Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132302e302e302f31382d3138203d3e203233363933.roa
File: 3131342e3132302e302e302f31382d3138203d3e203233363933.roa (raw, json)
Hash identifier: AQhkmOTlB+dEZKTBMfYHYeGCgqLqVU4UP5/hI8RvVlc=
Subject key identifier: A0:2E:28:29:EE:F2:A8:22:C3:3D:9C:23:83:CC:77:CC:B5:2B:59:1F
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 7CF2C1E607D4EE16ADBA2FB7361120C78FF73FB2
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132302e302e302f31382d3138203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 08:15:26 +0000
ROA not before: Mon 11 Nov 2024 08:10:26 +0000
ROA not after: Mon 10 Nov 2025 08:15:26 +0000
asID: 23693
IP address blocks: 114.120.0.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f2:c1:e6:07:d4:ee:16:ad:ba:2f:b7:36:11:20:c7:8f:f7:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 08:10:26 2024 GMT
Not After : Nov 10 08:15:26 2025 GMT
Subject: CN=A02E2829EEF2A822C33D9C2383CC77CCB52B591F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:62:a5:62:70:dc:24:9e:e7:74:66:c0:86:
cb:15:34:11:b2:f3:72:da:db:16:28:bd:28:17:3d:
70:c4:05:32:4c:8a:a4:9e:f5:86:68:50:29:ad:83:
c1:f8:bc:b5:6c:4d:ff:e0:20:3d:24:3d:07:61:07:
d3:4f:b6:f3:ca:63:3e:09:1e:e8:12:9b:f5:04:0f:
ea:ea:c0:06:c8:c2:06:4b:7b:eb:ff:c5:39:8c:d7:
c2:b5:f9:e5:d6:d7:14:b1:e3:f4:e7:3a:1b:e0:dc:
78:45:57:89:2d:2b:e1:58:9c:56:cd:bd:88:da:44:
4e:58:0d:28:32:1b:12:ec:45:39:29:b3:de:5e:74:
78:64:59:02:14:28:82:e6:7a:a1:87:15:28:df:50:
2c:6c:a7:6f:3c:78:a1:58:bd:31:b6:33:07:4b:e7:
2d:dc:fd:3a:f0:9b:fc:3d:0e:e4:04:77:e5:61:71:
ac:b1:19:e5:21:47:81:96:d8:7e:30:d4:ce:51:44:
f4:14:29:38:0f:91:c9:de:fb:4e:25:5e:78:3d:32:
62:e7:04:6f:ff:e3:02:b9:31:59:99:28:ae:56:ee:
7a:dc:29:aa:ba:c2:98:cd:6a:4a:da:2d:ff:2c:23:
a1:87:44:0b:2a:94:30:43:53:e4:80:6e:6f:8f:d6:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2E:28:29:EE:F2:A8:22:C3:3D:9C:23:83:CC:77:CC:B5:2B:59:1F
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132302e302e302f31382d3138203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.120.0.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:46:d1:ec:71:a9:f8:23:9e:e6:ae:87:81:c2:48:89:6e:14:
4e:be:64:13:d9:f9:a0:4e:19:8a:7a:25:e1:44:be:9e:7c:dc:
38:3d:15:3e:fb:5d:a5:1e:52:08:d2:0a:64:34:2c:21:47:3d:
18:60:d4:1c:e0:05:61:cd:f3:02:63:0f:e5:d9:78:2a:73:04:
a0:23:82:07:ca:7d:87:14:0f:86:4f:78:73:57:19:dc:ea:cf:
d2:a2:57:2f:89:18:df:50:73:56:a9:0a:e4:c6:53:0b:cb:7a:
23:1e:71:39:3d:86:f9:16:b9:c2:96:23:19:99:bf:3b:fa:7d:
79:09:5a:16:75:30:d9:fc:42:e0:4a:dc:24:94:a2:47:57:1b:
eb:e2:55:bd:7e:fa:69:94:57:3d:5a:9f:38:b2:44:04:11:17:
cb:b2:c0:ea:89:bd:7e:1e:88:19:92:4c:cc:5c:34:f6:80:18:
56:c4:8b:3a:ac:5a:89:72:f1:9f:fa:06:47:1a:d7:be:5c:c0:
7d:bf:bd:4d:a4:45:6e:37:32:b5:4f:12:a6:39:56:0f:97:82:
c7:3d:7d:a4:8f:28:f5:48:2d:5f:a6:28:d7:0b:a6:9c:26:21:
9f:22:75:9d:08:16:54:ba:8d:5a:d5:99:48:85:85:d3:f6:94:
5c:cd:8f:4d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUfPLB5gfU7hatui+3NhEgx4/3P7IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2
QjlDOUYzQTAeFw0yNDExMTEwODEwMjZaFw0yNTExMTAwODE1MjZaMDMxMTAvBgNV
BAMTKEEwMkUyODI5RUVGMkE4MjJDMzNEOUMyMzgzQ0M3N0NDQjUyQjU5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7yGKlYnDcJJ7ndGbAhssVNBGy
83La2xYovSgXPXDEBTJMiqSe9YZoUCmtg8H4vLVsTf/gID0kPQdhB9NPtvPKYz4J
HugSm/UED+rqwAbIwgZLe+v/xTmM18K1+eXW1xSx4/TnOhvg3HhFV4ktK+FYnFbN
vYjaRE5YDSgyGxLsRTkps95edHhkWQIUKILmeqGHFSjfUCxsp288eKFYvTG2MwdL
5y3c/Trwm/w9DuQEd+VhcayxGeUhR4GW2H4w1M5RRPQUKTgPkcne+04lXng9MmLn
BG//4wK5MVmZKK5W7nrcKaq6wpjNakraLf8sI6GHRAsqlDBDU+SAbm+P1raLAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUoC4oKe7yqCLDPZwjg8x3zLUrWR8wHwYDVR0j
BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz
QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD
OUYzQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjhmMjRlLWRjN2YtNDU2Mi1h
NTFkLWUyZTM4YzM2NzdkMS8wLzMxMzEzNDJlMzEzMjMwMmUzMDJlMzAyZjMxMzgy
ZDMxMzgyMDNkM2UyMDMyMzMzNjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZyeAAwDQYJKoZIhvcN
AQELBQADggEBABxG0exxqfgjnuauh4HCSIluFE6+ZBPZ+aBOGYp6JeFEvp583Dg9
FT77XaUeUgjSCmQ0LCFHPRhg1BzgBWHN8wJjD+XZeCpzBKAjggfKfYcUD4ZPeHNX
Gdzqz9KiVy+JGN9Qc1apCuTGUwvLeiMecTk9hvkWucKWIxmZvzv6fXkJWhZ1MNn8
QuBK3CSUokdXG+viVb1++mmUVz1anziyRAQRF8uywOqJvX4eiBmSTMxcNPaAGFbE
izqsWoly8Z/6Bkca175cwH2/vU2kRW43MrVPEqY5Vg+Xgsc9faSPKPVILV+mKNcL
ppwmIZ8idZ0IFlS6jVrVmUiFhdP2lFzNj00=
-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org