Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e203338353237.roa
File: 32372e3132342e38332e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: NIZEaSaCgeYfrxXD3tRaKcLl/BSRQvtTIrjQEPhi7jY=
Subject key identifier: 1F:8D:53:A4:51:CC:2C:D5:82:BA:E4:DD:61:E2:BB:2C:EE:86:DA:49
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 5C857E42450F54BA20BB77E0DA12887A8D579385
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e203338353237.roa
Signing time: Mon 24 Feb 2025 10:14:38 +0000
ROA not before: Mon 24 Feb 2025 10:09:38 +0000
ROA not after: Mon 23 Feb 2026 10:14:38 +0000
asID: 38527
IP address blocks: 27.124.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 15:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:85:7e:42:45:0f:54:ba:20:bb:77:e0:da:12:88:7a:8d:57:93:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Feb 24 10:09:38 2025 GMT
Not After : Feb 23 10:14:38 2026 GMT
Subject: CN=1F8D53A451CC2CD582BAE4DD61E2BB2CEE86DA49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:60:65:15:ac:b4:2e:a0:64:31:6b:cc:54:
fd:f4:27:28:95:a4:9c:e3:84:21:7c:54:15:dc:54:
d0:2e:20:1b:0d:45:58:ff:a3:ac:ea:de:3d:b0:d8:
2d:5a:8c:c3:46:e3:dc:c2:ae:85:76:81:2c:f5:68:
c8:c8:40:5c:5a:a8:03:1c:c0:9b:13:be:67:72:fe:
04:a4:c1:b0:ae:b9:c3:c1:ba:3a:d9:89:84:82:35:
86:9f:ec:4a:31:3b:75:1c:b0:2e:d7:8d:df:47:bc:
b9:1f:68:4e:01:d4:34:51:f9:e5:f8:df:06:79:47:
36:4d:62:40:99:5f:8c:18:96:32:98:98:cc:30:cc:
c4:b1:ae:f2:94:d8:a4:cc:79:48:58:05:da:7f:37:
97:d0:8e:57:c2:74:36:e4:e4:2f:61:e7:11:91:7d:
c3:12:5c:b6:7b:1b:2d:e5:bb:22:24:c5:53:88:8c:
d4:1b:a7:7c:28:05:34:a9:96:09:13:02:61:a3:5a:
28:d9:e9:a2:94:02:ba:c5:cf:40:0c:43:7b:d8:86:
cd:61:fb:1a:3e:74:a0:3a:72:29:2a:7c:12:99:bc:
d7:f1:38:86:ec:37:f2:4c:42:47:f0:75:b6:1a:3d:
88:08:2d:e6:ce:c8:1b:7c:2b:78:58:27:a1:91:c4:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8D:53:A4:51:CC:2C:D5:82:BA:E4:DD:61:E2:BB:2C:EE:86:DA:49
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.83.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:8b:fa:a0:d6:4c:d5:a9:3e:2a:2c:dd:ba:b5:8a:4a:f2:72:
18:6e:64:d9:ce:44:d3:b1:4d:4f:e7:ef:56:5e:3a:60:56:27:
36:01:2e:63:d9:1c:9e:ba:60:c5:24:6a:99:c7:54:46:9b:74:
af:9c:4a:33:1e:e9:80:be:4d:de:e6:32:d5:e9:44:d4:37:ae:
9e:60:31:5e:87:c7:44:f7:32:27:f3:4c:5d:02:6c:5c:d1:25:
2e:be:2b:27:7f:c7:b2:34:f9:e4:30:92:11:4b:99:c4:57:9d:
e5:dc:78:c5:1f:33:cb:e6:78:d5:43:c0:56:27:95:cb:44:34:
00:2c:4f:d9:0f:af:29:0f:5a:1a:8c:56:21:a2:ca:4d:7a:b1:
36:26:83:a8:7e:70:e2:4b:d1:e9:d4:2a:35:fd:e3:bc:6d:73:
5c:f4:39:a8:6c:2f:86:4e:67:2e:a2:90:ac:b2:cc:ec:7f:d4:
d8:e6:e3:b0:e8:c1:bd:f6:a5:15:b1:e2:cc:09:c4:66:a1:bf:
6b:73:a4:5c:97:82:b3:33:33:c0:cf:66:91:db:1a:57:49:03:
80:5d:ed:ec:f8:fc:b8:c7:d1:bb:67:41:f6:fd:19:7d:7f:4d:
29:22:82:d7:c5:6f:70:8a:d6:2b:8a:04:dd:18:7d:b8:88:32:
e7:30:e0:ef
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXIV+QkUPVLogu3fg2hKIeo1Xk4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD
RjlBNjQ3MzAeFw0yNTAyMjQxMDA5MzhaFw0yNjAyMjMxMDE0MzhaMDMxMTAvBgNV
BAMTKDFGOEQ1M0E0NTFDQzJDRDU4MkJBRTRERDYxRTJCQjJDRUU4NkRBNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZGBlFay0LqBkMWvMVP30JyiV
pJzjhCF8VBXcVNAuIBsNRVj/o6zq3j2w2C1ajMNG49zCroV2gSz1aMjIQFxaqAMc
wJsTvmdy/gSkwbCuucPBujrZiYSCNYaf7EoxO3UcsC7Xjd9HvLkfaE4B1DRR+eX4
3wZ5RzZNYkCZX4wYljKYmMwwzMSxrvKU2KTMeUhYBdp/N5fQjlfCdDbk5C9h5xGR
fcMSXLZ7Gy3luyIkxVOIjNQbp3woBTSplgkTAmGjWijZ6aKUArrFz0AMQ3vYhs1h
+xo+dKA6cikqfBKZvNfxOIbsN/JMQkfwdbYaPYgILebOyBt8K3hYJ6GRxBn1AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUH41TpFHMLNWCuuTdYeK7LO6G2kkwHwYDVR0j
BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG
QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB
NjQ3My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05
NzBmLWY2OTlkZmY5N2RlNS8wLzMyMzcyZTMxMzIzNDJlMzgzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbfFMwDQYJKoZIhvcN
AQELBQADggEBALuL+qDWTNWpPios3bq1ikrychhuZNnORNOxTU/n71ZeOmBWJzYB
LmPZHJ66YMUkapnHVEabdK+cSjMe6YC+Td7mMtXpRNQ3rp5gMV6Hx0T3MifzTF0C
bFzRJS6+Kyd/x7I0+eQwkhFLmcRXneXceMUfM8vmeNVDwFYnlctENAAsT9kPrykP
WhqMViGiyk16sTYmg6h+cOJL0enUKjX947xtc1z0OahsL4ZOZy6ikKyyzOx/1Njm
47Dowb32pRWx4swJxGahv2tzpFyXgrMzM8DPZpHbGldJA4Bd7ez4/LjH0btnQfb9
GX1/TSkigtfFb3CK1iuKBN0YfbiIMucw4O8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:22:14 2025 by rpki-client