Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e39362e302f32312d3231203d3e203233363933.roa
File: 3138322e302e39362e302f32312d3231203d3e203233363933.roa (raw, json)
Hash identifier: uvHyzj0URvkug6Sb8lwFeiOmAfAUwjm22uauUXcsmcc=
Subject key identifier: B7:51:94:E3:2A:17:9E:54:3D:78:FC:C0:9F:C3:42:D3:CE:71:D8:88
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 6315525418394E00F400B4DA688263AA1A3D4A85
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e39362e302f32312d3231203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:54:33 +0000
ROA not before: Mon 11 Nov 2024 03:49:33 +0000
ROA not after: Mon 10 Nov 2025 03:54:33 +0000
asID: 23693
IP address blocks: 182.0.96.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:15:52:54:18:39:4e:00:f4:00:b4:da:68:82:63:aa:1a:3d:4a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:49:33 2024 GMT
Not After : Nov 10 03:54:33 2025 GMT
Subject: CN=B75194E32A179E543D78FCC09FC342D3CE71D888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:7c:4e:e7:e7:06:7a:b8:23:34:67:ea:d2:
a4:06:ab:23:69:71:a4:e6:81:a0:a3:c9:b7:6a:c2:
62:c8:7f:c9:f3:36:f2:dd:74:78:67:79:33:ba:00:
af:a1:3c:c7:fb:c6:5e:e7:a3:92:54:7f:12:2d:1f:
c8:b9:c4:40:ea:1b:08:cb:7b:7b:43:79:88:7f:b9:
4c:3e:e2:b2:de:5c:30:2f:21:35:6d:02:70:46:71:
88:51:1f:e1:8c:24:83:7d:d7:90:6b:f7:be:c0:70:
50:d3:9b:13:0f:3d:7e:63:db:92:28:64:e9:cf:40:
71:5e:c0:6f:dd:70:94:28:29:77:ed:1e:d8:60:29:
ff:fd:27:81:ee:ef:5d:b9:cc:4c:b0:20:74:ae:6b:
30:b5:5f:62:ed:21:cc:c6:05:02:26:5e:43:33:8d:
0b:46:df:94:9b:d2:bb:9e:5f:65:25:47:52:bf:60:
dd:c6:96:36:cb:9e:29:99:4c:4c:a3:2a:48:b5:63:
7a:27:0f:19:f4:2b:12:08:ef:ed:d0:84:97:0f:82:
03:c7:e0:8a:79:1e:1b:f0:6c:e0:bd:5e:38:60:53:
04:19:a5:5a:ff:7c:84:ed:b2:d1:38:9c:c7:77:57:
c5:03:24:28:46:97:96:2f:24:53:01:58:61:d5:d0:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:51:94:E3:2A:17:9E:54:3D:78:FC:C0:9F:C3:42:D3:CE:71:D8:88
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e302e39362e302f32312d3231203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.0.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:9a:cb:f4:94:d5:86:6b:7a:ad:91:74:8c:4d:a8:ad:58:f6:
b5:7a:e4:9f:ed:02:f6:b2:dc:88:03:ae:c6:12:33:94:d4:e7:
08:9c:4d:db:d2:e0:0a:1c:ed:3d:5b:88:e7:7e:90:9e:c7:b4:
fb:b0:16:ed:4a:70:3c:2f:27:7e:6e:ac:b2:b3:a5:b0:f8:74:
e4:88:22:e0:62:47:53:ff:8e:fa:97:6f:b4:f8:5e:82:13:1d:
bd:3b:fc:7e:b6:60:50:a5:55:3c:b5:c5:10:84:0e:a5:28:65:
a4:ac:f0:56:69:87:8f:b4:83:d5:c9:22:96:ff:3e:d0:5a:1c:
ba:06:31:02:f8:26:2d:3e:5b:0e:46:2f:be:55:a8:bf:64:7a:
e0:ef:c5:c5:04:30:18:4f:ac:51:e2:07:c4:d5:fa:34:4a:4f:
ca:2a:c6:dd:9f:e4:00:da:77:dc:c7:4b:7f:56:25:3f:40:dd:
57:18:47:7f:fb:8f:07:8a:12:2c:75:a4:f7:cb:cc:90:34:e4:
5d:38:bd:b7:02:33:d4:28:b0:fd:5c:37:aa:0d:55:04:4d:c1:
94:93:ec:89:e4:98:44:60:ec:2d:1f:36:b0:18:96:57:d6:7c:
48:6e:37:9a:f9:e9:96:e1:ea:03:10:44:52:36:f9:2a:a9:f6:
0f:3f:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org