Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e203338353237.roa
File: 3131392e34372e39352e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: MikIEUBfDUtP78rlpK9YalzGJ4yWHHZXtmQAV63VMSs=
Subject key identifier: E7:C3:BD:A2:77:62:15:CF:71:9B:4A:1C:9F:23:85:97:1F:4A:1E:EF
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 47F1EB3408B520F4BE752F3B8A88B2F53D10747E
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e203338353237.roa
Signing time: Wed 15 Mar 2023 10:50:24 +0000
ROA not before: Wed 15 Mar 2023 10:45:24 +0000
ROA not after: Wed 13 Mar 2024 10:50:24 +0000
asID: 38527
IP address blocks: 119.47.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f1:eb:34:08:b5:20:f4:be:75:2f:3b:8a:88:b2:f5:3d:10:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 15 10:45:24 2023 GMT
Not After : Mar 13 10:50:24 2024 GMT
Subject: CN=E7C3BDA2776215CF719B4A1C9F2385971F4A1EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:da:67:8e:f1:b6:12:b1:15:00:6a:23:c1:
1e:43:12:1c:54:62:19:35:d9:5a:ee:ca:78:54:9b:
de:69:13:69:89:d3:ab:1f:8c:73:ee:d9:1a:03:1a:
c1:cb:69:03:c7:21:00:3e:af:31:3f:12:2e:c6:99:
f4:52:3b:80:e8:cb:19:ff:73:52:ed:49:10:76:f9:
74:86:cf:dd:02:ae:38:cc:bd:70:e7:81:11:52:c9:
1a:d5:9d:f3:ad:4c:db:6c:1b:9e:e1:2c:29:01:2b:
18:c7:ff:cd:fc:83:35:2b:66:1f:8e:87:91:37:d7:
91:80:24:b9:b9:fb:c7:9c:a2:9e:21:60:f1:08:1c:
b9:b3:e3:c4:ff:35:a1:f1:e9:33:94:f4:4e:6b:db:
ea:55:eb:f8:5a:b2:f9:ae:58:d6:9e:9c:4b:5a:fb:
17:49:59:a5:32:17:0b:3d:e0:c5:e0:40:ab:ce:86:
ef:34:0e:32:ef:7e:c0:c5:28:23:32:de:0c:f1:f6:
15:84:60:7d:8c:39:42:0f:56:fd:82:71:17:38:a7:
e7:7f:00:ab:fa:b7:e6:b8:10:23:b2:ce:3b:bd:97:
7f:8c:9a:ef:82:99:60:03:00:e3:9a:50:fc:e8:6a:
a9:e1:91:46:ac:ce:c4:c0:8c:15:b5:13:54:5b:ce:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C3:BD:A2:77:62:15:CF:71:9B:4A:1C:9F:23:85:97:1F:4A:1E:EF
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e39352e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.47.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:15:d7:95:29:a1:33:a7:8d:08:1b:1e:ea:21:e6:71:0f:aa:
81:0f:77:0c:44:c3:38:8b:96:17:e2:28:17:75:8d:34:30:01:
cf:51:32:bc:73:37:56:0d:1f:5b:c2:21:93:79:1e:5f:95:ca:
f0:8d:25:be:40:7f:40:6e:4d:0f:fa:1b:2b:5a:6f:00:d7:e2:
7e:e2:c8:07:1b:8f:fd:c8:b2:b7:2c:62:14:a8:a6:fd:c5:aa:
3f:fb:7a:a8:ca:7e:46:91:da:e6:9e:b7:ec:c7:77:8f:5f:42:
cf:af:be:c7:1d:29:32:0c:c3:71:d2:a0:c6:ed:da:92:03:82:
99:02:15:2c:59:a8:c0:56:8b:e4:df:b1:ff:10:7a:ea:94:cb:
9f:83:53:cd:9a:bf:97:bc:d6:11:45:4f:47:5c:49:ed:e8:8e:
32:ac:12:5b:05:b7:59:ea:63:03:89:0a:7f:5e:1c:b1:b9:b8:
26:ac:ed:02:23:68:83:56:b2:22:9f:ed:48:0e:68:19:43:20:
26:79:78:3f:11:50:fe:56:aa:b2:68:4e:11:3f:cf:47:70:c1:
2d:98:d3:b0:99:19:84:58:c9:a7:ee:a0:d0:d0:49:7c:93:ff:
3b:a6:fb:c9:5d:88:5b:47:b8:3d:a9:11:a6:55:ed:08:40:68:
cf:89:11:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 12:01:57 2023 by rpki-client on console-ams.rpki-client.org