Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38352e302f32342d3234203d3e203338353237.roa
File: 32372e3132342e38352e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: uKTl4usdHWBK/V3G3dJn4BoJ4pM5+UTm1npV4XJWRYI=
Subject key identifier: 71:5D:EB:C5:04:15:79:2F:5B:41:E4:B4:84:81:AB:4C:1A:7C:8D:C4
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 0997858B7726ED6C45DD76C784D4C665537BE40A
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38352e302f32342d3234203d3e203338353237.roa
Signing time: Fri 17 Mar 2023 04:16:40 +0000
ROA not before: Fri 17 Mar 2023 04:11:40 +0000
ROA not after: Fri 15 Mar 2024 04:16:40 +0000
asID: 38527
IP address blocks: 27.124.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:97:85:8b:77:26:ed:6c:45:dd:76:c7:84:d4:c6:65:53:7b:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 17 04:11:40 2023 GMT
Not After : Mar 15 04:16:40 2024 GMT
Subject: CN=715DEBC50415792F5B41E4B48481AB4C1A7C8DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:7e:dc:30:ec:2c:f8:7a:41:47:95:6c:2d:
35:eb:ab:02:f0:9a:27:61:9c:f1:10:7b:3d:28:66:
27:07:c5:03:3a:62:9e:92:59:53:ae:04:c5:cd:36:
99:ee:c9:e3:be:b4:0f:01:55:e0:6c:29:94:ef:4e:
bc:39:36:95:e7:17:bc:ad:03:74:51:a2:89:a7:3a:
0d:64:09:14:e9:cb:99:08:9e:e8:07:b9:b1:33:8e:
63:ca:0d:0b:a4:54:2e:c2:7c:56:36:c7:52:e6:3a:
61:ec:ed:e8:d1:ab:20:a3:8b:c1:1a:2d:b4:11:2f:
b0:8b:17:31:d3:80:38:ac:21:26:a8:08:87:c0:04:
90:94:9d:6c:44:c3:23:09:cd:9e:7e:3a:80:8c:62:
cf:91:a5:ab:70:dd:13:15:a2:93:41:8f:1f:e8:40:
1c:2c:76:c6:10:19:04:c8:c1:f5:63:d7:89:42:e2:
da:e3:e2:8a:69:31:b5:44:c3:02:1c:f6:d0:ef:71:
96:4b:b5:e7:46:38:b9:60:e6:bb:45:0e:ec:5e:d5:
ac:08:97:fb:82:b7:53:fd:46:d3:b7:a1:15:32:a0:
66:79:3e:09:ca:ed:53:9a:be:4a:97:f8:8f:4d:71:
2f:6d:b8:5f:8d:24:d1:25:01:2f:b2:2d:8e:0f:e1:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5D:EB:C5:04:15:79:2F:5B:41:E4:B4:84:81:AB:4C:1A:7C:8D:C4
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38352e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.85.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8e:56:e2:b4:9f:15:86:22:69:c6:7e:16:ab:1b:71:82:da:
72:d8:ea:53:e8:a6:6a:49:d0:4c:bf:0f:0b:c3:d8:2d:84:6b:
81:63:0d:47:f5:94:37:60:6e:77:82:d7:5f:b1:e2:17:ea:d0:
3c:62:ed:50:3f:02:e0:5b:c1:b3:69:da:c5:a5:1b:61:e5:23:
fa:f6:ea:06:b4:5c:83:19:47:a9:32:83:2c:37:63:8f:e3:9c:
a8:d1:87:af:18:3e:ac:71:9c:08:a4:5b:ed:ae:00:a5:04:0c:
05:f2:02:c8:17:9b:45:60:2a:44:a0:ec:96:05:d1:c8:22:ee:
95:52:48:6a:d5:19:9b:24:14:6e:b1:e7:69:a7:1c:c8:56:d3:
04:5b:8b:af:60:d9:ab:95:c0:c0:2d:73:7a:74:ce:1f:ef:77:
32:be:f2:0b:f0:d9:fe:56:6f:7a:a3:c1:1d:f9:cb:b8:05:09:
f3:1a:c6:9b:a0:89:bc:2c:d3:ad:a9:3d:df:dc:ed:e7:a3:d2:
7a:70:29:1a:56:ef:ec:47:8e:77:d8:88:74:7a:05:82:7f:fd:
de:11:f4:88:14:5d:66:b8:4c:ec:3b:a2:fe:45:93:f4:7c:e8:
03:ae:b2:78:76:cd:80:5b:05:ee:c8:0b:47:f4:2d:09:01:04:
ef:73:61:ab
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUCZeFi3cm7WxF3XbHhNTGZVN75AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD
RjlBNjQ3MzAeFw0yMzAzMTcwNDExNDBaFw0yNDAzMTUwNDE2NDBaMDMxMTAvBgNV
BAMTKDcxNURFQkM1MDQxNTc5MkY1QjQxRTRCNDg0ODFBQjRDMUE3QzhEQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrH7cMOws+HpBR5VsLTXrqwLw
midhnPEQez0oZicHxQM6Yp6SWVOuBMXNNpnuyeO+tA8BVeBsKZTvTrw5NpXnF7yt
A3RRoomnOg1kCRTpy5kInugHubEzjmPKDQukVC7CfFY2x1LmOmHs7ejRqyCji8Ea
LbQRL7CLFzHTgDisISaoCIfABJCUnWxEwyMJzZ5+OoCMYs+Rpatw3RMVopNBjx/o
QBwsdsYQGQTIwfVj14lC4trj4oppMbVEwwIc9tDvcZZLtedGOLlg5rtFDuxe1awI
l/uCt1P9RtO3oRUyoGZ5PgnK7VOavkqX+I9NcS9tuF+NJNElAS+yLY4P4aQ/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUcV3rxQQVeS9bQeS0hIGrTBp8jcQwHwYDVR0j
BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG
QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB
NjQ3My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05
NzBmLWY2OTlkZmY5N2RlNS8wLzMyMzcyZTMxMzIzNDJlMzgzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAbfFUwDQYJKoZIhvcN
AQELBQADggEBACCOVuK0nxWGImnGfharG3GC2nLY6lPopmpJ0Ey/DwvD2C2Ea4Fj
DUf1lDdgbneC11+x4hfq0Dxi7VA/AuBbwbNp2sWlG2HlI/r26ga0XIMZR6kygyw3
Y4/jnKjRh68YPqxxnAikW+2uAKUEDAXyAsgXm0VgKkSg7JYF0cgi7pVSSGrVGZsk
FG6x52mnHMhW0wRbi69g2auVwMAtc3p0zh/vdzK+8gvw2f5Wb3qjwR35y7gFCfMa
xpugibws062pPd/c7eej0npwKRpW7+xHjnfYiHR6BYJ//d4R9IgUXWa4TOw7ov5F
k/R86AOusnh2zYBbBe7IC0f0LQkBBO9zYas=
-----END CERTIFICATE-----
Generated at Wed Oct 11 12:01:35 2023 by rpki-client on console-ams.rpki-client.org