Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38382e302f32342d3234203d3e203338353237.roa
File: 32372e3132342e38382e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: Qy62Td2YlwbA7AGPDht9T8nrAGsf7TjPT8se9qv9S8Q=
Subject key identifier: 83:36:BB:D3:09:76:D0:9D:84:50:1E:15:04:B1:80:CB:11:41:4D:5E
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 78403FFCD1AE37085E1C6D09FCD6C29A734742B9
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38382e302f32342d3234203d3e203338353237.roa
Signing time: Fri 17 Mar 2023 04:17:18 +0000
ROA not before: Fri 17 Mar 2023 04:12:18 +0000
ROA not after: Fri 15 Mar 2024 04:17:18 +0000
asID: 38527
IP address blocks: 27.124.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:40:3f:fc:d1:ae:37:08:5e:1c:6d:09:fc:d6:c2:9a:73:47:42:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 17 04:12:18 2023 GMT
Not After : Mar 15 04:17:18 2024 GMT
Subject: CN=8336BBD30976D09D84501E1504B180CB11414D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:74:2e:50:bf:a6:51:42:da:4d:1a:7c:9d:
48:6e:11:4c:4a:9e:b6:d6:95:73:1b:9c:cd:38:d5:
3d:bd:cf:37:e1:6d:4e:09:11:8e:76:da:de:84:51:
a2:1c:df:28:ec:01:56:d4:32:d0:14:98:38:83:a5:
98:2b:7a:65:e0:0c:ab:f8:1b:5d:4b:16:25:a8:cd:
43:12:76:8c:97:ca:52:df:d4:c7:89:fe:ee:fb:80:
90:16:af:0a:50:6c:be:64:ba:9e:cc:db:d5:13:86:
a0:be:b0:1a:d3:ec:9f:db:b7:84:42:d9:74:2d:2b:
b3:64:65:3d:dc:88:fd:aa:04:95:05:fd:b9:1a:9e:
99:20:b9:f4:09:06:ef:97:cc:8d:69:66:22:3d:70:
e8:ff:ae:ba:a1:74:db:54:f0:62:50:28:b0:7d:cd:
ab:9c:1d:d6:3d:48:66:65:26:fb:23:fb:4f:41:61:
95:fc:e2:1e:3d:ad:52:f9:55:55:8d:ca:1b:6a:f2:
15:6f:f5:cd:b0:eb:eb:e9:1c:71:2b:e6:06:e6:71:
b6:41:54:a7:a2:4e:f7:07:2f:23:a2:2f:a3:db:dc:
79:5e:f2:59:1b:44:bb:05:61:80:8f:74:ba:70:15:
1f:4b:61:ad:92:f1:96:24:bb:10:8f:d7:12:11:9d:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:36:BB:D3:09:76:D0:9D:84:50:1E:15:04:B1:80:CB:11:41:4D:5E
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38382e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.88.0/24
Signature Algorithm: sha256WithRSAEncryption
97:80:b0:c0:4b:75:76:01:6a:76:d4:b6:65:5c:5b:83:79:65:
5d:7a:75:e6:60:59:d5:1f:88:7b:9a:7a:88:9a:51:fe:ea:11:
60:42:5b:ad:41:db:ff:79:04:35:80:3c:3a:d0:44:20:e8:c8:
79:05:b8:b3:20:80:ca:ce:86:8b:c9:ea:5d:2e:e2:50:4b:ae:
35:6b:3f:8e:de:c9:d4:b7:da:5c:e8:cd:5f:82:0b:5e:95:33:
4a:74:06:36:71:5e:dd:48:f6:07:79:4e:be:8c:c5:db:02:a7:
2b:ef:55:9f:0d:48:95:1e:24:54:ee:eb:94:ba:af:f5:27:c4:
60:2b:fa:12:cc:dc:64:28:17:aa:6b:ed:33:5f:ab:10:dc:66:
4a:0b:01:ec:f8:33:f3:fc:33:63:b0:c9:a5:be:a9:99:c9:11:
7c:9f:6d:7a:16:d9:2e:03:58:9b:e2:87:b0:56:39:07:df:da:
ed:fd:d6:d6:25:9d:f9:84:a0:6f:4e:6c:26:81:64:e3:91:fe:
ac:ce:79:9b:62:4a:42:43:bc:c0:73:c8:84:8b:c3:1a:05:1c:
cc:b3:1f:3e:9a:77:78:aa:66:fd:22:c8:09:dc:56:cc:c8:c3:
0b:33:ee:37:28:0b:1e:ef:df:37:42:46:88:05:73:d6:da:af:
3f:96:75:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 12:01:57 2023 by rpki-client on console-ams.rpki-client.org