Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32382e302f32342d3234203d3e203130323137.roa
File: 3230322e3137312e32382e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier: 3vpe9tFWfmZGnGmBJOrTgIxSQr5Ssaveja6yQpDbVgM=
Subject key identifier: A1:BD:B6:BE:91:B4:EE:C0:62:73:69:A4:B3:96:5C:33:96:ED:84:A2
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 53A7EA0AAB7ED9CD4D45158325DA103463ADDE
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32382e302f32342d3234203d3e203130323137.roa
Signing time: Thu 31 Aug 2023 06:00:07 +0000
ROA not before: Thu 31 Aug 2023 05:55:07 +0000
ROA not after: Thu 29 Aug 2024 06:00:07 +0000
asID: 10217
IP address blocks: 202.171.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a7:ea:0a:ab:7e:d9:cd:4d:45:15:83:25:da:10:34:63:ad:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Aug 31 05:55:07 2023 GMT
Not After : Aug 29 06:00:07 2024 GMT
Subject: CN=A1BDB6BE91B4EEC0627369A4B3965C3396ED84A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:05:48:11:c7:16:55:d7:1f:ae:17:4e:cb:
6a:71:84:f7:a4:23:3e:d6:0d:27:a2:83:40:2e:29:
ad:fe:83:31:cd:e6:1e:43:2d:85:7f:53:8a:d7:7a:
2c:50:fc:02:c0:16:b5:ad:34:4c:f5:bd:f7:9b:cc:
32:55:f0:4a:88:4f:bf:59:32:4e:bf:78:8a:dc:52:
d9:3a:c1:a7:02:f7:87:e6:21:09:16:77:b9:e8:29:
da:92:16:74:f8:71:54:37:e3:3d:c0:3c:2f:54:9e:
3e:4c:39:dc:1c:2a:f2:c9:38:a0:f0:a4:0e:33:41:
08:ec:44:6c:ea:b1:eb:e3:44:85:69:b9:70:82:2a:
70:08:a2:0e:21:b7:d1:e8:45:3f:e7:e2:75:51:30:
c7:84:63:f9:e8:69:d7:52:b7:b1:b0:12:13:7b:1c:
37:22:1b:42:70:83:42:72:2f:4a:79:b6:af:63:82:
5c:1d:f5:80:7f:81:88:01:91:7d:ba:1e:31:82:84:
74:4b:ea:74:99:a8:34:38:6b:14:43:db:1c:f6:2c:
d2:e8:24:41:30:6b:41:73:52:10:fa:da:b4:4f:6b:
35:55:cb:91:2a:c0:27:29:70:ee:aa:1e:2d:99:63:
be:ca:36:7a:99:26:63:8d:d2:36:08:60:38:3c:cc:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:B6:BE:91:B4:EE:C0:62:73:69:A4:B3:96:5C:33:96:ED:84:A2
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e32382e302f32342d3234203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e3:35:bb:ac:5f:3f:fb:5e:16:38:fd:f6:13:17:ab:7a:65:
e6:d7:a8:a7:93:70:83:ff:0e:7c:61:88:aa:62:49:8f:80:72:
3e:bc:24:d8:a8:22:b2:10:82:e0:ff:39:84:28:1a:f9:08:45:
d7:b3:cf:43:a8:89:ed:43:55:15:7a:3c:3d:4e:20:91:95:d3:
cb:17:47:89:a7:24:06:4f:c8:ba:36:49:fd:ee:6d:4d:3d:2f:
06:42:55:c9:19:dc:af:c9:13:47:4b:66:02:4d:e5:f3:bf:71:
12:cc:bf:6a:4c:b3:6c:ba:fa:42:45:31:10:2c:d5:52:8b:35:
78:d0:dc:d4:a9:81:e9:00:c2:d0:ad:d8:7c:9f:63:47:56:e4:
d8:f1:26:62:b3:e3:b3:c6:18:94:1c:95:cd:b8:a0:cc:d7:3e:
01:30:af:d9:33:cc:8f:0d:04:78:58:9d:f1:c4:fe:01:0e:54:
ac:47:3e:91:d1:81:e0:bd:97:68:84:49:01:69:02:4e:5e:15:
a7:03:1e:4f:bb:55:4b:74:3e:d6:9b:d8:f1:94:97:1b:ff:2c:
d8:58:08:bb:ef:f5:86:aa:d8:7d:80:7b:ee:81:2a:f6:fa:90:
0d:4a:b2:d1:77:e1:53:82:a6:3e:ae:c8:f2:49:e9:e4:61:4a:
e5:b4:3b:4b
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgITU6fqCqt+2c1NRRWDJdoQNGOt3jANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygyMjk4NjY1MDhENkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUy
QzNCNTEyMB4XDTIzMDgzMTA1NTUwN1oXDTI0MDgyOTA2MDAwN1owMzExMC8GA1UE
AxMoQTFCREI2QkU5MUI0RUVDMDYyNzM2OUE0QjM5NjVDMzM5NkVEODRBMjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKUqBUgRxxZV1x+uF07LanGE96Qj
PtYNJ6KDQC4prf6DMc3mHkMthX9Titd6LFD8AsAWta00TPW995vMMlXwSohPv1ky
Tr94itxS2TrBpwL3h+YhCRZ3uegp2pIWdPhxVDfjPcA8L1SePkw53Bwq8sk4oPCk
DjNBCOxEbOqx6+NEhWm5cIIqcAiiDiG30ehFP+fidVEwx4Rj+ehp11K3sbASE3sc
NyIbQnCDQnIvSnm2r2OCXB31gH+BiAGRfboeMYKEdEvqdJmoNDhrFEPbHPYs0ugk
QTBrQXNSEPratE9rNVXLkSrAJylw7qoeLZljvso2epkmY43SNghgODzMSw0CAwEA
AaOCAjIwggIuMB0GA1UdDgQWBBShvba+kbTuwGJzaaSzllwzlu2EojAfBgNVHSME
GDAWgBQimGZQjW1iRSPtrSoN4egq4sO1EjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud
HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJm
YjcwODE4LTIzNjYtNDJlMC05ZGJkLTI1NDM4MTA2OWU1Ny8wLzIyOTg2NjUwOEQ2
RDYyNDUyM0VEQUQyQTBERTFFODJBRTJDM0I1MTIuY3JsMHQGCCsGAQUFBwEBBGgw
ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v
SUROSUMtSUQvMi8yMjk4NjY1MDhENkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNC
NTEyLmNlcjCBogYIKwYBBQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk
YmQtMjU0MzgxMDY5ZTU3LzAvMzIzMDMyMmUzMTM3MzEyZTMyMzgyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMTMwMzIzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyqscMA0GCSqGSIb3
DQEBCwUAA4IBAQAt4zW7rF8/+14WOP32ExeremXm16ink3CD/w58YYiqYkmPgHI+
vCTYqCKyEILg/zmEKBr5CEXXs89DqIntQ1UVejw9TiCRldPLF0eJpyQGT8i6Nkn9
7m1NPS8GQlXJGdyvyRNHS2YCTeXzv3ESzL9qTLNsuvpCRTEQLNVSizV40NzUqYHp
AMLQrdh8n2NHVuTY8SZis+OzxhiUHJXNuKDM1z4BMK/ZM8yPDQR4WJ3xxP4BDlSs
Rz6R0YHgvZdohEkBaQJOXhWnAx5Pu1VLdD7Wm9jxlJcb/yzYWAi77/WGqth9gHvu
gSr2+pANSrLRd+FTgqY+rsjySenkYUrltDtL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org