Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e392e302f32342d3234203d3e203130323137.roa
File: 3230322e3137312e392e302f32342d3234203d3e203130323137.roa (raw, json)
Hash identifier: uTN3AjWdCacBYRW80v8hOdJntwQgnYo1V8oFEd1kMyk=
Subject key identifier: 2C:6B:19:CB:09:F0:8D:6D:98:AC:0C:AA:F5:78:21:73:B7:AD:14:CA
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 0A8A64C6A8DE97BCCFD04776162DB7CE189DD380
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e392e302f32342d3234203d3e203130323137.roa
Signing time: Thu 31 Aug 2023 06:00:07 +0000
ROA not before: Thu 31 Aug 2023 05:55:07 +0000
ROA not after: Thu 29 Aug 2024 06:00:07 +0000
asID: 10217
IP address blocks: 202.171.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8a:64:c6:a8:de:97:bc:cf:d0:47:76:16:2d:b7:ce:18:9d:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Aug 31 05:55:07 2023 GMT
Not After : Aug 29 06:00:07 2024 GMT
Subject: CN=2C6B19CB09F08D6D98AC0CAAF5782173B7AD14CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:f6:35:c3:ab:eb:61:63:80:26:72:03:23:
78:d7:bc:40:cd:0f:81:1c:46:ba:d2:40:01:8c:7e:
e0:29:94:65:44:5d:d3:78:98:bb:b9:44:0a:e9:73:
fa:b1:e0:43:ba:bb:e3:9f:60:01:1d:18:e9:bb:fc:
68:99:b1:75:ae:ca:75:0f:47:4d:ec:60:ac:e7:c0:
44:16:05:9b:5f:85:f5:d0:d1:0f:f8:77:12:df:63:
e8:19:ae:f0:3f:11:af:32:32:54:d7:48:3d:87:4a:
f7:e8:2e:e1:4e:c3:42:66:f4:8d:77:68:17:48:e6:
c0:38:17:4c:35:7d:ef:51:64:25:f6:92:a1:06:20:
bd:75:08:84:bd:11:bb:7b:76:a2:82:48:c4:69:e3:
59:d4:5b:03:6b:e0:54:de:6d:d8:04:3d:e9:bc:d6:
75:fc:47:a3:0c:a9:f5:98:8e:4a:a4:b8:d4:e1:25:
29:4c:2b:27:3a:64:a1:30:d9:ae:c6:b9:80:b9:a6:
9a:8f:9a:27:ea:87:0d:0b:eb:02:47:9c:05:17:74:
af:2a:08:66:fa:3c:e3:f9:c4:88:32:47:57:a2:5b:
02:21:27:0b:d7:95:c3:34:18:ee:7e:49:53:5e:93:
cf:07:05:af:b1:38:0a:dc:98:f9:10:08:af:44:cb:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:19:CB:09:F0:8D:6D:98:AC:0C:AA:F5:78:21:73:B7:AD:14:CA
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3230322e3137312e392e302f32342d3234203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.171.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:bd:a4:91:56:8d:60:af:57:6c:eb:0a:72:e6:fa:57:96:ec:
e2:ee:3e:d6:51:0b:6e:d6:0a:4d:62:f7:0c:28:e7:92:72:29:
f8:bf:24:1f:71:41:fc:e8:11:20:dd:e0:f3:5c:74:d1:f7:99:
7c:3f:83:7f:3c:d7:cc:40:96:42:26:08:e7:40:e6:7d:ae:40:
5c:8d:cb:e7:a8:c5:ed:02:2c:13:47:6d:b5:c5:5e:b5:a3:11:
b1:74:75:83:a4:0d:c6:73:bb:12:c8:d1:4c:0c:86:51:73:b6:
ab:b1:59:e5:92:2d:18:f3:a4:c0:f7:f4:9c:a2:16:d4:ae:9f:
e3:75:59:64:d9:59:21:a7:04:4b:0d:bc:c5:ad:de:93:c2:81:
b5:16:c0:63:15:06:fb:b0:dd:37:db:e5:f4:1f:8e:83:48:10:
cc:37:96:f5:a4:44:25:c3:9f:35:43:5c:20:4e:ff:b4:a8:06:
7e:df:80:2b:65:63:7d:53:2a:0b:d8:75:59:9f:d0:a2:30:72:
8b:8c:40:67:2f:07:be:1e:98:6d:5f:91:be:cb:74:4e:92:7e:
9b:5c:0d:90:d7:d3:09:23:fa:73:42:80:6d:57:27:41:f6:cc:
6f:ad:09:97:b9:04:19:59:18:03:62:4c:62:eb:9c:58:11:a0:
6f:75:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 10:32:49 2023 by rpki-client on console-ams.rpki-client.org