Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132342e3132382e302f31382d3138203d3e203233363933.roa
File: 3131342e3132342e3132382e302f31382d3138203d3e203233363933.roa (raw, json)
Hash identifier: Y3uBfWY+WAVN0znEh7QtjclaZNMAx7f85nbqP6CJhrk=
Subject key identifier: 5F:62:E3:A9:02:F3:54:1A:37:2F:04:E5:6F:08:91:51:91:72:EB:25
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 1BB0CA076149460683C264E8C3A9CBA3FC99C505
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132342e3132382e302f31382d3138203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:50:08 +0000
ROA not before: Mon 11 Nov 2024 03:45:08 +0000
ROA not after: Mon 10 Nov 2025 03:50:08 +0000
asID: 23693
IP address blocks: 114.124.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b0:ca:07:61:49:46:06:83:c2:64:e8:c3:a9:cb:a3:fc:99:c5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:45:08 2024 GMT
Not After : Nov 10 03:50:08 2025 GMT
Subject: CN=5F62E3A902F3541A372F04E56F0891519172EB25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:1d:95:f9:60:71:7a:08:87:43:7e:c3:f5:
0d:13:cb:ff:66:3a:0a:83:b6:67:f4:c3:57:fa:63:
85:61:4c:bd:d1:25:d5:4d:87:d8:cf:55:0a:bf:f8:
01:10:00:0e:19:e4:5d:bd:ee:fe:7e:f3:d5:09:28:
c4:51:53:42:0f:f8:7e:c4:ed:aa:df:9b:70:d6:1b:
0a:77:74:30:93:f1:1a:aa:80:87:ff:c9:b5:e0:e4:
89:28:36:8e:8a:e3:ed:2a:6d:5b:e6:93:65:50:91:
7b:1f:95:14:99:04:63:11:ee:da:b6:5f:9b:9a:19:
8e:39:09:1c:ba:6d:ba:ab:c1:0b:b4:79:a7:a1:81:
38:9e:78:89:8e:5d:d6:27:fe:f0:14:dc:24:73:94:
61:7f:cb:e2:c3:66:11:37:a4:4c:b2:d1:98:88:fe:
f1:42:a1:4f:db:91:e3:d1:fe:a9:07:1d:3d:34:48:
49:fb:00:57:8d:58:09:c7:04:7b:0f:8c:2d:2b:13:
85:5c:d8:1d:fb:ad:eb:32:70:c2:e8:d8:0c:a4:04:
19:42:95:8b:48:29:27:82:57:b9:7e:91:ee:e7:05:
cb:5a:6b:95:9c:d5:47:43:42:5f:f3:51:0e:d1:09:
7f:dc:a1:e6:81:e1:c7:90:12:4c:e5:36:0a:f8:ac:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:62:E3:A9:02:F3:54:1A:37:2F:04:E5:6F:08:91:51:91:72:EB:25
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132342e3132382e302f31382d3138203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.124.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:fe:fd:44:43:36:51:c0:97:f0:87:fc:5e:ac:86:9a:a2:8e:
f8:bc:ff:ab:c1:7c:0b:7b:09:09:0c:10:28:6f:4d:98:12:09:
7b:a0:d6:44:4f:68:8f:5a:5f:88:7d:2a:05:f5:ae:af:37:1c:
a3:30:fb:13:c2:c0:8a:3b:df:29:b1:98:d4:9e:61:d8:01:1f:
0a:ef:4c:1a:14:86:d7:28:a4:34:7d:37:c5:5c:5d:a0:d9:56:
35:eb:54:65:ea:33:7d:9d:44:47:d7:78:48:8d:8d:6d:73:55:
ab:ec:e3:5e:48:f7:2a:17:9f:4d:d8:fa:40:37:c4:6d:a0:25:
78:ed:62:65:b5:bf:62:d8:18:d9:a3:00:17:88:b5:3d:47:07:
51:4b:f1:48:0d:9c:8b:a1:86:a1:cc:da:fd:86:48:c9:53:29:
56:ec:64:e1:e5:97:53:1b:cc:01:f7:a3:c2:ac:e8:78:87:c7:
0c:9b:77:19:53:fd:e1:1d:ea:c5:da:df:87:8c:5a:27:93:fc:
80:ae:b4:a5:b6:98:44:5c:a1:e8:e1:c5:f5:51:1b:db:52:15:
9b:f6:38:88:9f:94:3d:ec:2d:1f:39:1f:1c:ce:d5:c8:3b:83:
ee:0e:f1:df:39:95:88:e4:51:51:8c:0a:a1:de:13:15:94:e6:
dd:a8:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org