Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3136302e302f31392d3139203d3e203233363933.roa
File: 3138322e302e3136302e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: f21mQYFqJWHk5PaGnSrl4OoPx1mT1fdd7TOQaLhCdNM=
Subject key identifier: CB:EB:24:9D:01:8F:7A:6D:A6:F0:A3:C7:74:E6:27:23:04:4C:E7:17
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 632A972149B2B47FEB2350B2E3C8394224700C78
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3136302e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:55:09 +0000
ROA not before: Mon 11 Nov 2024 03:50:09 +0000
ROA not after: Mon 10 Nov 2025 03:55:09 +0000
asID: 23693
IP address blocks: 182.0.160.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2a:97:21:49:b2:b4:7f:eb:23:50:b2:e3:c8:39:42:24:70:0c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:50:09 2024 GMT
Not After : Nov 10 03:55:09 2025 GMT
Subject: CN=CBEB249D018F7A6DA6F0A3C774E62723044CE717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:f2:09:97:bd:41:ba:e3:4e:62:c1:82:25:
7f:d7:ce:8c:4a:81:5f:d2:28:51:df:f0:ba:5f:58:
95:a6:9c:1a:48:20:86:d9:04:3e:31:d2:01:e7:af:
d6:15:b0:1c:4c:3c:d3:a1:7f:09:14:fd:ad:3c:fe:
4a:1e:a7:5d:42:75:28:6b:24:79:80:8e:2c:b4:c9:
5f:18:c9:be:09:a9:b3:e4:20:76:c7:17:1a:dd:26:
6a:06:16:29:38:e6:f7:cf:c4:b9:83:4b:4c:30:9d:
d9:74:55:e4:57:18:c4:91:1c:b2:24:6a:a5:08:66:
a9:78:3c:52:79:81:b8:91:32:7f:21:a7:41:6d:9a:
e8:59:8a:ba:d4:9b:08:7a:c4:dd:ae:ec:c1:4f:d4:
7e:68:c1:6d:20:e5:b5:e8:ad:af:95:b0:74:f2:17:
9d:16:a4:3f:58:94:ee:3d:1d:b6:97:ad:6f:3c:2d:
a9:ae:f3:e2:e7:d4:f4:d5:87:fc:9e:1e:90:b6:1b:
55:a7:be:e4:a4:68:ed:2b:83:b8:8a:21:35:d9:b4:
ee:84:40:68:b8:40:08:cf:da:5f:08:f6:48:53:cd:
64:d9:6f:7c:28:ff:d5:fd:4d:ac:71:67:f2:bc:4c:
14:3c:33:bb:14:ef:28:82:c0:a8:67:9c:90:a2:9f:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EB:24:9D:01:8F:7A:6D:A6:F0:A3:C7:74:E6:27:23:04:4C:E7:17
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e3136302e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.0.160.0/19
Signature Algorithm: sha256WithRSAEncryption
55:66:0d:42:b2:1c:1d:97:ae:b8:52:d0:f8:97:3a:78:6f:dc:
44:69:e5:82:e3:5a:f7:f4:85:73:78:9b:8a:bc:a5:62:33:fc:
24:31:32:0d:18:84:26:09:5a:ea:4b:ca:84:39:98:9c:ba:6b:
27:3f:6c:fc:f4:d3:23:3c:4f:9a:22:b6:3f:42:b9:d8:0a:ec:
48:03:86:2d:e9:ac:36:2a:26:aa:e5:84:56:d3:54:3b:ea:85:
d7:a5:90:43:0c:68:a2:30:fa:68:1e:d1:fc:ec:9f:52:0c:c8:
6c:78:16:66:be:05:bd:b1:9f:37:a9:74:90:ef:b3:da:4a:8f:
61:8d:16:b0:6c:47:56:ff:3d:6c:e1:be:0a:e0:d0:9e:99:15:
12:d7:f2:68:44:56:16:1d:1d:bf:e5:7e:b6:fe:7a:b7:0a:7e:
50:e5:77:c4:04:54:ed:73:9b:4d:d9:d5:0e:35:9c:1b:b7:d4:
a6:90:e9:91:f3:0d:e9:de:53:1e:8d:0a:7e:dc:94:3e:e3:e2:
d8:b9:21:e4:9c:12:db:72:ef:38:12:4d:b6:35:8a:31:ec:b7:
c9:8c:9d:2d:76:4f:ca:d0:f0:1d:74:0f:2a:c1:59:dc:4e:b9:
51:a0:24:c6:ab:7a:27:2f:11:f2:2c:45:8e:96:80:d3:1d:37:
63:88:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org