Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e39302e302f32342d3234203d3e20313339393439.roa
File: 32372e3132342e39302e302f32342d3234203d3e20313339393439.roa (raw, json)
Hash identifier: /nf5vWxYUWlVM84MbOimXxHx5DDtVQoIRssIwE7KWkg=
Subject key identifier: 77:85:7D:42:D5:AE:DC:5A:FF:47:BE:66:7C:80:D5:C9:DA:6B:F9:16
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 7C543365F59CF8EF6977D8E04AA6CE6812F8EBC3
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e39302e302f32342d3234203d3e20313339393439.roa
Signing time: Wed 15 Mar 2023 11:08:01 +0000
ROA not before: Wed 15 Mar 2023 11:03:01 +0000
ROA not after: Wed 13 Mar 2024 11:08:01 +0000
asID: 139949
IP address blocks: 27.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:54:33:65:f5:9c:f8:ef:69:77:d8:e0:4a:a6:ce:68:12:f8:eb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 15 11:03:01 2023 GMT
Not After : Mar 13 11:08:01 2024 GMT
Subject: CN=77857D42D5AEDC5AFF47BE667C80D5C9DA6BF916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:f7:00:10:52:04:a5:57:bf:21:72:b4:77:
1f:b8:72:10:52:4b:c9:8c:46:59:fe:ee:c3:47:62:
fd:17:8d:9b:1e:68:33:a8:70:e2:45:f1:32:69:5d:
55:d9:ef:45:f5:67:6f:ab:3a:4f:38:29:4b:b0:6d:
a9:ce:77:2d:62:d2:36:3c:e7:5d:91:5f:da:a9:0c:
68:58:8b:6d:c0:30:86:7a:aa:cf:ed:53:11:a2:ef:
03:9e:c3:21:3f:52:67:c4:d3:7c:b9:be:2d:80:56:
1f:58:24:d7:64:9c:42:14:59:81:9f:c8:19:e5:4d:
81:16:de:51:6f:e3:2c:b7:8a:77:60:4b:9f:08:28:
7c:a5:82:04:93:7c:c9:3e:89:10:98:5a:03:21:e2:
e8:a8:2e:7a:38:e0:2a:9a:ec:46:7b:2e:83:cd:79:
37:4b:17:d3:d3:8e:f8:b1:d4:eb:41:cc:a3:74:c7:
e7:fd:b0:45:19:41:15:b4:b8:56:be:e5:84:44:3d:
06:04:fe:e8:62:22:35:d4:a0:65:4b:77:4c:f7:d7:
88:58:db:36:1d:b6:ce:40:85:49:96:fc:a6:67:e2:
e0:54:67:ee:26:46:26:73:83:27:9b:88:24:52:54:
0c:8a:c8:40:63:74:6c:67:40:08:f4:bf:56:e4:18:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:85:7D:42:D5:AE:DC:5A:FF:47:BE:66:7C:80:D5:C9:DA:6B:F9:16
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e39302e302f32342d3234203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:90:ef:bb:21:b3:aa:d4:ac:42:2f:81:09:65:a1:25:96:b7:
44:4a:a3:42:de:2c:d7:fa:d8:e8:4d:7a:06:1b:39:b3:f5:f0:
38:1b:1d:6c:46:38:c0:c0:e9:e4:44:0c:2a:10:70:34:2e:84:
94:97:c4:bd:0f:43:d7:26:36:7c:8f:70:d8:a0:5a:8a:bc:51:
36:9d:6b:44:94:34:45:83:1b:26:08:2a:7b:57:16:f9:89:7a:
0c:e1:1a:4d:76:88:4b:df:64:63:05:c5:b0:9f:3b:6c:2d:6f:
59:e8:c9:f1:e2:63:2f:90:8a:b6:ef:d3:ee:5a:68:6b:1e:5b:
d1:c1:24:9f:92:27:d8:ac:4a:b7:43:8d:8f:20:eb:19:18:e4:
fb:6a:05:ab:3f:79:6d:67:77:08:3f:da:a6:49:f0:1f:33:8a:
a2:b4:59:6c:cc:1f:e2:21:87:4f:3f:da:13:cd:81:7c:61:94:
c3:0e:75:ce:73:fe:1a:33:4d:4d:c8:b8:d6:c9:82:62:fe:cb:
3e:b0:6a:21:d5:f0:14:71:01:d4:dc:49:da:d6:24:08:13:74:
52:eb:25:d5:5f:e8:59:6c:0a:bc:19:28:d3:fd:86:58:a9:25:
05:eb:a8:46:1d:aa:33:d1:5e:9f:4c:42:68:96:58:4b:4a:0b:
93:df:91:0a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfFQzZfWc+O9pd9jgSqbOaBL468MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD
RjlBNjQ3MzAeFw0yMzAzMTUxMTAzMDFaFw0yNDAzMTMxMTA4MDFaMDMxMTAvBgNV
BAMTKDc3ODU3RDQyRDVBRURDNUFGRjQ3QkU2NjdDODBENUM5REE2QkY5MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh0PcAEFIEpVe/IXK0dx+4chBS
S8mMRln+7sNHYv0XjZseaDOocOJF8TJpXVXZ70X1Z2+rOk84KUuwbanOdy1i0jY8
512RX9qpDGhYi23AMIZ6qs/tUxGi7wOewyE/UmfE03y5vi2AVh9YJNdknEIUWYGf
yBnlTYEW3lFv4yy3indgS58IKHylggSTfMk+iRCYWgMh4uioLno44Cqa7EZ7LoPN
eTdLF9PTjvix1OtBzKN0x+f9sEUZQRW0uFa+5YREPQYE/uhiIjXUoGVLd0z314hY
2zYdts5AhUmW/KZn4uBUZ+4mRiZzgyebiCRSVAyKyEBjdGxnQAj0v1bkGK2tAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUd4V9QtWu3Fr/R75mfIDVydpr+RYwHwYDVR0j
BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG
QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB
NjQ3My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05
NzBmLWY2OTlkZmY5N2RlNS8wLzMyMzcyZTMxMzIzNDJlMzkzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABt8WjANBgkqhkiG
9w0BAQsFAAOCAQEAuJDvuyGzqtSsQi+BCWWhJZa3REqjQt4s1/rY6E16Bhs5s/Xw
OBsdbEY4wMDp5EQMKhBwNC6ElJfEvQ9D1yY2fI9w2KBairxRNp1rRJQ0RYMbJggq
e1cW+Yl6DOEaTXaIS99kYwXFsJ87bC1vWejJ8eJjL5CKtu/T7lpoax5b0cEkn5In
2KxKt0ONjyDrGRjk+2oFqz95bWd3CD/apknwHzOKorRZbMwf4iGHTz/aE82BfGGU
ww51znP+GjNNTci41smCYv7LPrBqIdXwFHEB1NxJ2tYkCBN0Uusl1V/oWWwKvBko
0/2GWKklBeuoRh2qM9Fen0xCaJZYS0oLk9+RCg==
-----END CERTIFICATE-----
Generated at Wed Oct 11 12:01:35 2023 by rpki-client on console-ams.rpki-client.org