Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132352e36342e302f31392d3139203d3e203233363933.roa
File: 3131342e3132352e36342e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: qSO8PNlU73Bebes+6sP5NNGYgLLbqWaDsEyvw3wdMWM=
Subject key identifier: 99:66:5B:CC:C5:EE:4B:98:9C:80:F6:5C:A3:98:27:BB:C9:00:32:71
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 25125C796D8B10399C3E6B578E9300D9A2BCD567
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132352e36342e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:52:11 +0000
ROA not before: Mon 11 Nov 2024 03:47:11 +0000
ROA not after: Mon 10 Nov 2025 03:52:11 +0000
asID: 23693
IP address blocks: 114.125.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:12:5c:79:6d:8b:10:39:9c:3e:6b:57:8e:93:00:d9:a2:bc:d5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:47:11 2024 GMT
Not After : Nov 10 03:52:11 2025 GMT
Subject: CN=99665BCCC5EE4B989C80F65CA39827BBC9003271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:41:71:b0:27:f4:3b:c9:aa:f1:99:03:f3:
c8:fb:4b:cf:e3:7c:52:96:77:6f:fb:2a:fe:bb:6d:
fd:74:b2:61:11:4d:21:10:1e:33:d4:74:08:19:05:
1d:ba:f0:b4:7c:0f:58:f4:bf:ca:da:78:f7:10:e3:
29:ad:16:67:60:d8:b0:df:ad:c6:81:e3:f9:42:f7:
56:9e:08:89:93:9e:5f:0d:b4:2c:7a:ab:51:d4:d9:
40:4e:50:11:8b:2f:c3:62:21:8f:53:cd:dd:43:7c:
03:eb:1b:64:6e:65:bf:04:89:74:ad:24:df:55:02:
f2:0f:fe:e7:de:e8:70:39:18:0c:dd:25:76:4a:bb:
10:34:bc:a7:d5:90:a3:3c:f6:ef:75:73:78:99:9b:
2c:df:d7:8c:be:7b:52:30:0d:38:11:d9:23:60:9c:
6c:77:f6:b7:e0:c9:72:6a:0b:19:c0:06:0d:63:84:
5e:a3:92:9e:e4:d5:12:09:6c:04:a0:1e:4f:6f:3c:
3f:23:dd:65:25:c9:2f:06:4b:c0:24:d2:6f:b6:b8:
07:6c:f0:10:dc:45:29:fa:26:81:21:6c:f8:ce:07:
09:f3:3e:68:7c:25:b1:a0:1f:77:ae:e2:26:3e:a5:
f1:e3:0b:d4:08:74:2d:57:5b:e5:a7:38:bf:ec:22:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:66:5B:CC:C5:EE:4B:98:9C:80:F6:5C:A3:98:27:BB:C9:00:32:71
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132352e36342e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.125.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:0f:8c:8d:dd:e7:d8:f1:ad:6a:b6:6a:d2:ea:4f:ea:62:9f:
1a:48:61:bc:f9:03:18:aa:cf:ed:f7:de:bb:13:19:43:2c:b2:
8f:66:79:ac:62:6c:57:d4:a4:90:42:cd:e7:6f:7b:00:a4:11:
e8:a4:d9:e5:3c:fe:a8:55:69:99:66:32:63:86:25:86:6f:65:
27:cf:60:8d:a7:1b:20:ec:63:bf:24:02:2d:ee:82:af:96:9a:
b6:56:69:03:c2:98:d5:05:72:6a:95:b3:02:8b:87:ca:ee:11:
b3:37:e1:65:f7:79:fe:89:73:6a:1f:f5:a9:16:51:14:3c:6a:
42:5f:c0:ad:f3:fa:a5:9e:bd:22:c4:95:c2:e5:5a:9b:84:e6:
c3:fb:9f:e8:b2:93:e8:a6:26:e6:78:3b:26:59:7a:33:d5:b3:
78:86:b0:53:02:e8:b7:ef:ec:7d:b7:ff:30:01:71:08:b0:51:
87:7c:6b:9a:6b:91:98:e6:35:e2:10:39:d3:2c:35:a5:04:08:
ea:c3:41:0a:5c:17:99:51:b2:c1:86:d3:68:48:33:5b:2a:23:
47:06:b9:e1:16:2e:89:85:a7:9b:22:36:00:fe:31:46:5d:c1:
57:68:e7:39:8f:a4:44:4d:38:7c:d3:90:14:4e:2f:0f:5f:44:
ed:9f:96:e6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJRJceW2LEDmcPmtXjpMA2aK81WcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2
QjlDOUYzQTAeFw0yNDExMTEwMzQ3MTFaFw0yNTExMTAwMzUyMTFaMDMxMTAvBgNV
BAMTKDk5NjY1QkNDQzVFRTRCOTg5QzgwRjY1Q0EzOTgyN0JCQzkwMDMyNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7EFxsCf0O8mq8ZkD88j7S8/j
fFKWd2/7Kv67bf10smERTSEQHjPUdAgZBR268LR8D1j0v8raePcQ4ymtFmdg2LDf
rcaB4/lC91aeCImTnl8NtCx6q1HU2UBOUBGLL8NiIY9Tzd1DfAPrG2RuZb8EiXSt
JN9VAvIP/ufe6HA5GAzdJXZKuxA0vKfVkKM89u91c3iZmyzf14y+e1IwDTgR2SNg
nGx39rfgyXJqCxnABg1jhF6jkp7k1RIJbASgHk9vPD8j3WUlyS8GS8Ak0m+2uAds
8BDcRSn6JoEhbPjOBwnzPmh8JbGgH3eu4iY+pfHjC9QIdC1XW+WnOL/sIkOVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmWZbzMXuS5icgPZco5gnu8kAMnEwHwYDVR0j
BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz
QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD
OUYzQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjhmMjRlLWRjN2YtNDU2Mi1h
NTFkLWUyZTM4YzM2NzdkMS8wLzMxMzEzNDJlMzEzMjM1MmUzNjM0MmUzMDJmMzEz
OTJkMzEzOTIwM2QzZTIwMzIzMzM2MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXJ9QDANBgkqhkiG
9w0BAQsFAAOCAQEAng+Mjd3n2PGtarZq0upP6mKfGkhhvPkDGKrP7ffeuxMZQyyy
j2Z5rGJsV9SkkELN5297AKQR6KTZ5Tz+qFVpmWYyY4Ylhm9lJ89gjacbIOxjvyQC
Le6Cr5aatlZpA8KY1QVyapWzAouHyu4RszfhZfd5/olzah/1qRZRFDxqQl/ArfP6
pZ69IsSVwuVam4Tmw/uf6LKT6KYm5ng7Jll6M9WzeIawUwLot+/sfbf/MAFxCLBR
h3xrmmuRmOY14hA50yw1pQQI6sNBClwXmVGywYbTaEgzWyojRwa54RYuiYWnmyI2
AP4xRl3BV2jnOY+kRE04fNOQFE4vD19E7Z+W5g==
-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org