Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32362e302f32332d3233203d3e203130323137.roa
File: 3230322e3137312e32362e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier: YSzHDjEpNtxZH2JV1RncOp4oyVLfrEJIVlIY5qbLLT0=
Subject key identifier: E3:B2:FC:CA:B4:43:B7:C3:1E:32:22:30:EF:10:ED:18:D5:79:35:B5
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 5DD81A9725B9C143004C49CC328C775413CF88B8
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32362e302f32332d3233203d3e203130323137.roa
Signing time: Fri 17 Nov 2023 07:22:31 +0000
ROA not before: Fri 17 Nov 2023 07:17:31 +0000
ROA not after: Fri 15 Nov 2024 07:22:31 +0000
asID: 10217
IP address blocks: 202.171.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:d8:1a:97:25:b9:c1:43:00:4c:49:cc:32:8c:77:54:13:cf:88:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 17 07:17:31 2023 GMT
Not After : Nov 15 07:22:31 2024 GMT
Subject: CN=E3B2FCCAB443B7C31E322230EF10ED18D57935B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:d4:dc:72:d6:e3:34:9c:8a:92:95:60:45:
20:22:dd:61:54:34:19:80:ea:90:9f:1a:cf:f3:69:
d7:8a:53:3b:81:fd:e2:cf:31:ca:99:84:fe:4b:0a:
71:a6:cb:6b:6d:c9:6d:92:77:8c:ce:15:1f:b7:77:
e5:a3:73:5d:3c:95:92:91:64:39:d0:32:d8:db:cf:
1a:41:76:57:b5:7c:19:e3:9a:6c:96:e3:59:bf:f0:
d7:98:46:76:0c:0b:e3:81:8e:6e:21:5e:95:95:aa:
fb:46:ec:b9:63:c2:0b:78:55:25:6a:27:0a:1e:ff:
79:97:eb:4c:30:ef:07:4c:76:3b:fa:e3:f1:b6:40:
fe:29:7e:83:2c:f9:8f:89:b5:ad:6f:79:69:33:35:
48:09:39:ca:cb:48:3d:9b:31:b2:82:ca:5f:82:43:
7c:3b:6d:dd:bf:dd:a0:6a:93:90:eb:d8:cb:24:0a:
7d:ce:f9:30:7b:af:e5:ae:45:59:69:3f:e6:49:e0:
81:41:be:fe:3a:4a:e2:5f:40:af:1f:3e:4b:10:9e:
76:04:20:5b:bc:6e:57:e9:57:74:c2:68:e7:16:83:
c8:5e:a0:45:3b:1f:a0:4a:48:26:89:64:c5:17:55:
38:8c:fb:c8:02:19:ae:1c:63:93:5b:3f:e6:d7:a4:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:FC:CA:B4:43:B7:C3:1E:32:22:30:EF:10:ED:18:D5:79:35:B5
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32362e302f32332d3233203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.26.0/23
Signature Algorithm: sha256WithRSAEncryption
58:2a:b4:d6:6f:26:ba:13:41:32:10:8a:27:11:0f:e9:91:09:
12:83:74:90:55:b0:8f:5d:af:57:cd:47:c5:57:ac:e0:ba:75:
fe:a5:ca:4e:49:b3:ee:e1:2c:ed:14:12:90:f8:84:dc:68:6b:
75:52:b7:92:6d:2e:51:fc:31:4b:e7:d2:28:16:75:2e:34:cd:
82:0f:bd:9b:df:ee:be:30:ce:24:0b:0d:dd:48:5b:aa:7f:74:
f1:47:7d:2e:0d:25:d5:22:4a:45:a4:55:28:23:c6:a6:35:22:
27:45:8e:94:a8:8e:84:b4:28:4d:c1:5f:78:7b:70:19:43:91:
77:34:fb:6d:da:0a:1d:91:8f:c3:f1:44:af:33:b5:2a:a4:57:
4f:9c:b9:44:dd:80:b0:ee:c2:07:01:e3:e5:35:ee:56:df:fd:
4c:03:86:fd:fa:1e:bc:5d:0f:77:b7:8f:ba:ee:ce:61:bb:6d:
a7:9d:8c:3e:7f:b5:73:16:c4:1c:0c:69:75:23:bb:d5:61:7f:
16:00:f0:2f:fc:a4:ed:e1:36:ac:04:2b:64:12:6c:19:a2:20:
ab:2e:77:1c:e0:4d:99:98:c9:98:8d:5d:3e:78:a0:8c:7d:0e:
91:5c:f2:46:47:f5:ec:02:0c:d9:bd:75:45:90:96:db:49:07:
00:04:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org