Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132322e39362e302f31392d3139203d3e203233363933.roa
File: 3131342e3132322e39362e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: r3dKSUxWzvMkpX9ajx1GwXHvXxqFHCRwxTueaaiB18Q=
Subject key identifier: E8:9C:F4:22:46:4C:48:95:2D:2D:9D:0C:D5:8D:FD:4A:95:B2:72:76
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 6E599263A6B424696039CCDD77115185DBC691CD
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132322e39362e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:49:38 +0000
ROA not before: Mon 11 Nov 2024 03:44:38 +0000
ROA not after: Mon 10 Nov 2025 03:49:38 +0000
asID: 23693
IP address blocks: 114.122.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:59:92:63:a6:b4:24:69:60:39:cc:dd:77:11:51:85:db:c6:91:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:44:38 2024 GMT
Not After : Nov 10 03:49:38 2025 GMT
Subject: CN=E89CF422464C48952D2D9D0CD58DFD4A95B27276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:18:28:d4:0c:49:ad:2d:a3:ad:d2:07:a3:
38:b9:39:fb:d3:c7:85:cb:ac:f5:09:44:7f:00:20:
69:4b:5b:74:49:9b:b5:69:9c:9b:b2:01:86:c7:04:
21:ab:34:fe:d8:42:70:7b:6a:5f:6f:83:4d:5e:f4:
91:87:eb:25:d2:21:63:38:b3:5a:9d:40:1c:6e:c0:
06:68:5d:53:e9:b2:55:2c:a5:29:cf:6c:10:ed:ec:
c8:4a:5e:bb:30:bc:28:db:bc:35:4b:35:79:d2:52:
e6:ed:70:2f:ee:34:7e:c3:57:f2:15:12:af:89:e3:
0e:30:99:c5:fc:f1:1d:77:6f:d4:80:a3:fd:01:b5:
03:dd:cd:5c:50:6c:ee:ef:7c:c0:e7:0b:98:32:e1:
bb:30:8a:a4:c0:29:cb:11:c5:88:b6:8d:8f:5a:bd:
a0:fe:ef:1f:4c:40:fd:9b:1f:f5:b5:ff:c0:bd:99:
5f:21:b7:96:30:77:e1:29:0f:cd:88:ac:d1:66:2a:
39:61:23:82:5a:64:dd:d2:af:f1:d9:5f:e1:43:8e:
89:ed:c8:55:39:d5:c7:52:1b:48:d0:29:58:e8:78:
23:0d:47:d3:27:d8:73:db:e4:c6:8b:c6:c1:b8:fc:
2c:da:db:8b:48:ca:76:f2:a2:a4:3c:f9:d6:c1:7a:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:F4:22:46:4C:48:95:2D:2D:9D:0C:D5:8D:FD:4A:95:B2:72:76
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132322e39362e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.122.96.0/19
Signature Algorithm: sha256WithRSAEncryption
21:52:99:ed:df:99:a4:15:c6:2b:a0:eb:01:1e:ec:8d:fd:81:
a8:b0:61:b7:18:60:9e:73:1d:a4:47:84:8f:9e:09:8d:84:2c:
2a:38:94:cd:d0:d8:87:72:fb:74:82:23:a4:95:f0:00:9d:0d:
f6:1a:4f:96:e4:c3:d7:61:be:68:4a:cd:6a:46:b5:a6:de:18:
9e:44:70:3b:b6:f8:44:72:a3:a2:27:be:62:5c:73:34:9c:b7:
7f:f1:7f:9a:af:69:4c:6c:2b:49:13:55:db:31:2a:c0:c2:cf:
47:1d:44:8f:fc:2f:2f:5c:78:8a:5c:ce:62:a9:07:84:d7:fc:
98:13:88:d3:8f:a8:0d:39:e8:f3:55:67:11:3a:3d:13:40:63:
51:a6:90:a0:2f:cc:e1:28:c2:24:bc:d2:ca:f4:f3:28:d6:f4:
7f:4c:d6:2d:6d:40:93:47:29:71:1e:13:44:d3:41:6a:47:7a:
24:fa:a4:99:3c:c0:b3:d4:15:a9:78:57:aa:8e:0e:b1:79:2e:
13:34:5b:d1:45:b7:1f:ff:c4:68:e5:a2:fc:ca:b1:ab:cd:42:
20:a7:53:e6:ee:bb:d9:a2:29:90:bb:9c:75:9e:2d:32:9f:63:
6b:f8:9f:dc:3d:63:3f:4a:d0:34:14:92:cd:f6:0f:35:9e:de:
d7:77:d5:9f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUblmSY6a0JGlgOczddxFRhdvGkc0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2
QjlDOUYzQTAeFw0yNDExMTEwMzQ0MzhaFw0yNTExMTAwMzQ5MzhaMDMxMTAvBgNV
BAMTKEU4OUNGNDIyNDY0QzQ4OTUyRDJEOUQwQ0Q1OERGRDRBOTVCMjcyNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrBgo1AxJrS2jrdIHozi5OfvT
x4XLrPUJRH8AIGlLW3RJm7VpnJuyAYbHBCGrNP7YQnB7al9vg01e9JGH6yXSIWM4
s1qdQBxuwAZoXVPpslUspSnPbBDt7MhKXrswvCjbvDVLNXnSUubtcC/uNH7DV/IV
Eq+J4w4wmcX88R13b9SAo/0BtQPdzVxQbO7vfMDnC5gy4bswiqTAKcsRxYi2jY9a
vaD+7x9MQP2bH/W1/8C9mV8ht5Ywd+EpD82IrNFmKjlhI4JaZN3Sr/HZX+FDjont
yFU51cdSG0jQKVjoeCMNR9Mn2HPb5MaLxsG4/Cza24tIynbyoqQ8+dbBemR1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6Jz0IkZMSJUtLZ0M1Y39SpWycnYwHwYDVR0j
BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz
QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD
OUYzQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjhmMjRlLWRjN2YtNDU2Mi1h
NTFkLWUyZTM4YzM2NzdkMS8wLzMxMzEzNDJlMzEzMjMyMmUzOTM2MmUzMDJmMzEz
OTJkMzEzOTIwM2QzZTIwMzIzMzM2MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXJ6YDANBgkqhkiG
9w0BAQsFAAOCAQEAIVKZ7d+ZpBXGK6DrAR7sjf2BqLBhtxhgnnMdpEeEj54JjYQs
KjiUzdDYh3L7dIIjpJXwAJ0N9hpPluTD12G+aErNaka1pt4YnkRwO7b4RHKjoie+
YlxzNJy3f/F/mq9pTGwrSRNV2zEqwMLPRx1Ej/wvL1x4ilzOYqkHhNf8mBOI04+o
DTno81VnETo9E0BjUaaQoC/M4SjCJLzSyvTzKNb0f0zWLW1Ak0cpcR4TRNNBakd6
JPqkmTzAs9QVqXhXqo4OsXkuEzRb0UW3H//EaOWi/Mqxq81CIKdT5u672aIpkLuc
dZ4tMp9ja/if3D1jP0rQNBSSzfYPNZ7e13fVnw==
-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org