Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e352e302f32342d3234203d3e203130323137.roa
File: 3230322e3137312e352e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier: GwQ2jZ3tGbCxrmCMkaTp3hijX/T2ayUvxWpFYz3jtAk=
Subject key identifier: 78:F8:DE:21:1F:AF:BF:9D:DE:12:05:77:B4:22:9D:EA:58:21:6B:29
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 395C52C84FDF81F63ED68684AD4AB336DFEAE0BA
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e352e302f32342d3234203d3e203130323137.roa
Signing time: Thu 31 Aug 2023 06:00:03 +0000
ROA not before: Thu 31 Aug 2023 05:55:03 +0000
ROA not after: Thu 29 Aug 2024 06:00:03 +0000
asID: 10217
IP address blocks: 202.171.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 10:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5c:52:c8:4f:df:81:f6:3e:d6:86:84:ad:4a:b3:36:df:ea:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Aug 31 05:55:03 2023 GMT
Not After : Aug 29 06:00:03 2024 GMT
Subject: CN=78F8DE211FAFBF9DDE120577B4229DEA58216B29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:10:d8:f0:ba:67:0f:dc:17:ad:d9:7c:07:
2b:e5:17:da:22:c1:aa:ea:f4:fa:46:87:fa:88:ce:
d3:3b:27:c6:3b:66:f1:0a:32:b5:49:4a:86:c2:b4:
27:b3:ef:1a:52:2a:1f:c0:9f:4c:ea:46:7f:60:a8:
26:b6:b0:b8:a7:74:1a:83:02:c9:59:3d:ab:af:ac:
6e:fb:68:94:ef:11:e2:13:8c:ff:23:b0:52:2d:55:
34:c1:13:af:e9:19:4a:35:81:ce:3d:f2:e8:9d:8f:
ef:3a:3d:df:eb:f7:b3:0c:fc:27:4e:f7:f3:77:66:
4e:79:16:db:6b:03:d1:10:9e:17:5b:9a:59:31:38:
68:d2:b4:fd:51:fa:54:62:87:94:12:e8:eb:de:f6:
35:d7:7a:34:45:2d:8a:d5:14:62:04:c8:42:2a:6b:
7e:30:9b:21:34:6f:11:de:bb:b3:84:cb:b5:86:63:
80:a4:53:ee:00:2e:f5:5c:17:1a:86:36:84:75:ba:
b2:73:3c:30:ba:52:b6:ec:39:e3:d8:72:8b:6f:5a:
07:f5:d7:2f:ac:a8:47:be:50:77:3a:ec:9e:45:ae:
53:92:f0:bd:50:90:55:e5:67:5a:d7:49:d0:dd:c9:
f7:d8:1d:6b:3e:40:9d:a3:1e:e7:0d:76:c4:52:76:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:DE:21:1F:AF:BF:9D:DE:12:05:77:B4:22:9D:EA:58:21:6B:29
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e352e302f32342d3234203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:97:8c:46:4f:43:cd:5e:7b:39:dc:f2:fc:5b:fa:7c:cd:e1:
36:bc:aa:ba:3c:65:05:e6:79:d3:1c:cb:38:c6:a7:fa:c5:c1:
21:21:4c:d7:a3:b7:87:89:a0:c8:cc:86:0b:3e:85:01:b8:ab:
d9:7e:e6:c5:24:e8:d2:2c:3f:26:cf:fb:c0:15:eb:7f:b3:9c:
04:64:51:3f:df:3b:6c:45:5b:5c:34:3e:18:d2:21:ac:03:93:
f6:5f:df:02:e9:04:d6:fd:81:55:ce:f2:0e:d6:95:1c:47:ec:
61:08:72:b7:38:c6:d9:f6:f7:c6:60:81:e2:b6:0b:03:a4:61:
3f:72:df:a3:e3:e3:75:d8:8b:80:b5:0a:d2:ae:de:43:a5:0e:
cd:30:22:01:79:e2:fe:fa:f4:51:6d:58:aa:42:43:ab:cd:73:
0a:83:e6:14:05:df:a2:14:72:0e:d3:e2:af:0e:f0:c0:e7:82:
0c:50:c1:d9:9c:73:6e:f4:7c:33:fe:09:4a:de:a6:a5:c0:6a:
62:76:34:97:0a:5d:13:f2:61:0c:81:32:52:78:55:f3:e1:d1:
54:0c:99:ae:ee:06:aa:94:67:b9:9d:9e:28:96:48:11:90:57:
8e:4d:63:f1:79:04:ff:7a:fe:1f:f4:67:bd:9d:54:10:c2:48:
5e:c0:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org