Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132322e3132382e302f31392d3139203d3e203233363933.roa
File: 3131342e3132322e3132382e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: C6+n/h9kuaEKel99Xg8RwpZ606AoAOVHhWDHWSna20Q=
Subject key identifier: B8:BE:00:9C:37:F7:A7:C1:10:6B:CF:24:29:F7:C0:26:B5:F2:1A:0D
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 74FB9E02E436C2C6536BA801696AF0C3D352E392
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132322e3132382e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:49:53 +0000
ROA not before: Mon 11 Nov 2024 03:44:53 +0000
ROA not after: Mon 10 Nov 2025 03:49:53 +0000
asID: 23693
IP address blocks: 114.122.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:fb:9e:02:e4:36:c2:c6:53:6b:a8:01:69:6a:f0:c3:d3:52:e3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:44:53 2024 GMT
Not After : Nov 10 03:49:53 2025 GMT
Subject: CN=B8BE009C37F7A7C1106BCF2429F7C026B5F21A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:7f:16:8c:6f:72:ef:ee:c2:76:65:1a:ff:
dd:4f:85:26:da:3f:0c:39:d6:ed:d3:a0:ef:e1:c9:
01:16:10:e1:83:13:51:45:84:6b:cd:b2:6f:80:01:
7f:2b:ba:b8:68:87:7c:5e:d3:a8:55:38:16:cc:30:
c7:b7:03:30:3a:f7:28:7d:ed:40:b7:c5:d4:be:06:
bb:7d:87:74:cd:90:67:59:19:64:de:2f:3e:5e:c5:
26:72:ba:6e:e9:57:2f:81:a6:e3:1e:35:8a:3c:dd:
87:7f:72:1c:75:0e:65:65:2c:51:5c:85:71:77:13:
3d:d7:f6:c2:9b:05:0e:be:63:a8:d6:84:82:83:b6:
52:0d:71:8b:51:24:b7:89:55:a4:f3:ca:9e:67:8e:
3f:e3:41:2c:f8:f9:24:c3:cd:17:a2:96:f5:c9:3b:
8b:4a:9f:fd:14:29:12:83:e4:27:41:86:bc:43:d6:
30:c9:0d:b6:59:8c:f5:17:2b:15:21:da:7f:64:7c:
c8:c3:8c:5c:18:6c:fe:e2:8d:00:20:db:2c:0d:2d:
16:69:49:aa:a8:e6:a0:cf:fd:ac:26:94:c4:cd:d7:
3a:ab:8f:b3:b5:52:3b:98:84:7a:81:b1:78:ec:ea:
90:0a:b9:bf:18:98:a6:8e:6e:17:e9:96:8f:00:68:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BE:00:9C:37:F7:A7:C1:10:6B:CF:24:29:F7:C0:26:B5:F2:1A:0D
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132322e3132382e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.122.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:23:4a:cb:ef:13:3c:15:3c:b1:c6:ea:86:0b:eb:ca:5c:34:
1a:2a:8a:10:ac:13:3b:24:27:01:6a:1d:8a:71:12:9c:fd:e6:
0c:e6:cc:66:a3:35:d0:af:c0:82:e8:85:00:9b:50:91:0b:38:
4b:61:14:cb:72:19:f5:c1:59:ac:3a:0a:87:65:40:31:e9:7c:
3d:ee:2a:fd:d9:ab:44:eb:50:9b:4f:65:b1:69:11:f5:4a:9c:
5f:71:34:17:bc:77:9c:ce:ae:bf:b7:b9:a5:1b:17:5e:d8:ff:
46:fe:5e:db:15:68:16:6e:9b:dd:b4:ff:1f:37:0d:8f:3f:bc:
6d:11:f9:79:54:7d:47:5f:8d:0f:bd:50:41:f5:a1:74:ab:f0:
e4:40:b6:aa:f0:e8:41:ef:25:d5:e7:95:1d:08:4b:f5:d8:ab:
37:0a:e4:20:42:85:71:0c:c0:a5:d6:5a:b4:32:1a:1b:4a:0f:
ac:97:6d:7a:ee:b6:4b:fd:fc:5a:24:64:98:75:5e:4d:76:99:
64:9b:ec:3d:d1:51:3c:61:cd:59:61:07:1e:f0:a7:4c:07:cb:
23:42:26:ac:25:b9:af:e2:f1:65:0a:22:f8:7b:c9:e5:d0:2c:
16:bf:12:0c:f7:4d:f6:9d:f3:e3:2d:de:81:84:14:c8:e8:c1:
25:03:e2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org