Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132302e302e302f31332d3133203d3e203233363933.roa
File: 3131342e3132302e302e302f31332d3133203d3e203233363933.roa (raw, json)
Hash identifier: A3263yBZDA8hi9o2u9ufc4rjJkXWkfJMszX7rQdGPew=
Subject key identifier: B5:B7:7C:5C:C6:9C:0E:8C:F2:06:9B:8E:5B:49:58:7A:85:C1:46:37
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 6C9F57A8FD15668D2D8B452784C320EBAE2F2137
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132302e302e302f31332d3133203d3e203233363933.roa
Signing time: Fri 08 Nov 2024 07:58:26 +0000
ROA not before: Fri 08 Nov 2024 07:53:26 +0000
ROA not after: Fri 07 Nov 2025 07:58:26 +0000
asID: 23693
IP address blocks: 114.120.0.0/13 maxlen: 13
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:9f:57:a8:fd:15:66:8d:2d:8b:45:27:84:c3:20:eb:ae:2f:21:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 8 07:53:26 2024 GMT
Not After : Nov 7 07:58:26 2025 GMT
Subject: CN=B5B77C5CC69C0E8CF2069B8E5B49587A85C14637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:cf:ea:00:bb:bf:93:08:e2:8b:39:cd:aa:
1b:ec:4c:c1:e3:34:12:d3:f2:44:c4:69:67:7d:35:
6b:50:a7:5f:a3:df:c7:9d:ed:13:1a:a4:51:a6:c6:
f8:cb:cc:16:71:0c:2c:43:0b:93:e4:7d:b7:26:8b:
49:dd:b2:2d:db:d7:8c:0f:1e:56:40:4e:0f:1c:0a:
93:d1:98:89:1c:a5:d4:77:a3:42:9d:9e:47:b9:da:
16:e5:ec:80:76:ce:e4:9e:c2:94:8f:65:d1:29:7e:
b4:49:4d:b9:58:08:75:ef:8e:7f:11:07:ac:76:4b:
c4:4a:94:77:e8:d8:dc:92:f8:20:01:d5:06:8d:52:
89:c6:64:7d:e5:2a:5e:09:c8:86:f4:fd:6c:25:40:
96:3b:7d:9b:c9:e2:c7:0c:7b:c0:a3:3f:97:7e:46:
8b:e7:ae:80:a9:e8:28:50:d2:4a:41:97:dd:94:e4:
07:de:5a:21:74:0d:58:b4:8e:35:4c:a9:fc:9c:6b:
ad:8d:c3:98:18:a3:51:19:01:a1:9b:c4:30:7a:05:
43:4c:06:85:53:46:ed:0b:37:6e:3a:da:56:24:c9:
ff:d8:bd:f5:15:c4:87:32:93:87:c9:b1:d0:29:a9:
ee:0a:11:5b:3f:ac:74:34:e1:d0:cd:28:b8:1e:2b:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B7:7C:5C:C6:9C:0E:8C:F2:06:9B:8E:5B:49:58:7A:85:C1:46:37
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132302e302e302f31332d3133203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.120.0.0/13
Signature Algorithm: sha256WithRSAEncryption
13:09:3f:09:cb:c4:b9:38:ab:28:f1:19:5f:57:c6:67:32:ef:
93:b7:52:aa:7d:c5:71:bc:8e:ee:bd:bd:aa:84:17:58:6c:23:
f0:a1:7e:c0:63:69:5b:00:08:79:8f:04:f6:09:67:1f:b8:76:
92:c1:74:09:a7:0e:ab:06:55:46:75:af:a1:ef:e6:9d:ba:e7:
b7:48:c1:bb:fd:07:ba:b6:ab:39:45:48:43:55:9b:98:b3:27:
0f:d3:3e:a3:5b:fb:13:79:d3:a8:2e:3e:37:30:fe:51:42:14:
54:0e:df:6c:09:89:ac:f4:c9:bd:93:21:2b:3b:89:7a:32:8d:
e5:1e:75:04:cf:0d:d2:af:da:a6:5b:19:27:33:7c:92:a5:cb:
84:97:66:bb:f6:1a:80:9d:4d:c7:29:16:a0:b9:11:23:9a:ca:
03:18:9c:45:ab:91:88:1b:56:ee:6e:b7:3d:b9:fd:85:35:2d:
54:d0:e1:df:4c:85:9e:0c:c3:0b:5c:5f:35:fa:7a:cf:6e:01:
82:aa:c0:ff:66:09:12:99:98:69:aa:15:45:8a:12:dd:b7:08:
a7:6f:ed:29:e8:79:3e:8e:c8:22:23:2d:95:0d:3e:65:ff:40:
f0:b8:42:41:38:59:21:f7:79:39:dc:7c:e7:03:a7:16:20:d3:
1f:49:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org