Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132372e302e302f31362d3136203d3e203233363933.roa
File: 3131342e3132372e302e302f31362d3136203d3e203233363933.roa (raw, json)
Hash identifier: xIDcCfFpvEEL3BmgR4cx2q8PCwpMUjVRVddWJ2J+uo4=
Subject key identifier: 0E:F0:E5:E9:84:56:2B:D9:57:12:F2:EA:A9:E6:14:96:96:53:FE:0F
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 709A5ECCCE1209211112F49B14787EB002B0443B
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132372e302e302f31362d3136203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:52:55 +0000
ROA not before: Mon 11 Nov 2024 03:47:55 +0000
ROA not after: Mon 10 Nov 2025 03:52:55 +0000
asID: 23693
IP address blocks: 114.127.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9a:5e:cc:ce:12:09:21:11:12:f4:9b:14:78:7e:b0:02:b0:44:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:47:55 2024 GMT
Not After : Nov 10 03:52:55 2025 GMT
Subject: CN=0EF0E5E984562BD95712F2EAA9E614969653FE0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:41:91:16:b8:fc:ac:e8:cb:00:cf:9a:5f:6b:
56:5c:25:ca:4e:02:6a:96:a7:25:45:e3:e6:12:52:
a5:cb:b9:80:d9:62:a1:61:a6:8a:f4:98:7c:a2:a8:
7c:65:50:1a:dd:32:65:7c:26:50:35:b4:68:66:57:
b5:0f:b1:63:f8:c3:c5:e5:42:0e:33:aa:06:2c:a3:
88:0a:d3:bf:3b:1b:b8:aa:03:cb:18:ce:37:59:55:
8c:3c:06:79:29:4d:09:01:c8:6a:a6:65:d2:88:a1:
96:a6:1d:3b:5c:76:59:e0:bd:3e:28:96:0c:b3:1e:
22:7f:4f:e1:12:b0:79:8d:ce:23:a3:a1:69:32:1e:
ed:b0:ae:78:0f:02:94:a6:98:6c:a3:25:3f:dc:96:
4e:21:80:8e:92:9f:03:07:cf:ab:d1:ad:d7:36:63:
ee:fe:a8:4b:11:80:cf:92:32:62:2e:f0:d8:49:8d:
96:88:cc:8e:b3:c0:0f:9e:54:dd:2f:e2:19:11:dc:
2c:44:56:41:c2:b8:ac:ce:b2:25:66:30:c6:dd:55:
c0:21:d8:f3:62:39:0a:3c:33:ba:b4:13:0d:81:77:
28:d6:7f:3d:fc:32:c1:0a:c1:59:f4:71:ce:72:81:
81:61:7f:bb:c0:d5:49:69:cd:26:10:73:c0:ca:5d:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F0:E5:E9:84:56:2B:D9:57:12:F2:EA:A9:E6:14:96:96:53:FE:0F
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132372e302e302f31362d3136203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.127.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:d2:8e:81:df:cd:ee:23:4d:ee:8d:78:63:6e:9c:1a:fa:c0:
7a:f8:15:fa:c1:e5:eb:d2:82:30:90:6d:89:5a:30:81:5a:91:
6e:74:1b:df:15:bf:e6:05:46:20:84:93:e0:76:f9:a6:93:a5:
44:bf:38:6e:68:29:1f:a0:f8:32:03:60:9f:a0:bc:0a:b6:7d:
4a:ee:0e:95:e7:66:c1:49:ea:8f:45:51:f0:19:62:a2:c7:23:
2b:64:79:af:55:d2:8e:ab:ed:66:f4:12:05:c8:e3:95:38:be:
7b:d3:fa:35:97:b0:81:49:9d:0e:16:37:92:00:4f:34:82:2c:
bd:52:01:7d:67:a7:3f:51:2b:e3:21:7e:27:8e:82:7a:95:8e:
7d:52:0f:50:04:79:73:2c:d0:b1:af:a1:6b:d5:24:d1:9f:34:
74:55:6a:19:a5:fa:52:7c:0f:d6:d5:3d:ec:f7:0c:08:df:b9:
ae:bf:bb:44:cc:86:6e:bf:3e:67:59:7c:98:35:02:a3:ca:e2:
c4:16:56:b2:05:e9:3b:c9:52:c5:76:c1:d6:b6:8a:2c:1e:a2:
88:ca:81:e9:85:3f:91:93:99:9b:c6:fb:5d:fd:89:a7:4c:9a:
52:d7:88:86:b8:6b:99:f0:32:d2:6d:08:b4:7e:41:41:ed:69:
9f:af:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org