Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e203338353237.roa
File: 3132342e3130392e32322e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: radLee8jKyOqtTKA/5KUI0z20EAw6UagbI424s1rKQQ=
Subject key identifier: C8:15:4A:18:F3:02:D6:39:5D:97:56:8B:C9:69:56:89:09:3F:32:6A
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 7F1855698E198383164C620CD5A70637A4AF71AE
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e203338353237.roa
Signing time: Wed 14 Feb 2024 12:00:02 +0000
ROA not before: Wed 14 Feb 2024 11:55:02 +0000
ROA not after: Wed 12 Feb 2025 12:00:02 +0000
asID: 38527
IP address blocks: 124.109.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 12:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:18:55:69:8e:19:83:83:16:4c:62:0c:d5:a7:06:37:a4:af:71:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Feb 14 11:55:02 2024 GMT
Not After : Feb 12 12:00:02 2025 GMT
Subject: CN=C8154A18F302D6395D97568BC9695689093F326A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:20:8b:24:42:d0:45:c0:1e:28:9b:37:0d:
e5:7a:43:5f:8a:00:73:c2:51:45:e6:d5:d7:42:18:
0a:a3:8d:b4:fa:c5:b9:10:93:41:8a:e9:d8:29:c8:
d3:3c:0b:db:1e:35:05:2b:5a:04:22:af:83:52:60:
8c:f4:ee:fe:45:f7:9e:c3:e7:34:1c:09:8d:92:34:
a5:93:f0:e4:99:62:90:49:70:0f:3f:8a:a9:5e:f4:
6c:1a:83:3c:de:15:1e:c8:cd:0d:f0:82:38:88:cd:
64:73:2f:7d:ae:bd:a2:c9:30:c4:9b:96:68:7b:29:
22:93:d3:e5:0d:32:17:7b:61:04:ca:85:5f:9f:de:
e1:1a:30:f6:db:ac:79:4b:0a:ec:e6:8c:e5:a6:80:
d4:50:e4:ea:5f:6b:bc:f2:63:73:ca:91:2e:8d:3a:
c5:ce:e8:bc:e0:68:15:57:23:40:b9:fe:7c:63:d6:
84:ef:18:58:83:df:1f:83:4b:37:9a:94:4d:68:9b:
5d:6d:90:35:b8:b8:32:ad:1d:ca:0f:99:02:b5:51:
71:d9:e7:4d:ad:de:c1:97:ee:3e:07:83:a7:a3:d9:
15:8a:37:be:df:13:03:bc:b2:94:af:b7:6d:31:a3:
36:6b:08:d3:2e:1e:3b:7f:ce:33:67:4c:2a:4a:54:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:4A:18:F3:02:D6:39:5D:97:56:8B:C9:69:56:89:09:3F:32:6A
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3132342e3130392e32322e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.109.22.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:95:ff:68:62:d2:16:be:7a:23:d4:27:3e:62:84:e7:06:5f:
8c:7e:dc:f7:4b:ac:2b:a6:20:23:22:4e:7a:e5:29:a1:f0:ec:
3f:7c:02:7f:53:bf:c3:0b:67:47:1e:00:cd:2e:bd:4c:c6:dd:
15:9e:9d:59:19:d5:9c:03:9d:35:4d:3f:6e:50:52:3d:37:7e:
c0:15:01:42:d7:98:ea:03:99:cc:08:23:e2:b2:13:00:31:53:
86:0a:76:62:41:ac:5d:78:03:46:68:a8:b9:94:d0:3f:94:30:
c0:92:42:d9:7d:d7:a3:09:cb:5b:0b:c8:c1:93:3d:5b:b6:53:
83:67:b4:53:15:42:82:a3:88:fa:28:a2:46:a3:a9:dd:93:19:
d7:2f:e0:24:ac:19:28:73:ed:85:d5:2a:df:9e:2c:26:65:37:
e0:50:c0:ee:dd:94:f9:b2:59:e1:20:7e:15:48:80:74:a5:54:
c2:9f:68:cf:bb:5a:d4:0d:3b:12:ea:a4:cc:e7:4a:9a:df:f3:
ae:8c:a0:36:42:51:02:ce:e3:10:e5:01:a5:c8:06:a3:6e:a9:
50:c5:b1:be:23:ac:e5:c6:95:d3:af:1c:76:1c:08:d8:ff:f7:
59:bf:41:76:7c:5e:80:ca:76:dc:ea:a8:e7:bd:4a:58:d2:f8:
34:a5:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:36:45 2024 by rpki-client on console-ams.rpki-client.org