
ROA not before: Thu 31 Aug 2023 05:55:01 +0000
ROA not after: Thu 29 Aug 2024 06:00:01 +0000
asID: 10217
IP address blocks: 202.171.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:64:db:aa:6f:17:d2:4b:ed:b8:72:4d:38:1f:42:e2:49:26:85:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Aug 31 05:55:01 2023 GMT
Not After : Aug 29 06:00:01 2024 GMT
Subject: CN=9DC06B1722E42F63E7BDCCD53629E82B8330976E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:6f:4f:66:4b:0d:20:11:2b:89:2c:c5:74:
4b:ec:85:d7:5c:7b:76:02:93:7f:42:0c:04:7a:8c:
ae:35:7f:e9:de:fd:b3:b2:0b:2e:a4:27:1b:3b:e8:
da:d7:be:29:a7:c6:79:e4:f4:4e:ae:57:66:d9:fb:
53:e8:c1:73:4c:ff:ae:bc:ad:cb:cd:aa:64:cd:17:
14:6f:7d:57:34:d0:b9:1a:79:b1:64:72:79:13:87:
98:0c:e4:62:a3:f2:89:7d:59:36:ee:c4:43:e7:c1:
01:9c:73:ad:76:13:07:71:70:df:9d:67:f4:0c:29:
43:a9:23:d5:20:58:4d:b7:6c:e7:20:b4:0e:70:92:
f3:0e:9a:f7:e3:c5:57:dd:2b:d6:8d:0a:98:e2:56:
7e:f6:57:9c:1d:82:18:6e:60:ca:cd:0b:35:96:68:
58:17:40:da:b1:03:7b:0e:4d:b9:0c:ec:4f:6c:00:
9b:c8:8e:f4:cc:25:bd:0c:27:f8:92:ff:b4:67:a7:
6f:00:43:7b:2e:a0:59:07:69:3d:80:3a:72:25:4b:
be:c9:d0:e9:03:1f:96:ed:76:92:75:83:5b:80:2b:
6f:91:1b:c6:73:34:8e:bc:71:32:b2:25:f5:d4:44:
bc:39:5e:2e:d1:bf:b9:d4:4b:5a:fc:bb:f7:24:6f:
93:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C0:6B:17:22:E4:2F:63:E7:BD:CC:D5:36:29:E8:2B:83:30:97:6E
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32302d3230203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.16.0/20
Signature Algorithm: sha256WithRSAEncryption
41:f7:34:f7:6d:d3:48:e8:8a:d2:8c:45:b5:88:a8:67:75:ca:
c5:37:9e:a0:b6:de:da:ce:47:f8:a9:63:b9:11:bc:14:a1:f3:
f0:2f:29:49:b1:4c:39:05:9e:9c:80:59:77:51:34:c8:5d:29:
9f:1e:28:bd:2f:ec:1f:01:b7:c6:87:c1:27:29:ad:09:f7:56:
f5:6a:46:7b:a3:dc:9f:fe:57:76:f0:47:75:e5:b9:4a:19:b6:
f1:29:f4:0a:79:09:56:ba:23:d4:4e:0e:83:24:85:a5:c1:fe:
c0:89:8e:d0:2f:52:ca:d3:0a:6a:87:7c:cf:28:2a:0b:8e:4d:
2e:23:8a:bf:12:40:78:8f:b8:d4:a7:c1:b4:03:72:58:c3:08:
65:5c:12:77:e6:2c:de:bd:a2:2f:ad:69:d2:08:78:c4:f5:17:
32:88:24:88:b1:bc:b3:9e:ac:59:68:af:86:2a:03:d4:89:96:
a4:be:c7:ec:c4:9f:2b:ea:ec:e0:b0:24:96:17:bb:e4:58:c7:
7b:1d:4e:33:9d:4a:97:dc:6c:75:da:be:08:c9:d6:88:37:67:
21:ac:ed:04:52:e9:8c:f4:ec:2e:8c:50:03:3f:f3:c1:d5:c8:
5d:0f:f4:8d:82:c5:89:3e:8e:61:b9:12:f7:19:cb:64:9a:34:
be:7c:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org