Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32342e302f32312d3231203d3e203130323137.roa
File: 3230322e3137312e32342e302f32312d3231203d3e203130323137.roa (raw, json)
Hash identifier: GVgEAcPzaOcFNjrn3dbdNNjlIRGWZT2vVWGxYKiAYcg=
Subject key identifier: AF:93:F6:CE:D9:82:2C:3B:6B:96:C7:A1:AC:25:CD:4B:AA:69:19:99
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 1E124D004DD4AAB792D7A8C50DD0E93021652D69
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32342e302f32312d3231203d3e203130323137.roa
Signing time: Fri 17 Nov 2023 07:03:07 +0000
ROA not before: Fri 17 Nov 2023 06:58:07 +0000
ROA not after: Fri 15 Nov 2024 07:03:07 +0000
asID: 10217
IP address blocks: 202.171.24.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:12:4d:00:4d:d4:aa:b7:92:d7:a8:c5:0d:d0:e9:30:21:65:2d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 17 06:58:07 2023 GMT
Not After : Nov 15 07:03:07 2024 GMT
Subject: CN=AF93F6CED9822C3B6B96C7A1AC25CD4BAA691999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:ed:f3:89:7b:4e:ba:96:0d:8c:80:50:4b:
8b:8f:4e:fa:69:97:2c:7d:33:8e:54:5d:47:19:13:
b8:84:9b:cf:59:6d:b4:57:f9:79:bb:4a:97:41:f5:
58:9c:da:75:a9:44:f8:33:78:02:bb:34:0a:78:ea:
5a:bf:c9:0f:22:6e:92:68:80:e0:a0:13:e6:a1:3b:
da:fa:00:97:d8:a3:c5:61:ff:71:d3:a4:50:ce:d4:
e5:1b:5a:ec:fd:bc:65:94:c2:58:3e:33:71:fe:c0:
a1:59:80:95:08:66:c7:af:a6:41:f3:7e:56:28:b0:
7b:08:c7:18:f4:ec:16:16:71:54:da:be:e1:87:db:
66:ea:e0:07:75:d4:dd:0e:4a:07:25:ad:65:a3:fb:
7d:ba:fc:c6:c9:63:2c:70:4b:f6:66:ac:87:77:64:
db:69:5a:2f:ee:b1:7a:7c:15:7a:3a:ce:3c:2b:1d:
61:60:63:6d:da:15:08:39:c2:83:bf:62:4e:ba:5e:
e5:d0:3a:2c:ab:5b:75:ed:f4:af:61:4a:a4:b7:11:
09:20:81:0a:36:6f:af:aa:3f:6d:a4:eb:e5:e0:a5:
7a:5e:b5:b3:15:23:0e:9d:f0:c2:55:0e:04:06:d5:
d4:5e:e8:f6:20:05:5a:b7:76:cd:43:78:1a:ec:95:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:93:F6:CE:D9:82:2C:3B:6B:96:C7:A1:AC:25:CD:4B:AA:69:19:99
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32342e302f32312d3231203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.24.0/21
Signature Algorithm: sha256WithRSAEncryption
06:a3:26:51:a8:79:45:53:42:6b:d2:50:40:5b:67:f9:ab:fc:
db:8f:2e:00:9d:57:f2:01:ac:83:a9:bd:ab:8d:97:e3:f0:f9:
e6:07:0c:38:b6:53:1d:34:a8:42:d6:15:01:0f:b4:72:57:c3:
d1:96:84:ee:da:17:f5:4b:81:f5:7f:65:69:89:00:be:42:6a:
41:c8:23:7d:f5:27:56:47:62:11:7d:63:97:3c:69:02:2e:b1:
3d:ae:30:03:b7:8f:b3:2d:41:e1:ba:13:1d:9b:8c:1d:c7:7a:
78:4e:a2:51:24:d0:a5:db:25:d3:e9:e4:00:ff:37:d1:08:43:
54:c3:ed:7d:84:2e:f5:26:d7:47:1c:71:3d:8f:af:0a:b0:94:
0f:a5:ab:40:99:95:db:d8:1f:3f:46:c2:8e:ab:9a:7d:91:b1:
fe:6c:1d:14:2f:39:84:af:cf:73:db:9d:71:da:95:00:f1:ec:
68:0b:59:8c:7b:5e:2f:23:e1:75:45:f5:27:ac:40:d4:13:39:
54:0a:84:9c:ba:2a:d2:f9:a6:41:ec:5f:65:4c:00:8c:b2:16:
c8:b4:63:fa:2e:a6:32:0b:11:ee:72:d5:d5:12:1c:ea:b9:1b:
8b:6d:6c:c3:19:1b:4f:cd:50:e9:91:42:b6:70:bc:a5:64:28:
62:d6:b3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org