Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38372e302f32342d3234203d3e20313339393730.roa
File: 32372e3132342e38372e302f32342d3234203d3e20313339393730.roa (raw, json)
Hash identifier: NuC75eCJboqW+nkTedUEMW4U3TBcHOzE+R30PMj9Vm8=
Subject key identifier: 36:28:CF:CB:D9:3A:A8:48:E7:D1:5C:C6:4F:2F:4C:4B:C4:FA:80:80
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 07742BB7A7004BABE9D38CEDFF6964344357529D
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38372e302f32342d3234203d3e20313339393730.roa
Signing time: Fri 17 Mar 2023 04:25:01 +0000
ROA not before: Fri 17 Mar 2023 04:20:01 +0000
ROA not after: Fri 15 Mar 2024 04:25:01 +0000
asID: 139970
IP address blocks: 27.124.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:74:2b:b7:a7:00:4b:ab:e9:d3:8c:ed:ff:69:64:34:43:57:52:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 17 04:20:01 2023 GMT
Not After : Mar 15 04:25:01 2024 GMT
Subject: CN=3628CFCBD93AA848E7D15CC64F2F4C4BC4FA8080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:a6:df:31:92:f7:e5:57:2d:05:07:23:46:
e9:19:f9:c4:82:cd:9c:66:bc:b5:d1:c8:ed:00:59:
42:cf:cd:a2:07:4c:72:36:88:c5:77:d9:14:3c:b3:
dc:9e:92:d0:8a:5f:4f:9c:74:5a:bb:8f:9b:be:be:
c9:a8:3d:95:5b:83:c5:95:6d:7d:41:29:8d:b9:74:
ee:0c:9a:ae:65:bc:a8:76:08:4a:c4:61:d4:80:4a:
86:a2:69:78:b1:47:75:80:76:85:27:e7:80:1f:24:
27:c2:c0:ef:53:3d:af:fa:04:0f:4f:bc:74:4a:c4:
ec:6a:2e:7b:d6:14:90:7f:ad:4c:51:55:ca:fd:02:
5c:74:97:db:6c:78:36:4d:be:60:5b:9b:00:bd:e8:
74:03:2a:eb:28:cf:e5:77:22:ce:f1:c9:6b:91:e0:
d9:58:10:d8:08:95:0f:9f:a3:c0:a4:aa:2f:14:b2:
f7:b5:20:3e:be:60:f6:d8:cb:b8:8a:87:73:63:5b:
c4:f8:85:4b:43:17:15:be:17:a1:6b:b9:f6:c8:e6:
cd:d3:dc:9e:d4:8b:ee:1e:37:36:b7:8e:ae:3a:5d:
fb:42:6b:e7:9f:61:05:8b:60:74:41:e4:d6:b7:a7:
62:90:47:b4:89:e9:45:73:bc:fe:67:4d:16:7b:38:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:28:CF:CB:D9:3A:A8:48:E7:D1:5C:C6:4F:2F:4C:4B:C4:FA:80:80
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38372e302f32342d3234203d3e20313339393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.87.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cd:34:20:2d:cd:30:92:c2:3b:67:f8:7d:ca:02:29:28:bb:
39:0c:03:2e:ff:24:73:dc:8d:20:45:68:95:47:06:61:7a:8f:
79:6f:c8:be:c6:06:b8:e6:d2:d3:68:bf:b5:b7:fd:2c:fd:c1:
72:5a:40:9d:bc:b0:16:a3:03:5f:4d:bf:ad:e5:62:48:92:38:
30:71:3c:9d:ee:f5:e4:c4:f2:1b:1b:81:c5:a9:ee:66:93:1b:
69:57:73:3b:e8:e3:e1:bd:a5:e2:2f:be:9f:7e:9e:07:f9:cd:
cc:a7:3c:13:51:17:c3:d0:46:85:95:e9:50:49:be:58:c7:40:
42:8b:f0:96:66:a8:aa:69:da:57:a6:0c:4d:08:48:95:d3:00:
06:29:28:7c:ed:d3:a3:77:a5:e6:53:30:20:37:51:b9:f3:4f:
1f:99:d3:d7:5a:b1:7d:e1:61:46:ef:98:51:23:ef:73:c5:45:
50:40:31:8f:c9:08:93:e8:1a:b5:fd:05:43:c0:81:2c:5d:f9:
a8:d4:03:32:75:c1:e9:4d:14:62:3e:86:fc:23:3d:b7:d1:9c:
de:44:86:d9:d6:b8:83:35:5d:df:9e:c0:60:17:36:b6:b3:8d:
d8:4b:56:53:66:d0:2b:62:c7:da:b6:88:5f:de:eb:12:54:75:
8d:2b:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 12:01:35 2023 by rpki-client on console-ams.rpki-client.org