Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132322e36342e302f31392d3139203d3e203233363933.roa
File: 3131342e3132322e36342e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: Q7gvmP3mvoKCBqgpryYtM2GRecbO0qAUlEZ0yB40/cc=
Subject key identifier: 04:53:9D:6F:0B:45:7A:A2:64:EC:73:E6:2B:5C:02:80:03:44:AE:CC
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 3EFF59872FB725552330857A04C769130E66DD44
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132322e36342e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:49:17 +0000
ROA not before: Mon 11 Nov 2024 03:44:17 +0000
ROA not after: Mon 10 Nov 2025 03:49:17 +0000
asID: 23693
IP address blocks: 114.122.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ff:59:87:2f:b7:25:55:23:30:85:7a:04:c7:69:13:0e:66:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:44:17 2024 GMT
Not After : Nov 10 03:49:17 2025 GMT
Subject: CN=04539D6F0B457AA264EC73E62B5C02800344AECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:31:b9:63:d2:bd:12:e1:a8:43:02:5c:46:
10:04:1b:fe:05:25:d8:07:ee:c7:89:0e:8b:af:98:
e2:ee:fb:93:a6:51:9d:90:56:3f:7f:8d:ae:14:54:
bd:7d:cb:28:d7:ce:3f:3a:98:5e:24:30:95:b7:73:
bb:7e:8f:8b:e6:da:85:2a:ab:f6:5d:56:b5:6e:61:
09:12:79:e2:87:e4:98:a3:58:39:20:d8:8b:cc:9c:
a5:6e:ac:f2:e0:00:22:56:bd:1d:d6:85:1e:f0:9b:
f6:76:60:d6:65:75:4d:36:d9:e1:a6:ff:82:92:6a:
ba:b3:88:1d:3b:3c:39:98:0a:9d:35:18:c5:db:02:
d9:63:1d:03:e7:e1:b1:0f:53:a2:c3:07:12:b5:3b:
9e:87:95:bf:53:2e:78:92:6e:97:32:c0:f3:a7:a1:
43:32:0e:0f:86:e7:bc:c7:23:5d:11:58:25:dc:8a:
e4:9c:b7:80:29:c1:f3:f0:ef:f6:66:cd:fb:08:59:
a3:da:fa:03:71:a1:cd:8e:94:46:21:18:3a:73:4c:
6d:5d:c5:a7:32:c3:05:17:2a:26:45:57:68:45:70:
20:0e:71:f9:eb:ce:5e:29:a0:69:ca:91:be:95:5c:
20:30:7c:4b:d4:5c:79:b7:f1:a8:cc:47:46:53:7d:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:53:9D:6F:0B:45:7A:A2:64:EC:73:E6:2B:5C:02:80:03:44:AE:CC
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132322e36342e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.122.64.0/19
Signature Algorithm: sha256WithRSAEncryption
40:81:4d:e6:4f:8f:de:87:eb:a6:28:a0:bb:c7:75:0e:f6:49:
b9:49:71:c0:43:d8:63:99:af:b6:05:9f:8b:ef:d3:30:e9:6f:
d1:df:f6:6a:71:45:91:39:a4:14:a0:6e:07:87:43:0e:a9:fd:
8f:63:24:8f:14:06:7d:63:58:24:8e:0f:67:46:10:24:48:bc:
16:59:30:19:55:6a:6b:78:ba:29:ad:f4:56:3a:47:6f:7b:c9:
f4:a2:00:97:69:ae:ed:45:a3:1b:53:c3:05:36:7e:ba:6c:b5:
27:22:0c:da:71:cb:5d:3d:eb:35:c1:30:89:3b:5b:a1:3f:c6:
45:f5:4e:40:b5:53:5a:2c:5d:67:b0:75:b1:b6:2e:59:1b:74:
8a:90:3e:3e:f1:b2:8e:4d:66:9a:53:82:31:0e:52:44:7c:9f:
44:15:f1:28:a9:b3:32:13:c9:fc:71:44:d5:50:26:06:64:0d:
7d:c2:66:8b:39:73:a4:f9:cb:ff:cf:c7:4b:b2:f5:04:56:8c:
de:86:49:b8:fa:2a:ef:41:e1:9d:fd:d1:f2:da:91:1b:37:ca:
32:21:13:6e:ac:00:85:e7:2b:0c:ed:c8:9b:93:6e:4a:57:ef:
5c:ab:c5:0d:fd:f7:68:94:a4:12:67:87:23:c6:bf:99:bb:54:
12:71:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org