Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38302e302f32342d3234203d3e203338353237.roa
File: 32372e3132342e38302e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: qoOyJ2Oq14/8aQSg+e6dACUVaRrQMjKu2Ra/W9BTjUc=
Subject key identifier: 24:93:7A:16:67:B8:EB:07:90:BE:C0:EC:A1:E9:85:F2:93:A0:32:98
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 1D6F2A09D4A64E2B371E570A4DDCF238DD6E214D
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38302e302f32342d3234203d3e203338353237.roa
Signing time: Wed 15 Mar 2023 10:39:36 +0000
ROA not before: Wed 15 Mar 2023 10:34:36 +0000
ROA not after: Wed 13 Mar 2024 10:39:36 +0000
asID: 38527
IP address blocks: 27.124.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6f:2a:09:d4:a6:4e:2b:37:1e:57:0a:4d:dc:f2:38:dd:6e:21:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 15 10:34:36 2023 GMT
Not After : Mar 13 10:39:36 2024 GMT
Subject: CN=24937A1667B8EB0790BEC0ECA1E985F293A03298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:84:7e:1b:59:6d:28:73:8d:4b:c3:36:69:
83:27:2d:26:6c:70:ac:6c:d9:11:15:a6:80:b0:48:
75:5c:e0:f4:02:9e:ee:dc:1a:d4:82:76:c5:a0:1f:
49:10:1f:8b:26:b9:eb:27:fe:cf:be:3e:8f:6a:2e:
ab:d7:77:39:33:a1:f0:d1:04:ac:8a:ab:fc:d3:ea:
96:de:6f:9f:68:9c:3c:b8:09:3a:de:c9:dc:fc:03:
0d:26:1c:b5:77:d3:d8:2d:84:14:f4:df:b2:75:a9:
29:67:9c:a7:fc:fc:9c:53:68:a2:cf:c6:c2:43:93:
ce:6f:45:e7:db:b2:fd:21:2b:a9:da:1e:70:b0:82:
82:f6:e1:e5:5f:bf:80:d0:af:e0:6c:d2:37:d7:8f:
9b:b3:fe:b7:0d:75:87:02:55:63:b1:86:19:90:c2:
5f:58:06:75:c6:8f:c7:34:4a:13:91:11:21:a3:f8:
0a:89:e1:6f:08:0d:56:b6:7c:1c:7a:4e:42:fc:ba:
ec:83:76:02:04:35:d5:d2:ac:c7:ef:65:2e:86:82:
bb:59:84:e6:36:98:2a:12:45:a1:8f:f1:10:78:55:
63:57:66:1b:95:60:4c:34:78:75:ff:74:07:19:27:
2f:c7:ae:dc:35:c3:97:cc:66:f6:fd:b6:a3:1c:d7:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:93:7A:16:67:B8:EB:07:90:BE:C0:EC:A1:E9:85:F2:93:A0:32:98
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38302e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.80.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:75:fe:3b:26:10:d9:1e:39:0c:fb:41:47:1b:70:ca:da:48:
4a:83:26:c9:c4:2e:82:57:7c:cc:63:23:db:03:aa:22:39:b5:
9c:73:f3:ca:bc:8a:b6:93:57:64:da:9d:d5:81:fc:ee:ac:50:
1d:11:2c:73:dc:5b:10:16:0c:2f:2c:27:cb:c9:89:37:7a:23:
fe:4e:a1:e0:2a:68:ac:ee:39:78:16:f4:24:6e:43:fe:79:75:
9f:14:ba:58:55:4a:c2:c1:80:a2:2e:e1:a8:65:77:fd:95:a5:
45:57:5b:84:06:20:14:2e:eb:4f:e0:50:e2:1d:47:67:90:9a:
8d:9a:0b:68:98:da:26:bf:a1:80:b5:d7:61:d4:1a:3f:d9:af:
a1:4b:55:e0:c3:36:bc:33:4b:72:ef:5a:34:b1:14:ba:03:52:
64:75:55:f7:01:ac:7a:8f:6f:dd:14:1f:90:20:99:4b:f6:89:
20:a2:a7:b0:5d:f4:54:46:ab:07:fd:d1:e1:10:2e:8e:49:89:
fc:17:6c:ed:e3:15:83:45:a6:15:71:ac:75:9b:a1:5d:c8:af:
e9:71:9a:8e:bf:dc:d9:52:2b:db:0b:af:9a:ee:c0:b0:39:88:
7d:c9:d9:28:fd:ae:c5:f3:b4:cd:63:e3:bb:c2:25:45:c7:47:
5d:47:c2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 12:01:35 2023 by rpki-client on console-ams.rpki-client.org