Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3132382e302f31382d3138203d3e203233363933.roa
File: 3138322e302e3132382e302f31382d3138203d3e203233363933.roa (raw, json)
Hash identifier: h0CEYVbJ1q+yzxQEgpzsZtqHssCkRseYULPOzsSn8do=
Subject key identifier: D3:D1:8C:5C:56:51:04:18:0B:11:6B:31:D4:EC:43:F8:80:39:F4:AD
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 50083BDB22CF06EE98694DA8FFD173BA80D2AEB2
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3132382e302f31382d3138203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:54:55 +0000
ROA not before: Mon 11 Nov 2024 03:49:55 +0000
ROA not after: Mon 10 Nov 2025 03:54:55 +0000
asID: 23693
IP address blocks: 182.0.128.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:08:3b:db:22:cf:06:ee:98:69:4d:a8:ff:d1:73:ba:80:d2:ae:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:49:55 2024 GMT
Not After : Nov 10 03:54:55 2025 GMT
Subject: CN=D3D18C5C565104180B116B31D4EC43F88039F4AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:b6:a7:8f:28:2e:a6:2a:a9:c9:88:16:70:
19:b6:23:b8:14:d0:b5:cc:7f:bd:c8:20:be:05:d0:
78:c8:ef:14:27:dc:80:42:cb:73:8d:bf:24:4a:1d:
58:4a:bc:5b:f6:60:71:a9:4d:7b:70:5e:c9:75:b1:
06:94:dd:d6:06:22:15:0d:6c:02:fa:90:35:28:5a:
96:79:25:3c:f0:66:99:70:c5:4b:9e:f5:a1:dd:a8:
39:9f:95:4e:67:29:da:6a:44:37:44:fa:0b:2e:cc:
c3:91:a5:b7:96:12:04:d8:5a:77:9c:5b:c9:35:aa:
20:98:ad:26:04:fd:e4:32:15:7b:9f:47:9c:2f:49:
32:d2:1f:7e:45:3e:be:39:28:b5:ff:65:1e:6e:ac:
53:9e:62:0f:f6:4c:80:87:a6:8b:7b:02:3c:48:73:
58:3c:c9:08:a4:6d:20:c1:00:a2:23:7c:76:24:8b:
88:22:ee:8a:0b:20:1f:47:38:1b:e3:fe:29:2e:81:
b3:1a:86:e8:b2:92:a0:54:02:a1:9b:45:ec:f3:8c:
2a:2b:88:f3:7d:1d:d7:e9:16:6a:75:8b:ba:d5:ca:
44:be:0c:bc:e2:a4:31:75:60:1c:63:da:08:4d:08:
4d:11:d9:16:8a:1b:94:50:f6:fe:f0:e4:38:7c:b1:
c6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D1:8C:5C:56:51:04:18:0B:11:6B:31:D4:EC:43:F8:80:39:F4:AD
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3132382e302f31382d3138203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.0.128.0/18
Signature Algorithm: sha256WithRSAEncryption
46:ca:24:a5:f4:2b:88:22:b6:96:84:3b:df:0f:2f:74:f0:aa:
fe:58:50:5a:88:1d:83:54:d5:ac:00:27:28:50:a6:53:84:f9:
6f:96:63:3b:7d:a3:32:b6:08:5b:d0:33:99:d3:1c:9f:9a:a7:
48:59:e9:54:9d:36:1b:0a:0b:5d:cc:8d:89:28:a3:85:7f:db:
03:27:95:39:fd:27:fc:c7:9f:e5:e2:77:da:54:ed:8d:ea:d3:
54:f7:7b:27:0d:e4:c2:cd:dc:08:ec:c8:89:24:62:e3:26:a0:
2e:d5:15:c9:27:13:74:bc:69:6c:73:e5:ee:3a:f3:77:1d:ee:
49:56:ae:e8:03:cb:bc:bc:b0:1d:de:4f:67:c2:b0:9e:53:66:
bf:22:b6:bf:67:32:4f:2c:f2:57:0e:8f:b8:f9:5a:bd:12:c8:
74:11:d4:41:26:35:6b:df:7d:a0:ae:8c:83:82:ef:b5:19:a3:
54:63:b2:f3:0f:b2:4e:d8:32:87:27:72:bb:88:1d:22:98:e4:
5d:bb:89:55:86:7b:31:75:21:97:76:2b:1b:20:38:69:ba:cf:
23:fd:3f:d1:15:0b:a4:51:69:26:77:d8:18:f8:f6:1f:3d:9d:
b0:58:68:c1:9a:70:8e:f5:a2:1c:4c:54:d2:52:d5:c1:44:89:
df:e3:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org