Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e39342e302f32342d3234203d3e203338353237.roa
File: 32372e3132342e39342e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: dHct7ukrDFoEkWxDBkB24ekdB0MgGGIgohFI8T8JXfo=
Subject key identifier: 2D:C3:E6:E0:5C:7E:B2:8C:6A:2E:CB:F7:89:7F:A0:A6:64:F3:FB:77
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 01677EFE7D1E252A2ED43D1C788BFD49415D41D5
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e39342e302f32342d3234203d3e203338353237.roa
Signing time: Wed 15 Mar 2023 11:03:13 +0000
ROA not before: Wed 15 Mar 2023 10:58:13 +0000
ROA not after: Wed 13 Mar 2024 11:03:13 +0000
asID: 38527
IP address blocks: 27.124.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:67:7e:fe:7d:1e:25:2a:2e:d4:3d:1c:78:8b:fd:49:41:5d:41:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 15 10:58:13 2023 GMT
Not After : Mar 13 11:03:13 2024 GMT
Subject: CN=2DC3E6E05C7EB28C6A2ECBF7897FA0A664F3FB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4c:13:d7:ba:6b:a3:a1:85:a0:c7:a1:7f:18:
8c:72:dc:a0:e0:07:61:03:ba:10:1b:9d:43:b9:47:
53:57:9e:aa:e8:d7:70:f6:53:44:9e:dc:80:56:23:
ca:85:16:e1:39:c2:a0:89:cc:cc:da:5c:b6:fa:13:
74:69:e5:24:5b:50:7a:f2:22:52:46:f7:25:21:f8:
55:74:59:bc:06:13:37:40:d6:f0:cb:58:46:30:2b:
a6:81:34:12:90:19:b6:0e:bc:ef:00:8c:a0:e1:fe:
4a:0f:bd:1f:c1:5d:a6:ab:5c:90:d6:d8:e2:92:ab:
7d:3f:6b:85:f5:02:ba:02:c5:60:4c:37:d6:a8:16:
ad:4a:b5:34:ab:3d:21:20:d7:22:b9:56:78:fa:29:
e3:93:74:8b:aa:bd:a7:8d:cb:f7:64:58:97:c1:c9:
11:a0:b0:ac:ce:77:5f:a9:51:a2:0c:25:4f:4b:c0:
70:7f:b6:57:91:3f:56:55:3f:af:7e:f0:51:71:12:
ee:f7:45:a6:ec:da:dc:16:20:7e:a0:b7:5e:58:cb:
cc:7b:3b:85:3c:e5:7e:61:e7:b8:55:19:b8:d2:c4:
85:62:6f:21:75:d3:e8:60:9c:ee:6b:ff:7f:5b:77:
d8:e6:1f:4e:0e:54:9e:c2:f3:0c:11:57:bc:54:6e:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C3:E6:E0:5C:7E:B2:8C:6A:2E:CB:F7:89:7F:A0:A6:64:F3:FB:77
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e39342e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.94.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e0:18:b3:1d:f4:80:00:7a:d3:58:8d:8b:ce:01:e2:c2:7d:
3e:ca:3e:ac:1e:6b:c6:1d:99:a8:00:02:6f:ea:02:73:83:92:
70:1b:dc:6c:0e:6c:12:c1:87:6e:56:b8:09:3f:3f:90:29:62:
a8:d3:0a:82:5c:fa:a4:70:e1:f0:54:d5:5a:13:8b:9f:7a:25:
12:ad:fa:15:c2:b3:39:33:f8:5a:c9:da:be:f4:b8:3d:94:2f:
d0:1c:e2:42:7f:d6:bc:b2:32:b2:38:d3:7b:6b:a1:ba:63:d7:
2e:84:2e:21:91:5f:a8:11:37:38:66:24:59:26:6e:ef:48:c7:
79:62:81:48:40:1f:32:c6:14:e3:88:18:8d:6d:39:16:2a:5c:
f3:2c:ae:e3:69:bb:75:26:31:a9:5a:f0:b9:b7:14:f4:71:b7:
aa:d0:89:7c:07:ab:c1:45:1c:81:48:c6:f9:3b:60:e7:73:0b:
66:50:d1:d6:72:c7:60:d0:82:a2:52:f1:4c:7e:c9:f7:ba:a3:
ea:14:b3:3d:b2:5a:99:fa:8c:ec:bf:19:92:b9:76:9f:1d:09:
1e:70:52:e5:c9:59:86:6d:e4:f1:09:9c:89:73:4d:38:d0:34:
f3:dd:45:0d:1c:5b:06:51:7c:fd:3b:b5:b2:77:23:6c:7f:c7:
b9:d7:e7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 12:01:57 2023 by rpki-client on console-ams.rpki-client.org