Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39312e302f32342d3234203d3e203338353237.roa
File: 3131392e34372e39312e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: ZA4NT0VM4c0Bsj8UOrtgGdKbF0CctenVWMgjsmv+4NY=
Subject key identifier: 67:49:32:38:BD:91:55:4F:40:D7:F4:BF:93:38:03:76:A6:38:0F:CD
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 6AE3CCC50AA95168062417BDDA2F5E470B7A7576
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39312e302f32342d3234203d3e203338353237.roa
Signing time: Wed 15 Mar 2023 10:26:25 +0000
ROA not before: Wed 15 Mar 2023 10:21:25 +0000
ROA not after: Wed 13 Mar 2024 10:26:25 +0000
asID: 38527
IP address blocks: 119.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e3:cc:c5:0a:a9:51:68:06:24:17:bd:da:2f:5e:47:0b:7a:75:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 15 10:21:25 2023 GMT
Not After : Mar 13 10:26:25 2024 GMT
Subject: CN=67493238BD91554F40D7F4BF93380376A6380FCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:d1:a2:30:da:9f:bf:16:79:8d:6a:ff:dc:
a0:e4:1c:aa:60:75:4f:3f:cf:94:16:16:0e:62:23:
75:cb:17:ab:aa:5a:62:96:6c:d8:e5:11:b0:06:a6:
fd:59:fc:ef:28:33:db:d5:00:7c:8e:6e:d0:c0:14:
bf:5e:52:6c:f4:25:b3:c4:b7:bb:a1:6d:62:3f:b3:
08:d2:d9:7d:7d:e2:ed:0e:44:cb:75:a1:4d:00:28:
f5:bc:85:b9:40:79:50:37:01:0a:62:d2:4d:e1:c2:
83:b9:ef:b4:33:81:9e:03:00:16:68:b4:de:3c:51:
be:42:7a:13:88:ac:05:97:57:e6:d5:02:54:b2:f4:
6f:f9:d0:d7:38:f6:d2:b1:10:2b:d2:dc:cc:83:27:
40:36:e2:1a:ec:a5:39:92:b4:ca:87:3d:a0:4f:f4:
c2:a2:ee:d0:70:57:d6:d5:ae:0d:3b:50:46:05:da:
7f:33:a1:4d:35:73:be:bd:01:f2:ad:33:21:76:fb:
37:b7:89:48:eb:40:2f:91:95:08:d6:59:2e:ba:f5:
46:ef:c9:b9:eb:de:73:59:c7:8f:86:c3:e9:2d:a5:
bf:12:4a:46:7f:78:d1:2a:b1:98:13:89:8c:c4:3b:
56:82:62:82:96:cd:7d:62:86:5b:b5:a3:80:c3:00:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:49:32:38:BD:91:55:4F:40:D7:F4:BF:93:38:03:76:A6:38:0F:CD
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39312e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ef:2d:5e:f4:e9:81:1b:b2:d2:d6:2e:ab:a7:c3:5c:ac:fa:
0e:37:b1:c5:5e:d3:15:77:12:91:d8:0f:7e:30:71:ae:72:ef:
1c:be:47:0a:d1:f6:58:32:85:2f:db:d1:b8:d8:6a:11:5c:22:
19:1a:5c:6b:7c:72:40:b5:35:12:26:be:f0:37:7e:31:45:b7:
01:08:45:50:b6:6e:e3:d9:c4:c4:3a:2f:4a:5d:89:62:b4:c6:
ce:7c:1b:e3:57:d8:5e:96:93:87:de:2d:bc:be:74:4b:8c:d5:
d1:89:0b:72:41:f6:f7:41:cf:3d:31:3c:a8:46:9e:59:58:8e:
c8:ea:59:aa:30:5c:3a:de:20:c6:e2:9b:32:6f:b1:2e:c1:6e:
3f:8a:1a:b0:ee:07:96:8a:34:f5:6c:97:28:f1:fd:97:bb:50:
f9:7c:3d:3c:95:4e:0f:b2:f7:50:03:79:6e:7b:d1:77:60:08:
da:b4:e0:bb:13:5c:75:09:54:c6:fd:e2:d5:60:40:a4:15:a6:
ff:a7:23:28:65:bd:cc:b7:6c:a9:8b:e7:0d:9c:41:a5:04:1e:
5a:10:6d:aa:69:11:60:1d:25:c3:30:4a:6b:a0:21:23:f7:40:
49:1a:ee:77:84:a6:77:01:40:79:ac:6b:b5:49:a0:b0:98:d5:
64:00:92:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 12:01:35 2023 by rpki-client on console-ams.rpki-client.org