Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e312e36342e302f31392d3139203d3e203233363933.roa
File: 3138322e312e36342e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: miEyPLaCNK3x8hSYaXKM/fLN7u55k+Sik1hh/F8o7ZI=
Subject key identifier: B7:CB:3D:67:3B:5D:B8:CF:CC:63:46:56:FE:56:76:E6:81:30:E6:5B
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 3FD99A370A8E04B35C0ED8C68F4D47C30324C900
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e312e36342e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:56:09 +0000
ROA not before: Mon 11 Nov 2024 03:51:09 +0000
ROA not after: Mon 10 Nov 2025 03:56:09 +0000
asID: 23693
IP address blocks: 182.1.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d9:9a:37:0a:8e:04:b3:5c:0e:d8:c6:8f:4d:47:c3:03:24:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:51:09 2024 GMT
Not After : Nov 10 03:56:09 2025 GMT
Subject: CN=B7CB3D673B5DB8CFCC634656FE5676E68130E65B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:0e:74:f6:0c:bf:dc:30:41:c7:83:1b:93:
8e:80:f2:df:2d:b5:40:b5:ea:a3:17:b2:16:9d:ba:
35:16:a4:1d:40:e6:7e:da:30:72:8b:dd:9b:8e:0d:
8c:9b:c7:65:c7:ec:13:87:8f:d7:fc:ea:79:05:b3:
0a:74:a2:91:88:6d:03:35:88:7c:b3:56:9f:55:1c:
39:08:ba:10:70:a0:cd:44:1e:61:06:78:75:ac:87:
07:b3:42:76:a0:b9:32:fc:93:13:5d:25:43:24:8f:
88:8f:89:2a:06:a9:83:b5:4f:94:ef:6c:23:b1:6c:
e2:dc:e7:db:39:4b:7b:c2:07:1b:cc:8b:a9:87:b0:
44:fc:9b:76:90:2e:65:87:ea:fc:ad:8b:dd:f1:6c:
b0:77:99:40:30:0d:db:c6:b0:4f:7b:55:da:fe:69:
30:27:fc:26:f1:1a:ab:7c:38:c7:8f:f0:ce:ea:51:
41:6d:2e:62:67:f9:0a:98:58:cb:94:9d:4f:af:8e:
9b:79:a7:ff:9f:ac:6e:60:10:a3:33:98:66:bc:56:
ff:19:99:e1:af:b5:52:20:f6:cb:e0:80:1e:94:2f:
61:ed:b7:16:07:0e:88:46:d3:4b:31:68:b7:45:8e:
40:13:73:43:12:c4:ef:74:8c:a1:9e:bc:31:a6:0c:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:3D:67:3B:5D:B8:CF:CC:63:46:56:FE:56:76:E6:81:30:E6:5B
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e312e36342e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.1.64.0/19
Signature Algorithm: sha256WithRSAEncryption
03:30:25:7d:2d:9c:cd:36:f4:7a:0d:15:2c:39:d4:4a:0b:12:
a2:84:6d:33:53:52:97:75:f0:19:0b:ed:6a:3e:0e:5c:e8:89:
f0:cf:0b:d5:c5:a7:ce:4d:90:f8:0b:0a:20:7d:2d:75:26:48:
e7:5b:ed:24:a9:2e:db:cf:48:9a:00:ee:8b:50:0c:67:7a:4d:
ad:e4:de:d2:1a:3a:08:68:da:a9:05:1a:f9:6d:5e:a1:6c:71:
cf:b7:51:1d:6a:81:c1:51:e3:13:13:04:b9:df:05:d7:72:19:
5e:ac:a5:d4:4f:3c:6c:2a:d4:86:ec:3d:dd:66:65:2c:a1:b9:
90:88:05:99:0d:76:f1:b7:a0:7a:5a:bb:31:26:39:bc:a2:35:
18:c8:a0:82:cd:24:6d:3e:75:28:c7:34:d0:d0:46:12:af:2a:
a4:f1:d6:f6:12:81:47:e7:06:39:0a:f7:a7:24:90:a0:88:81:
2e:77:ac:ae:b2:80:8a:bf:30:8d:e8:63:c3:3f:dc:62:e0:ae:
e9:40:02:27:dc:32:8a:2e:c3:2d:04:31:09:5b:3f:7c:83:86:
17:8c:d8:d2:ae:b8:69:c9:9f:04:6f:d1:09:cb:dd:19:a0:e6:
9c:36:0d:0e:a3:ab:2f:aa:68:d6:92:45:40:01:47:5a:85:8c:
3d:87:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org