Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39302e302f32342d3234203d3e20313338313431.roa
File: 3131392e34372e39302e302f32342d3234203d3e20313338313431.roa (raw, json)
Hash identifier: AFTiL30CPimuAji8SMg2C/j+MscQcHZV+qPS3GI/r1E=
Subject key identifier: BC:E6:11:43:7B:3E:78:91:D0:64:21:AF:2F:62:57:5E:9C:EA:47:26
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 11BFF3923C8CCB44675A17E9B5222C3ACC1AEF8A
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39302e302f32342d3234203d3e20313338313431.roa
Signing time: Wed 15 Mar 2023 09:46:46 +0000
ROA not before: Wed 15 Mar 2023 09:41:46 +0000
ROA not after: Wed 13 Mar 2024 09:46:46 +0000
asID: 138141
IP address blocks: 119.47.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:bf:f3:92:3c:8c:cb:44:67:5a:17:e9:b5:22:2c:3a:cc:1a:ef:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 15 09:41:46 2023 GMT
Not After : Mar 13 09:46:46 2024 GMT
Subject: CN=BCE611437B3E7891D06421AF2F62575E9CEA4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:14:47:1a:49:58:f8:59:40:a9:fe:a8:14:
ff:3a:cc:28:ef:f3:82:9e:dd:a6:05:a4:e6:c9:72:
3c:2b:ab:ba:fa:21:7a:64:a9:0b:cb:77:57:4c:7c:
ef:a9:93:9c:96:cb:e5:48:31:c4:e4:28:e8:82:2e:
61:a6:6a:35:dd:f3:5e:a0:61:d2:22:cc:a7:71:0e:
75:f2:d8:3c:21:6b:e7:c3:c2:85:80:e9:98:ad:ea:
7a:86:ff:6b:5b:1c:1e:d4:33:03:31:d9:3c:76:5a:
05:11:4b:d8:ac:b8:03:59:11:08:02:63:02:50:ed:
14:f9:60:12:09:d5:ca:15:22:3f:9d:7a:58:59:1b:
95:b0:c8:22:43:4e:fa:1f:8f:03:ca:9c:99:de:b9:
24:73:f5:da:5c:72:9e:61:69:8a:62:73:bb:65:0d:
87:22:c1:e0:42:73:64:1c:28:59:ec:b0:d8:45:88:
1a:7a:d1:6d:6d:ce:f7:0e:f4:c0:43:a5:2f:b8:92:
91:44:3f:f2:48:63:33:b1:74:62:bf:3d:b3:4e:03:
e4:0c:a4:f9:bb:fa:5b:23:3b:08:53:e9:0d:94:ea:
97:11:76:14:db:46:eb:fd:5e:42:8f:d6:26:cf:b0:
96:81:8c:38:3b:a6:3f:30:8b:28:76:7c:b8:46:96:
48:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E6:11:43:7B:3E:78:91:D0:64:21:AF:2F:62:57:5E:9C:EA:47:26
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39302e302f32342d3234203d3e20313338313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.47.90.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:f2:5d:52:5d:53:a3:b1:26:9b:0d:fd:a6:42:7b:63:32:b5:
af:ae:f9:f5:04:60:3d:f7:5f:cf:b6:e9:b3:a7:68:73:30:c5:
b7:9e:4b:af:02:b3:9f:61:a5:7d:b1:4a:ac:0e:5b:c9:63:2e:
2a:3c:41:c7:a2:7c:b5:04:d0:6b:29:0c:29:38:87:e8:09:41:
12:23:aa:c4:36:32:a5:07:83:18:97:ea:da:95:38:c1:5b:ab:
27:70:33:c1:79:fa:cb:fc:bc:df:a7:39:3f:6d:46:0d:51:2f:
30:91:cc:51:a2:55:9d:b7:30:2c:60:4d:39:69:b0:9d:c5:62:
86:ef:3b:e8:cb:16:a2:b6:20:be:61:00:11:2a:ab:67:1a:52:
72:47:06:48:a1:e3:2e:3d:bb:50:f5:be:20:45:f4:0c:cf:bb:
8d:89:d1:a9:69:20:3f:8d:51:28:cb:6f:1f:6f:25:3a:c8:14:
83:2c:db:d3:17:a7:87:84:7e:9d:02:bc:25:2e:1e:fc:10:98:
89:a4:b0:5e:23:56:30:d7:c0:84:98:d5:6e:c5:79:57:0c:97:
36:da:66:5c:bb:af:25:f5:9a:6f:90:35:e7:99:c9:5e:79:39:
63:5f:36:b8:61:cb:44:90:bb:63:99:79:c0:4e:40:cc:96:0b:
a7:38:bd:f9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEb/zkjyMy0RnWhfptSIsOswa74owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD
RjlBNjQ3MzAeFw0yMzAzMTUwOTQxNDZaFw0yNDAzMTMwOTQ2NDZaMDMxMTAvBgNV
BAMTKEJDRTYxMTQzN0IzRTc4OTFEMDY0MjFBRjJGNjI1NzVFOUNFQTQ3MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcBRHGklY+FlAqf6oFP86zCjv
84Ke3aYFpObJcjwrq7r6IXpkqQvLd1dMfO+pk5yWy+VIMcTkKOiCLmGmajXd816g
YdIizKdxDnXy2Dwha+fDwoWA6Zit6nqG/2tbHB7UMwMx2Tx2WgURS9isuANZEQgC
YwJQ7RT5YBIJ1coVIj+delhZG5WwyCJDTvofjwPKnJneuSRz9dpccp5haYpic7tl
DYciweBCc2QcKFnssNhFiBp60W1tzvcO9MBDpS+4kpFEP/JIYzOxdGK/PbNOA+QM
pPm7+lsjOwhT6Q2U6pcRdhTbRuv9XkKP1ibPsJaBjDg7pj8wiyh2fLhGlkiJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUvOYRQ3s+eJHQZCGvL2JXXpzqRyYwHwYDVR0j
BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG
QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB
NjQ3My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05
NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzEzOTJlMzQzNzJlMzkzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzODMxMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcvWjANBgkqhkiG
9w0BAQsFAAOCAQEAwfJdUl1To7Emmw39pkJ7YzK1r6759QRgPfdfz7bps6doczDF
t55LrwKzn2GlfbFKrA5byWMuKjxBx6J8tQTQaykMKTiH6AlBEiOqxDYypQeDGJfq
2pU4wVurJ3AzwXn6y/y836c5P21GDVEvMJHMUaJVnbcwLGBNOWmwncVihu876MsW
orYgvmEAESqrZxpSckcGSKHjLj27UPW+IEX0DM+7jYnRqWkgP41RKMtvH28lOsgU
gyzb0xenh4R+nQK8JS4e/BCYiaSwXiNWMNfAhJjVbsV5VwyXNtpmXLuvJfWab5A1
55nJXnk5Y182uGHLRJC7Y5l5wE5AzJYLpzi9+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 26 04:10:06 2023 by rpki-client on console-ams.rpki-client.org