Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e312e39362e302f31392d3139203d3e203233363933.roa
File: 3138322e312e39362e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: wG93rO7mA3cPSfgbjfU1vCON+HTRDXIPVKb/heoPI3U=
Subject key identifier: 35:A2:95:66:0B:23:CB:7D:71:B6:ED:57:EB:A0:77:6C:0E:98:BB:CA
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 5594BE554AA12AE7105D909F6714B2B01C8BB886
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e312e39362e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:56:28 +0000
ROA not before: Mon 11 Nov 2024 03:51:28 +0000
ROA not after: Mon 10 Nov 2025 03:56:28 +0000
asID: 23693
IP address blocks: 182.1.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:94:be:55:4a:a1:2a:e7:10:5d:90:9f:67:14:b2:b0:1c:8b:b8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:51:28 2024 GMT
Not After : Nov 10 03:56:28 2025 GMT
Subject: CN=35A295660B23CB7D71B6ED57EBA0776C0E98BBCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:35:d1:95:62:04:d8:6c:af:cf:3d:4c:26:
65:82:59:9b:a3:00:3a:35:bb:02:19:8c:a4:5a:d2:
08:67:d7:2d:1d:77:fe:1a:fe:65:eb:e4:43:c3:9c:
90:81:cc:70:4f:bc:c2:0b:96:13:05:2a:5e:7f:2c:
f0:a8:e9:a5:0b:e1:c9:60:50:f1:9c:ba:b2:72:ef:
47:d3:e9:98:a5:77:29:b3:42:a4:8b:94:79:46:72:
46:ce:e4:19:e8:01:72:af:53:ea:80:36:14:89:cf:
dc:2e:f0:8d:8c:0d:1a:b7:d3:03:4b:ca:ac:a6:69:
46:aa:0e:9e:11:f6:85:f7:ef:97:2b:b6:a9:58:df:
47:c8:c7:a3:67:f7:42:8d:a4:6d:52:70:ec:f1:92:
01:a9:3f:3a:46:dd:a7:cb:ae:d3:0b:fd:06:d8:17:
8d:0e:0c:99:fc:d9:be:23:80:fa:d5:17:8e:b0:c2:
da:13:f7:f1:f9:df:47:24:0b:f1:4f:5d:97:78:4b:
c0:ce:4c:32:3e:24:d3:f4:9d:fe:c0:df:bc:f8:6b:
f0:24:ac:41:4d:3d:20:8e:c9:61:c6:6a:fb:b9:bf:
cf:46:ca:b4:42:c0:a0:bd:51:5a:26:d2:c2:b5:6c:
91:5a:7b:f7:43:22:7c:2c:25:d1:86:72:21:db:46:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A2:95:66:0B:23:CB:7D:71:B6:ED:57:EB:A0:77:6C:0E:98:BB:CA
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e312e39362e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.1.96.0/19
Signature Algorithm: sha256WithRSAEncryption
12:9f:41:21:7f:8c:05:b5:ec:58:af:83:f3:85:05:55:db:d7:
9f:88:44:32:d7:2e:ed:10:ee:d6:a7:54:4c:a4:6a:ae:25:ae:
32:47:07:07:7f:76:ee:39:24:81:3d:e9:ea:78:5a:99:58:df:
72:e2:5f:59:50:73:99:e6:a1:fa:2e:d0:8e:e3:a7:e9:39:aa:
a5:d8:a9:bb:bd:ac:d8:e7:d0:a8:e8:d3:3c:a5:69:63:4c:0f:
d7:b3:35:f0:e7:42:b8:98:c5:e6:cf:ad:35:12:da:1a:f9:6a:
6e:d6:aa:1a:9e:2f:15:01:d1:c1:bd:3d:78:92:c9:e9:83:dd:
cf:2c:f4:3e:b9:97:4c:60:f5:6f:07:a9:b2:cd:aa:37:3e:4c:
67:b0:f6:2d:d1:8d:a2:d2:11:45:fc:c2:f9:ae:c8:0a:2f:c8:
3f:06:f0:89:20:5c:a7:2c:17:2d:a8:84:75:d2:c0:e3:5e:d4:
0e:9c:0b:53:d3:17:a5:2c:4d:9f:91:55:06:4f:a7:63:8c:2d:
94:3b:89:d4:d1:2f:9c:59:ce:7f:0d:2e:70:c7:09:e6:24:3e:
01:ea:1e:d5:02:7b:3d:11:1e:a9:7e:a8:61:2a:a1:8f:dd:33:
ce:6e:21:01:c8:27:a4:1c:2b:27:20:af:05:da:3a:3f:cd:ba:
56:21:f8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org