Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e302e302f31322d3132203d3e203233363933.roa
File: 3138322e302e302e302f31322d3132203d3e203233363933.roa (raw, json)
Hash identifier: FLba4OSza0POuUA0tU5XVi9aWs4exSgeBLqcr6ape0o=
Subject key identifier: B7:EF:1D:36:90:4A:D3:9D:4A:04:A8:FD:21:F3:A9:60:24:EE:05:87
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 059930A2370BB68F9F8F4BDA5A8A76DC8C50B192
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e302e302f31322d3132203d3e203233363933.roa
Signing time: Fri 08 Nov 2024 07:57:50 +0000
ROA not before: Fri 08 Nov 2024 07:52:50 +0000
ROA not after: Fri 07 Nov 2025 07:57:50 +0000
asID: 23693
IP address blocks: 182.0.0.0/12 maxlen: 12
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:99:30:a2:37:0b:b6:8f:9f:8f:4b:da:5a:8a:76:dc:8c:50:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 8 07:52:50 2024 GMT
Not After : Nov 7 07:57:50 2025 GMT
Subject: CN=B7EF1D36904AD39D4A04A8FD21F3A96024EE0587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:c9:0d:96:47:6c:ed:cf:0c:63:f2:33:c6:
5b:12:75:bb:38:3f:79:9c:b8:eb:af:df:ef:6f:7e:
ec:60:15:35:81:bb:2c:6c:c1:c4:c6:11:89:d0:8e:
0e:ee:0c:ac:53:5e:b6:57:3c:a3:6c:7c:42:88:de:
50:68:b7:a9:3f:d9:d9:76:9a:eb:a9:a0:87:da:4d:
3d:04:64:a8:a0:6f:ec:ff:54:05:46:44:a9:53:46:
16:ee:db:25:49:eb:7b:8a:9a:cb:6a:2e:4f:d5:a9:
9f:a6:57:69:7d:5f:27:ac:78:b8:37:2c:dd:70:9c:
5f:e7:66:3a:67:c8:d4:2f:d3:40:a4:8c:43:4f:c9:
d7:19:d6:41:9c:f7:05:4e:2e:c8:06:07:65:58:36:
71:f0:ec:ad:13:b3:14:39:b8:da:3b:41:22:1f:e6:
fd:9d:f9:28:b5:ba:c2:35:e3:94:b1:34:53:44:f7:
f1:66:d3:09:f6:d6:6b:04:94:03:3a:58:82:fc:ca:
4f:0d:cb:53:bb:31:01:54:4a:ee:a3:68:b9:f9:02:
6b:35:ef:a5:cb:ae:57:a1:fc:ed:4d:5b:4d:3a:12:
36:d7:d0:c9:01:dd:47:6b:ff:84:32:21:60:95:d5:
bf:62:b8:5a:72:7c:e4:8b:6d:e3:65:4f:27:05:b9:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:1D:36:90:4A:D3:9D:4A:04:A8:FD:21:F3:A9:60:24:EE:05:87
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e302e302f31322d3132203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.0.0.0/12
Signature Algorithm: sha256WithRSAEncryption
a3:9d:cb:00:58:d5:09:6b:66:81:95:7a:2e:ff:29:27:ee:52:
8c:4b:d2:e7:d6:59:18:46:14:4d:dd:db:28:c1:a5:d3:4d:89:
3a:51:14:63:9f:b1:1d:a0:3d:dc:19:e7:da:9f:3a:d7:35:e2:
71:26:81:fc:70:6f:aa:fb:0b:a3:fa:ed:78:82:ac:d4:1f:8d:
0e:8f:53:22:6a:16:5e:69:c0:d5:4e:61:45:91:90:e3:38:45:
27:24:ff:c0:99:5b:ff:fa:5c:10:a2:76:f6:ad:96:5d:55:79:
2f:b8:6c:ea:f3:14:08:12:6c:ca:84:e9:76:3c:05:2e:bc:1c:
49:9f:90:cb:b7:c3:ad:1e:3e:9e:26:3b:24:76:d4:53:1b:95:
a3:6b:80:d6:51:2c:2d:d2:02:10:a0:23:db:2c:8f:19:99:d6:
fc:24:b6:69:aa:b3:fe:ca:1d:98:04:df:ef:9b:ae:6e:84:ad:
9f:1f:8e:95:b3:e9:a6:1e:5a:db:6c:f8:1b:6c:1b:5b:94:4f:
3b:7f:eb:58:ad:12:98:6c:19:9b:e6:ed:b8:1a:7f:2f:d6:77:
70:38:6a:38:b4:04:ce:6c:7d:e4:69:14:22:37:da:8a:4f:c8:
68:de:38:bb:40:ce:75:22:8f:a8:b3:16:63:12:e6:15:29:9d:
62:d4:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org