Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38342e302f32342d3234203d3e20313338303839.roa
File: 32372e3132342e38342e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier: WVKQ+2RZ2yKUchK2lIx92+FWVrUOQ18ZX/Mw6Bb3dKM=
Subject key identifier: 9F:1D:C0:7F:81:6E:4E:26:07:28:EB:F7:32:5C:BE:6A:D5:19:35:09
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 3F52415F5497E1260AD07FBA42DFEB2E9CA7F73E
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38342e302f32342d3234203d3e20313338303839.roa
Signing time: Thu 09 Mar 2023 12:37:18 +0000
ROA not before: Thu 09 Mar 2023 12:32:18 +0000
ROA not after: Thu 07 Mar 2024 12:37:18 +0000
asID: 138089
IP address blocks: 27.124.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:52:41:5f:54:97:e1:26:0a:d0:7f:ba:42:df:eb:2e:9c:a7:f7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 9 12:32:18 2023 GMT
Not After : Mar 7 12:37:18 2024 GMT
Subject: CN=9F1DC07F816E4E260728EBF7325CBE6AD5193509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:19:e6:3f:2e:f0:82:dd:1a:d6:f9:c1:19:
d0:4c:33:a7:dc:1a:d6:af:8c:62:d7:6a:db:f6:11:
da:a5:22:3d:01:33:6e:f3:4e:fd:a6:7f:4f:c5:2d:
3d:e6:60:01:95:d8:89:76:99:a7:ec:64:2c:36:2d:
4a:a4:d8:07:9f:9e:2d:56:64:0b:26:ce:76:e9:82:
77:2b:3c:6a:6e:71:4d:4f:28:20:20:5d:d6:21:d9:
89:e6:4f:ef:e2:18:51:ff:f4:b5:b0:ad:51:ac:37:
c7:0d:29:52:69:c2:b3:28:11:ce:ab:02:c8:78:ea:
10:7d:a1:2b:b2:86:8b:cb:06:c2:b3:87:3f:b1:e6:
0e:10:fd:f1:9c:30:10:ed:6f:a3:87:b2:27:06:fc:
9f:83:3a:98:8f:24:ed:e0:cb:fd:00:ce:c3:bf:d4:
68:09:f8:b4:58:e0:3d:ce:a5:a8:5a:66:63:f9:83:
10:ad:14:b5:b5:5a:20:95:91:3c:33:cf:f5:b3:88:
25:9a:df:a9:75:89:31:8b:6b:f8:8f:7e:46:4e:23:
4b:55:6f:0b:f4:bd:45:02:95:70:d1:35:2d:1f:5b:
2e:9d:46:5f:f5:16:2b:b9:26:20:89:e4:9a:ed:db:
3d:0b:2b:53:88:98:f5:2a:de:89:ee:6b:56:38:37:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1D:C0:7F:81:6E:4E:26:07:28:EB:F7:32:5C:BE:6A:D5:19:35:09
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38342e302f32342d3234203d3e20313338303839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d9:1c:07:23:9d:cb:a7:77:78:01:31:82:c9:c3:8e:9b:71:
90:1a:fa:f6:74:4e:d1:da:c4:1d:84:8c:cb:8e:e0:3b:f4:bb:
38:ff:92:8d:bd:e2:03:58:5d:00:6a:b5:08:4f:5b:d0:7c:d7:
8c:c7:0f:96:59:27:b0:f5:5d:4d:0e:d9:25:69:10:7c:35:5a:
f5:74:2c:0f:4c:7f:58:f4:70:c5:7f:69:65:c1:cd:a9:ab:5f:
a5:c8:8b:67:0b:7a:92:e7:33:cc:63:2d:d8:fd:5b:7c:78:ee:
32:b2:ed:c2:fa:ff:2f:8f:00:85:ba:24:16:8f:10:25:8d:00:
d1:13:5a:0a:40:57:a0:25:35:d7:db:a0:fa:f2:9c:09:6b:e4:
8a:a3:5b:4a:1a:d2:53:b2:5d:a2:fd:de:ae:ea:96:f5:38:62:
d5:82:d6:30:ad:af:91:ed:6b:9a:26:93:ba:be:32:3d:1f:ea:
b3:8e:a0:e2:66:a7:6a:51:0c:a2:e2:d7:3e:cc:b7:d3:ad:83:
bb:4a:9d:49:9a:7b:de:0a:eb:29:d1:e5:cd:04:35:7c:97:c5:
f5:11:b0:7f:2e:10:6c:ff:44:b9:43:05:55:1d:82:ed:8a:ec:
bc:ef:33:41:a7:2c:e8:0e:80:78:ea:a6:f9:40:2e:88:7c:ab:
28:e3:e2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 12:01:57 2023 by rpki-client on console-ams.rpki-client.org