Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132342e3139322e302f31382d3138203d3e203233363933.roa
File: 3131342e3132342e3139322e302f31382d3138203d3e203233363933.roa (raw, json)
Hash identifier: BScD6vVdqKrfk0+jsSg+krOkHCtP/IpJbsQCnig3VEo=
Subject key identifier: D7:FF:01:C9:22:B7:BD:B5:E0:9A:24:19:59:A4:D3:AA:DF:8F:B9:6E
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 3091CB04CEBB07DF605EC10C5BF013AF678F86EA
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132342e3139322e302f31382d3138203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:51:37 +0000
ROA not before: Mon 11 Nov 2024 03:46:37 +0000
ROA not after: Mon 10 Nov 2025 03:51:37 +0000
asID: 23693
IP address blocks: 114.124.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:91:cb:04:ce:bb:07:df:60:5e:c1:0c:5b:f0:13:af:67:8f:86:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:46:37 2024 GMT
Not After : Nov 10 03:51:37 2025 GMT
Subject: CN=D7FF01C922B7BDB5E09A241959A4D3AADF8FB96E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:0d:71:15:ad:ba:25:42:e1:18:85:eb:20:
3e:59:c7:f7:d6:16:a2:7e:82:05:a2:cc:b5:76:c2:
18:df:01:1c:99:99:76:24:27:58:20:f7:9c:39:c5:
2b:da:ba:c7:8c:98:b8:8b:8a:6f:6b:d0:2b:96:48:
a1:28:2c:d7:7b:20:67:15:c5:4b:55:54:a0:41:10:
a8:22:e7:01:da:8c:d8:9a:24:19:c1:ba:7b:53:22:
d3:9c:3f:15:a2:15:9a:0a:f5:6a:99:4a:b9:e2:af:
d2:ce:44:8a:0a:b2:8f:3c:62:f2:f7:7c:e4:e7:3b:
90:89:8e:6a:a2:0b:46:7f:e3:79:df:e9:b7:8c:52:
a9:b3:ef:82:d2:88:d6:7d:35:e6:d3:64:9d:0c:27:
6f:69:ea:35:fa:51:2c:09:25:df:b7:ee:9b:74:48:
99:2f:20:4a:ef:d1:3f:f4:a2:69:d0:a7:e1:a8:97:
07:3f:a6:ad:bc:a3:ad:a6:6a:2e:a8:23:55:63:3d:
09:73:22:48:04:04:ee:67:f3:68:30:50:2d:17:f7:
6c:f1:1a:e4:01:cc:8b:e3:d2:c9:04:d6:57:91:79:
92:82:2f:32:a6:76:2f:dd:36:ed:3b:66:d5:6f:7b:
f1:90:98:b7:40:83:a9:21:6c:f1:eb:64:80:b8:69:
7b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:01:C9:22:B7:BD:B5:E0:9A:24:19:59:A4:D3:AA:DF:8F:B9:6E
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132342e3139322e302f31382d3138203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.124.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:ec:6d:2a:a6:ee:07:6c:7f:3a:bf:1c:91:b2:0e:7e:6a:00:
1a:87:8c:c2:4d:3c:af:64:6b:bc:cc:74:39:c7:99:48:92:8f:
4a:21:58:0e:11:14:86:ea:97:9a:1f:0e:00:95:19:5c:24:c9:
76:51:7e:17:94:9e:03:79:91:79:86:38:6c:85:13:79:53:bb:
76:c0:e0:dc:74:0b:8e:04:d5:fe:42:dc:e9:65:a2:0e:05:5a:
56:b0:43:3e:4c:d9:e0:96:45:f2:53:2b:c0:25:df:40:3d:76:
35:39:64:54:5d:ce:ee:86:67:72:de:3c:49:e5:49:20:48:d2:
36:16:26:89:77:d8:98:6f:b0:ff:0e:c5:e7:8f:88:90:da:03:
ea:a2:2d:f0:82:9a:c8:97:a3:0f:7a:02:64:f7:6a:f1:0b:71:
05:dc:ca:76:cd:b5:6a:af:73:d0:4b:6d:5e:a8:5c:aa:86:8e:
da:1d:07:a9:3f:8e:3d:b0:e5:cd:89:96:95:1e:80:c5:5d:46:
3b:a2:5a:1e:a0:5f:e8:60:e8:1c:38:2a:78:ff:c4:32:42:2b:
29:c2:d7:e3:57:72:31:56:e6:41:0d:77:4e:2e:45:f9:5b:05:
00:19:43:04:95:ff:71:f8:a2:3d:0b:4a:b2:db:17:5e:4c:38:
6d:80:39:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org