Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e20313338303930.roa
File: 32372e3132342e38332e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier: R60W+gSkd8s9tvMZ2mMUwvYK63w9WxF5DnFhNM3hAtQ=
Subject key identifier: 1D:18:D9:B3:CB:DA:A1:AF:71:9D:DC:16:34:8F:A8:2D:D2:6E:BC:B9
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 57FF0A3448B9D41D59FA4451A5B9C0C6683B2059
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e20313338303930.roa
Signing time: Thu 09 Mar 2023 12:45:20 +0000
ROA not before: Thu 09 Mar 2023 12:40:20 +0000
ROA not after: Thu 07 Mar 2024 12:45:20 +0000
asID: 138090
IP address blocks: 27.124.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ff:0a:34:48:b9:d4:1d:59:fa:44:51:a5:b9:c0:c6:68:3b:20:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 9 12:40:20 2023 GMT
Not After : Mar 7 12:45:20 2024 GMT
Subject: CN=1D18D9B3CBDAA1AF719DDC16348FA82DD26EBCB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:03:1a:08:cc:b3:7d:34:81:49:69:58:ee:
a0:91:70:2b:95:fa:b1:4d:fc:49:73:2c:22:b9:5c:
ab:34:93:c3:8c:20:48:1c:cd:8a:f5:8e:84:b0:a7:
48:16:b0:c3:36:40:39:23:1f:10:fe:ad:ba:c2:c2:
97:58:85:88:15:a0:fc:14:52:03:b9:34:55:89:df:
f9:c2:0e:a4:d9:69:c1:b6:f7:1b:1a:07:14:fe:46:
5b:43:af:3f:93:33:c2:ff:af:32:c8:79:41:36:98:
63:32:26:b4:9e:8e:4e:15:5e:c2:eb:8e:9c:cf:b6:
03:c9:70:3d:4c:a8:c1:fb:4f:c9:ee:d2:a1:ea:f3:
a3:a9:f9:11:5d:86:35:65:06:07:2b:b3:e6:30:53:
d1:5d:4e:71:44:0b:59:7b:6c:86:14:ef:58:02:ae:
60:b1:84:ad:e6:7c:b2:31:f6:8d:fa:fd:97:6b:6f:
f4:7b:ee:3b:4b:23:b2:32:04:ed:9c:99:69:74:08:
3a:5d:96:a6:5d:3e:1a:e7:84:1f:29:0f:28:85:89:
ac:89:65:ea:e5:3b:0e:0d:0b:dd:97:d8:2b:58:17:
1e:bd:ea:fa:fd:4d:98:cf:3a:06:9d:a3:f7:c8:4a:
37:5a:64:9b:2b:46:7c:97:8e:aa:52:9f:1f:74:16:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:18:D9:B3:CB:DA:A1:AF:71:9D:DC:16:34:8F:A8:2D:D2:6E:BC:B9
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e20313338303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:0f:e1:cb:93:0a:a1:d1:73:19:e4:95:c8:b2:65:d2:c4:ec:
eb:55:07:58:81:cb:e9:e7:f8:4e:d2:ad:a0:22:2d:1b:d2:c3:
04:3e:80:e7:8e:b5:f4:6b:49:8f:51:68:79:50:04:67:78:5b:
e0:2e:41:d6:24:be:47:93:dd:70:6c:14:99:5b:a7:4b:7f:a2:
cd:92:05:15:54:b9:06:16:16:8c:99:41:98:08:23:f8:9f:de:
b4:48:8f:9f:7f:99:e2:4b:fc:a0:56:3f:1c:fa:35:42:43:fe:
66:3a:a9:91:3d:d4:ca:3f:a7:2b:20:84:ba:e0:bb:cb:56:25:
85:24:4d:eb:1d:2a:0a:f4:b0:7a:1e:3d:ff:a9:01:a1:b1:05:
3f:46:d0:77:f1:31:07:cb:d3:bc:a8:15:47:79:5f:f0:88:fe:
69:aa:e7:62:dd:b1:7f:65:d9:7e:c4:e3:fc:6d:11:6d:73:33:
76:a3:87:c1:98:23:69:ed:91:49:60:43:69:12:f3:b0:05:c0:
4d:4b:12:88:99:30:f2:08:64:9e:81:a6:c6:37:8f:c0:94:c8:
93:26:0f:0c:40:e9:c4:85:9a:f8:6b:95:45:eb:66:a7:57:55:
49:fc:04:38:2e:ca:8c:6c:d8:78:7d:2e:7f:90:14:9a:67:99:
a1:66:ab:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org