Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e33302e302f32332d3233203d3e203130323137.roa
File: 3230322e3137312e33302e302f32332d3233203d3e203130323137.roa (raw, json)
Hash identifier: HEG1Qlj6x6zGAafFvPn7Y7niV81E1g8RGiljoreJZ7s=
Subject key identifier: 15:2F:F7:A6:9F:01:52:0F:15:A5:BB:88:CC:C8:B9:DB:CA:93:9E:D3
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 40DCB697FE4D887A62109EDE41B2F201BB4AA934
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e33302e302f32332d3233203d3e203130323137.roa
Signing time: Fri 17 Nov 2023 07:23:51 +0000
ROA not before: Fri 17 Nov 2023 07:18:51 +0000
ROA not after: Fri 15 Nov 2024 07:23:51 +0000
asID: 10217
IP address blocks: 202.171.30.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:dc:b6:97:fe:4d:88:7a:62:10:9e:de:41:b2:f2:01:bb:4a:a9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 17 07:18:51 2023 GMT
Not After : Nov 15 07:23:51 2024 GMT
Subject: CN=152FF7A69F01520F15A5BB88CCC8B9DBCA939ED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:cb:27:d5:de:6d:40:05:15:6f:bc:f1:b5:
5d:55:25:52:a3:52:38:be:80:34:eb:ab:db:c4:7f:
58:1d:90:37:3f:4a:ad:c8:6c:1a:95:a3:c0:a3:fc:
5b:98:f8:d8:a5:3a:d4:c2:a4:5d:1e:97:f5:28:a2:
3e:65:1b:47:65:7a:69:88:93:75:c8:8e:11:68:c8:
9e:6c:71:30:78:48:e4:49:fd:07:32:62:e9:b6:bd:
f8:4c:63:a6:8b:17:98:cd:c4:ba:7f:55:ed:29:12:
8f:41:51:7d:36:98:a6:d5:ed:f5:3c:e9:dc:35:8f:
e1:5b:e6:0b:63:6b:ca:cd:14:02:5b:a1:46:35:d9:
e6:26:1a:27:40:0f:71:0e:42:24:78:3c:2e:6d:88:
3e:46:54:d8:1d:94:59:17:4d:97:1a:dc:d3:32:be:
f0:35:43:c4:98:1c:e0:17:97:5e:02:26:8c:55:aa:
19:3a:12:68:2f:b8:d3:41:7e:59:6a:44:e4:47:07:
cc:da:39:0b:0f:06:bf:c7:11:0a:d2:8c:0a:51:3b:
eb:55:4a:c1:56:7a:83:44:4c:cc:df:b9:62:42:87:
87:a9:4a:83:8e:df:f8:f8:09:b1:17:8e:37:84:e7:
d9:e6:79:a8:ca:44:08:f6:3d:2e:00:2f:4e:34:80:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:F7:A6:9F:01:52:0F:15:A5:BB:88:CC:C8:B9:DB:CA:93:9E:D3
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e33302e302f32332d3233203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.30.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:81:9b:7f:5e:ee:5b:56:f2:e3:09:a8:70:48:bf:99:ee:83:
36:d3:34:7a:6d:33:ac:67:62:60:e1:cd:81:9b:cc:3b:20:8b:
7c:ee:02:44:42:2c:b5:a2:8b:e8:b2:8c:c8:e1:3a:04:ff:4c:
fc:5b:6e:94:79:2d:1d:08:c1:44:53:77:79:8d:0b:d5:78:10:
be:c2:b8:8b:21:d5:21:b8:f0:7a:04:6e:4d:b0:ab:a1:8d:37:
a7:f4:e7:77:8b:9d:5b:fd:35:41:58:e4:48:2e:a7:f8:80:7f:
cf:f9:54:8d:69:06:42:8e:a5:63:fa:95:be:e7:81:98:f5:94:
8f:ff:43:5c:ef:83:64:a2:7f:23:94:80:93:85:66:14:ed:0b:
d3:60:1a:59:e6:eb:68:b7:1d:3c:1d:03:ad:67:d3:69:1e:b1:
21:5e:4a:29:94:c6:95:6b:a5:0f:7d:04:06:d5:49:c4:0d:00:
78:cf:c4:01:0d:fb:91:aa:77:0a:ec:9b:db:e8:fd:1c:67:0b:
5a:ae:b1:5d:b6:18:cd:3e:1b:75:55:46:92:31:1d:1b:aa:90:
7c:66:df:7c:11:21:7e:36:b3:8c:32:d1:cd:66:db:d8:e1:c0:
71:a2:4c:eb:e0:f4:f2:5e:4b:29:e3:8e:87:df:ac:a5:c4:67:
7c:69:03:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org