Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32322d3232203d3e203130323137.roa
File: 3230322e3137312e31362e302f32322d3232203d3e203130323137.roa (raw, json)
Hash identifier: iRZogrI7f1tgmQAyOz/LXtO6OoJkal/gRp6QwAYUnSI=
Subject key identifier: F9:7D:77:9B:FF:AD:F0:37:A4:D2:13:2E:5C:A7:FF:94:A1:73:D2:FF
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 774884E353943AC2563F3E9E2BB0BD7AAC6D2DD8
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32322d3232203d3e203130323137.roa
Signing time: Fri 17 Nov 2023 07:08:05 +0000
ROA not before: Fri 17 Nov 2023 07:03:05 +0000
ROA not after: Fri 15 Nov 2024 07:08:05 +0000
asID: 10217
IP address blocks: 202.171.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:48:84:e3:53:94:3a:c2:56:3f:3e:9e:2b:b0:bd:7a:ac:6d:2d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 17 07:03:05 2023 GMT
Not After : Nov 15 07:08:05 2024 GMT
Subject: CN=F97D779BFFADF037A4D2132E5CA7FF94A173D2FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:58:7f:47:43:3c:47:f8:b0:12:d7:84:ea:
e5:ec:91:44:ab:56:d7:2f:3d:a4:16:30:5c:a2:6f:
43:07:15:58:53:a8:0a:cb:6c:3e:f1:e2:53:fe:57:
a4:0f:58:3c:26:56:a3:35:e0:57:af:49:eb:36:11:
15:75:4d:71:98:aa:20:88:c5:4c:a3:6f:40:47:cd:
9c:5b:12:d8:76:0c:f2:1e:b5:fa:0b:4d:10:cd:94:
e9:f4:49:91:22:31:19:d5:c7:69:cd:ee:2e:6b:ab:
47:b5:71:fb:da:8b:2c:c4:11:9a:e7:05:f2:c0:f8:
b1:b5:d4:9b:2c:0a:a2:65:3e:47:1a:5b:80:04:12:
90:a5:7e:5d:9e:98:a8:0a:33:40:7a:34:ec:6e:63:
c7:5a:a0:69:16:2e:03:74:49:d5:ac:4d:a2:c7:0d:
f9:88:7e:b4:28:26:f7:0f:b8:8c:f1:a0:8f:c2:d4:
6d:d2:4b:a4:d5:ee:97:bf:f7:1b:c7:db:44:a7:ee:
df:ed:0f:85:27:08:b4:97:f9:45:a1:22:48:16:06:
6f:17:ef:57:51:d6:d5:53:b2:04:5a:cf:a0:fe:18:
d9:f9:d6:86:f8:c7:ae:76:05:33:4b:b4:04:35:04:
db:f9:57:8b:ea:ba:6d:3d:6c:d0:3f:ba:42:c5:e4:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7D:77:9B:FF:AD:F0:37:A4:D2:13:2E:5C:A7:FF:94:A1:73:D2:FF
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e31362e302f32322d3232203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.16.0/22
Signature Algorithm: sha256WithRSAEncryption
78:fc:b1:61:49:43:38:72:90:de:b7:64:f6:65:53:73:e6:ee:
11:0d:70:48:5c:24:56:fd:c3:b6:8e:38:08:3e:be:c1:2d:82:
ac:f7:cd:97:b5:7d:52:4b:8d:0f:9c:5a:36:52:46:d5:21:23:
9d:67:00:28:24:64:f5:61:82:64:60:a1:06:b4:ce:5c:ba:f5:
f4:4e:a8:72:64:cb:fc:18:70:b1:e1:58:ce:45:75:a6:99:53:
29:54:d9:36:b1:51:42:28:89:4c:d8:80:2f:17:a0:66:d1:6d:
4a:fa:22:b2:bd:9c:8d:7c:5f:c6:a3:73:a1:5f:47:eb:70:d9:
fc:4b:41:67:43:9f:25:24:a7:92:41:9c:31:37:c0:c9:dd:f3:
4d:85:15:11:28:e6:41:cb:1f:15:9a:1e:58:52:d3:4c:75:91:
af:34:ba:6e:0b:1b:79:c1:cb:97:95:f5:53:5b:cc:16:2f:d5:
49:62:69:44:b8:21:81:44:a4:56:1b:94:22:7f:de:c0:9c:fd:
81:4c:77:e9:47:17:7e:73:47:0d:24:1e:70:0b:b6:a5:5c:28:
24:f2:85:9d:3f:42:57:69:f6:9e:6b:7f:54:3a:a0:81:18:97:
71:01:2a:0f:07:c0:15:37:c3:ae:a4:57:2d:e5:c4:f4:28:47:
4c:0c:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org