Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/34332e3233302e3132382e302f32342d3234203d3e20313338383138.roa
File: 34332e3233302e3132382e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier: yuU6pCuXkhVUlPHyXsY9/lHP2g0UkNaWYcqPwChxOno=
Subject key identifier: B6:7F:69:59:40:A6:CE:A0:16:77:49:0D:04:67:7B:12:24:1C:27:E4
Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Certificate serial: 64210002AC1D1CE4714703C1A2702422415A1343
Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/34332e3233302e3132382e302f32342d3234203d3e20313338383138.roa
Signing time: Mon 17 Oct 2022 03:00:01 +0000
ROA not before: Mon 17 Oct 2022 02:55:01 +0000
ROA not after: Mon 16 Oct 2023 03:00:01 +0000
asID: 138818
IP address blocks: 43.230.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:21:00:02:ac:1d:1c:e4:71:47:03:c1:a2:70:24:22:41:5a:13:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Validity
Not Before: Oct 17 02:55:01 2022 GMT
Not After : Oct 16 03:00:01 2023 GMT
Subject: CN=B67F695940A6CEA01677490D04677B12241C27E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:d2:7b:23:44:e5:34:c1:e2:3b:07:48:9b:
28:56:db:1a:35:0e:50:5f:02:21:13:f8:3a:9d:2e:
54:3c:70:37:46:94:1e:b1:9a:7a:6e:61:09:eb:d9:
84:cf:45:8b:75:d0:b2:f0:df:db:dd:93:90:57:ef:
a5:ca:0f:bb:35:96:6f:b3:fe:42:f9:79:df:1c:29:
0d:13:4a:38:fc:91:ef:d9:2e:bf:80:aa:3a:43:13:
9d:ab:07:62:33:86:cc:c8:d7:6f:be:d4:df:c0:c2:
a1:4d:c4:79:b6:49:7e:ea:92:48:14:34:f6:5c:32:
52:3c:25:8c:df:55:73:d0:ae:b7:4a:92:1f:50:f6:
ef:a0:9b:44:61:51:0c:b7:48:fc:e1:9e:72:74:de:
da:ca:42:30:c4:4b:3b:9c:02:78:6a:a0:a6:a5:8d:
ff:fc:57:91:ab:41:b8:c5:6c:13:6d:5c:43:b7:12:
ff:6c:54:70:b8:0c:c8:4f:07:6c:df:1f:21:9f:b2:
06:9a:8b:ac:6d:43:f5:73:bd:5d:2a:c2:53:17:60:
c4:7c:a1:86:47:9a:cf:ec:8c:c9:21:dc:2d:2b:4c:
a1:bf:fe:03:8d:d1:89:6e:a2:cf:64:21:fa:92:b4:
1e:de:7b:37:eb:e6:97:57:52:79:25:a0:93:c7:d3:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7F:69:59:40:A6:CE:A0:16:77:49:0D:04:67:7B:12:24:1C:27:E4
X509v3 Authority Key Identifier:
keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/34332e3233302e3132382e302f32342d3234203d3e20313338383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.128.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:63:86:f5:28:11:4b:59:3e:2a:6b:0d:b3:c9:52:3b:59:e4:
78:ba:43:68:de:b7:88:dc:2d:22:74:40:6d:45:20:25:37:1a:
26:56:01:47:d3:2a:b4:dc:f6:d4:60:cc:6a:3b:8f:d5:59:b7:
8f:ef:58:a5:dd:98:e8:54:d0:61:0b:b8:69:e2:91:95:06:16:
39:d0:70:3f:37:fb:18:37:8e:6b:06:a5:92:6c:d0:68:06:56:
3b:c0:40:57:bf:af:7b:10:30:26:fc:32:81:07:82:40:95:fd:
7b:b8:9e:d5:61:83:8f:a2:bb:37:bd:4c:59:f1:56:5d:83:51:
46:db:50:6f:af:40:d7:4b:c1:f2:c3:e7:0e:1c:ac:3d:58:d7:
fe:65:79:46:e5:42:41:f6:3e:ca:ca:66:69:cd:84:a5:7d:2d:
e7:15:57:d0:57:16:e5:d0:03:bc:4c:e4:49:92:0e:5d:e6:a5:
10:65:11:ee:0f:2a:80:51:8f:63:b3:c8:96:0e:2d:f8:05:0a:
1f:a6:65:ff:b7:c5:ab:56:3c:f0:14:17:17:f6:3e:d8:0d:eb:
bd:67:34:51:3e:c3:69:ea:c8:aa:90:62:b8:24:c5:0a:3b:6a:
c8:2c:ca:5e:13:bc:43:7b:4b:51:0b:c6:dc:53:da:fa:e9:53:
60:81:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org