Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa
File: 34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: MeobYNoSe0ZkqAcUQYH+FaLI8fMyvFKQVuvvd9sdUuk=
Subject key identifier: A1:7D:09:BD:92:66:7D:BD:43:FB:2B:4F:36:2D:70:8B:95:88:B8:D7
Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Certificate serial: 414ED2E6B117AB42E5226A65740680D1ECFE0669
Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa
Signing time: Wed 19 Oct 2022 05:00:01 +0000
ROA not before: Wed 19 Oct 2022 04:55:01 +0000
ROA not after: Wed 18 Oct 2023 05:00:01 +0000
asID: 23679
IP address blocks: 43.230.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4e:d2:e6:b1:17:ab:42:e5:22:6a:65:74:06:80:d1:ec:fe:06:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Validity
Not Before: Oct 19 04:55:01 2022 GMT
Not After : Oct 18 05:00:01 2023 GMT
Subject: CN=A17D09BD92667DBD43FB2B4F362D708B9588B8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:d0:61:e4:e2:07:80:77:92:97:9c:a4:b2:
bb:4d:d5:e3:46:d8:9e:3c:ee:e0:5c:0c:bf:c7:a3:
e0:e3:b8:3d:30:99:38:8b:19:4a:91:17:ab:f2:c1:
47:ea:4a:49:02:b6:51:99:e9:99:0d:c9:33:41:53:
05:82:fc:03:f7:13:75:09:28:81:24:44:37:32:2a:
a1:bf:43:c9:ef:98:4e:63:04:ee:3e:aa:87:83:0f:
55:ca:3c:87:85:ac:4b:e8:cc:b8:41:88:ef:c2:3e:
8e:a7:4f:21:83:ed:b5:5e:7f:75:cb:4a:e0:b0:a6:
df:ae:36:17:95:80:9a:da:e2:3f:38:64:c8:1c:75:
f9:73:fa:65:fd:44:f4:08:7d:aa:ea:a0:c5:83:04:
66:0e:98:7e:43:43:a6:b8:f9:4e:17:55:41:f4:fe:
a3:31:4d:b2:79:75:c9:b2:b1:c1:36:79:48:27:80:
e2:b8:d3:fe:03:de:a0:b4:1d:14:73:1b:cb:22:56:
ab:13:a8:02:85:3a:74:d7:0a:0f:94:08:61:ae:33:
81:a6:b5:87:98:35:23:c8:34:7f:b8:8d:41:e1:7b:
09:79:f4:2c:2e:bd:08:5a:57:68:f3:60:0e:d9:0b:
7f:f9:22:af:90:7c:7c:3d:09:62:8e:19:86:7d:e5:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:09:BD:92:66:7D:BD:43:FB:2B:4F:36:2D:70:8B:95:88:B8:D7
X509v3 Authority Key Identifier:
keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.128.0/24
Signature Algorithm: sha256WithRSAEncryption
88:6e:8a:07:41:da:8c:39:e3:2e:29:fe:83:9d:16:2a:3b:e6:
8b:51:87:9b:5a:56:d3:4f:c4:2c:fe:16:95:8c:a0:c9:f4:88:
cd:ed:8a:4d:56:61:b4:54:01:ec:a7:48:ac:75:2e:1c:2d:87:
33:63:ef:91:e4:ef:82:d7:92:3a:6d:88:57:c6:c6:33:84:58:
cc:43:8c:1d:bf:2a:a6:f9:43:bc:2c:97:69:02:41:79:98:b0:
7d:f8:3e:fe:c6:82:4f:46:f6:bf:1d:43:d7:b8:dd:63:d5:ef:
f1:9f:ba:4b:16:5a:eb:7e:87:9b:0d:46:a9:53:2b:96:4c:e0:
51:e1:ac:4a:15:52:cf:45:0d:6f:68:89:c9:51:c9:8c:4e:68:
f0:6b:4e:ba:6e:0e:b5:16:6a:7f:11:b0:94:d3:fc:dd:66:95:
26:79:bd:fd:d1:d7:7f:3d:e9:ba:dc:47:e4:1c:f9:ec:23:50:
f3:90:9e:83:a4:a7:69:69:71:ee:33:b2:7f:f4:00:33:c5:32:
24:83:22:69:4d:06:5e:a5:2f:ea:59:7e:ec:1c:e0:70:30:ed:
7a:14:6c:9b:b0:e8:99:c6:40:60:c4:33:1b:21:bc:51:e5:af:
ec:c3:43:03:1c:14:e2:18:54:e7:bb:67:c2:d0:8e:27:8f:43:
38:cd:cc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org