Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32342e302f32322d3232203d3e203130323137.roa
File: 3230322e3137312e32342e302f32322d3232203d3e203130323137.roa (raw, json)
Hash identifier: 3L2aWahOv1cCW5YzMETSSDDxi4MrE8Old1Xgd5qm23I=
Subject key identifier: E0:91:B8:45:72:7D:63:70:21:B0:F9:F0:18:E7:80:D2:47:64:B6:E9
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 2988B33CAD06798245F8AD595CC6C8634B0C96CC
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32342e302f32322d3232203d3e203130323137.roa
Signing time: Fri 17 Nov 2023 07:10:10 +0000
ROA not before: Fri 17 Nov 2023 07:05:10 +0000
ROA not after: Fri 15 Nov 2024 07:10:10 +0000
asID: 10217
IP address blocks: 202.171.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:88:b3:3c:ad:06:79:82:45:f8:ad:59:5c:c6:c8:63:4b:0c:96:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 17 07:05:10 2023 GMT
Not After : Nov 15 07:10:10 2024 GMT
Subject: CN=E091B845727D637021B0F9F018E780D24764B6E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:ad:43:a1:f1:50:9e:ee:d1:e6:46:26:34:
d3:0b:e5:cc:4e:1a:6b:b9:60:a5:54:c3:ae:9d:59:
d8:1b:19:b5:6c:dc:9d:3b:64:b8:08:39:b9:9b:f8:
e7:e6:62:c0:37:c0:d5:93:5a:1b:b5:87:a2:b0:7f:
30:12:fe:c5:62:53:bb:17:66:15:ce:e8:2e:ac:60:
74:a1:b2:d6:cb:47:23:f7:3f:58:1b:16:d0:b6:9e:
c3:ab:8b:a3:83:13:98:85:15:40:6e:53:50:07:11:
99:40:d4:ee:75:95:63:60:48:a4:f6:b3:e2:b6:8a:
6d:bc:4c:75:a0:fa:99:a4:6b:57:41:8b:a1:82:b4:
28:70:58:70:7e:59:a0:8c:d9:e6:db:de:fe:2d:30:
35:49:34:72:bf:55:b0:38:d2:ee:4d:cf:82:12:50:
fc:89:f9:a1:65:43:3a:24:98:4a:17:1f:ef:4d:48:
1c:aa:4e:b1:e8:e4:35:cc:f6:2e:1e:58:41:db:47:
5e:ec:92:c1:47:a5:2d:19:5e:a0:4b:22:e5:60:b8:
34:04:12:5e:8e:1f:b7:ce:88:6d:a8:12:b5:0e:8b:
1a:ed:8d:75:ec:c9:62:2a:fa:ce:d3:b6:f4:c1:dc:
5b:ed:d3:c0:28:fa:d7:c6:79:01:fb:97:0a:b3:e5:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:91:B8:45:72:7D:63:70:21:B0:F9:F0:18:E7:80:D2:47:64:B6:E9
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32342e302f32322d3232203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.24.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ff:bb:6d:39:59:74:e1:99:27:8c:df:aa:21:39:87:07:e9:
cd:3c:f1:db:da:2d:f9:e0:49:31:8e:f0:53:f2:52:11:42:5d:
5c:fc:7d:a9:42:23:7a:80:82:b1:b0:f5:dc:e9:88:da:9f:d2:
96:c7:43:13:a7:d6:73:16:06:65:d0:5c:83:04:8d:78:73:de:
90:e1:85:89:71:3f:66:82:58:27:1f:67:a2:79:5b:9e:39:66:
e3:64:4b:5e:75:53:cf:b2:54:ee:b9:28:14:27:d5:81:96:b7:
d2:c8:70:5a:e6:80:fc:96:06:5f:2e:37:22:da:42:05:9e:27:
70:4a:d7:67:12:39:7b:96:9c:d9:14:42:0c:06:9c:2c:2d:64:
cc:2b:80:c5:cd:c8:9c:09:76:79:28:c2:cf:05:3b:9c:25:46:
02:b5:70:18:0d:9c:f0:17:ef:f6:6a:67:8a:b3:28:82:d8:a9:
30:16:e3:d7:e4:43:2c:69:7e:a1:9f:ea:f4:6d:57:1b:ec:05:
01:a4:a9:90:4b:39:a2:d2:bd:66:43:47:27:e7:f0:c2:1e:db:
3a:86:fa:99:c4:47:9b:0c:c7:58:69:ca:a1:14:32:3f:1d:34:
91:b9:4e:6f:14:47:9a:2c:24:fd:22:e6:6a:f9:26:c7:ae:39:
88:6c:04:d4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKYizPK0GeYJF+K1ZXMbIY0sMlswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF
MkMzQjUxMjAeFw0yMzExMTcwNzA1MTBaFw0yNDExMTUwNzEwMTBaMDMxMTAvBgNV
BAMTKEUwOTFCODQ1NzI3RDYzNzAyMUIwRjlGMDE4RTc4MEQyNDc2NEI2RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRa1DofFQnu7R5kYmNNML5cxO
Gmu5YKVUw66dWdgbGbVs3J07ZLgIObmb+OfmYsA3wNWTWhu1h6KwfzAS/sViU7sX
ZhXO6C6sYHShstbLRyP3P1gbFtC2nsOri6ODE5iFFUBuU1AHEZlA1O51lWNgSKT2
s+K2im28THWg+pmka1dBi6GCtChwWHB+WaCM2ebb3v4tMDVJNHK/VbA40u5Nz4IS
UPyJ+aFlQzokmEoXH+9NSByqTrHo5DXM9i4eWEHbR17sksFHpS0ZXqBLIuVguDQE
El6OH7fOiG2oErUOixrtjXXsyWIq+s7TtvTB3Fvt08Ao+tfGeQH7lwqz5dANAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU4JG4RXJ9Y3AhsPnwGOeA0kdktukwHwYDVR0j
BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE
NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz
QjUxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJmYjcwODE4LTIzNjYtNDJlMC05
ZGJkLTI1NDM4MTA2OWU1Ny8wLzMyMzAzMjJlMzEzNzMxMmUzMjM0MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzEzMDMyMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsqrGDANBgkqhkiG
9w0BAQsFAAOCAQEANP+7bTlZdOGZJ4zfqiE5hwfpzTzx29ot+eBJMY7wU/JSEUJd
XPx9qUIjeoCCsbD13OmI2p/SlsdDE6fWcxYGZdBcgwSNeHPekOGFiXE/ZoJYJx9n
onlbnjlm42RLXnVTz7JU7rkoFCfVgZa30shwWuaA/JYGXy43ItpCBZ4ncErXZxI5
e5ac2RRCDAacLC1kzCuAxc3InAl2eSjCzwU7nCVGArVwGA2c8Bfv9mpnirMogtip
MBbj1+RDLGl+oZ/q9G1XG+wFAaSpkEs5otK9ZkNHJ+fwwh7bOob6mcRHmwzHWGnK
oRQyPx00kblObxRHmiwk/SLmavkmx645iGwE1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org