Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e322e3132382e302f31392d3139203d3e203233363933.roa
File: 3138322e322e3132382e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: psin5mSSPr1Cc/0k6DihKoahMXQOIWhoH8fG+egcKk0=
Subject key identifier: 40:5B:7A:4F:5D:B8:E0:41:33:A9:C6:4D:0E:74:64:24:66:AC:7B:0B
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 067C421AC86A69BDDEA2C2389F186FB58662D4D9
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e322e3132382e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:57:17 +0000
ROA not before: Mon 11 Nov 2024 03:52:17 +0000
ROA not after: Mon 10 Nov 2025 03:57:17 +0000
asID: 23693
IP address blocks: 182.2.128.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7c:42:1a:c8:6a:69:bd:de:a2:c2:38:9f:18:6f:b5:86:62:d4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:52:17 2024 GMT
Not After : Nov 10 03:57:17 2025 GMT
Subject: CN=405B7A4F5DB8E04133A9C64D0E74642466AC7B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:ac:9b:e1:47:a0:a6:1f:40:ee:69:41:be:
ec:8f:30:d5:0c:26:3d:22:6e:50:32:eb:1a:b9:a6:
4c:1d:f7:d1:e2:a4:05:e8:0f:be:b7:37:5f:f0:5f:
0a:82:12:47:72:82:15:b0:c3:f3:d9:84:74:3f:1c:
06:9e:79:28:54:24:4f:2b:a8:f9:d5:35:65:e3:53:
08:93:5c:08:9a:f3:df:e5:3e:30:17:9a:b6:62:70:
c6:a0:e8:76:b2:9d:c8:f9:f2:f7:27:ac:18:96:b0:
36:d6:cc:59:af:7e:fc:a9:37:95:b4:cf:35:e1:d3:
72:03:c4:03:dd:fe:20:74:f6:60:c5:ed:76:48:aa:
ae:0d:a0:a5:66:65:7e:f2:cb:41:be:52:dc:32:d1:
73:0d:4b:a4:a9:e0:8a:a6:a8:ae:9d:10:19:4a:a1:
e6:05:19:8a:e1:e0:a7:8d:f6:59:5c:0f:46:9d:d0:
07:f6:18:d4:2a:6f:38:a8:93:0b:0e:fd:e0:67:81:
be:4e:6c:93:29:3d:8c:1a:8a:88:74:80:8d:ac:40:
1f:58:79:e3:51:09:fe:2f:eb:4c:a2:e2:8d:b4:46:
07:88:5c:41:ca:df:b4:86:f1:6d:13:8b:d7:66:2e:
be:5f:a6:2e:08:d3:3b:5c:83:cd:7c:54:15:2a:aa:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:7A:4F:5D:B8:E0:41:33:A9:C6:4D:0E:74:64:24:66:AC:7B:0B
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e322e3132382e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.2.128.0/19
Signature Algorithm: sha256WithRSAEncryption
91:55:60:12:18:8e:b6:cb:37:33:75:60:96:80:6a:79:35:8b:
64:3e:c4:9a:8e:10:7a:66:b2:e1:68:a7:e0:cc:5d:8d:1a:5b:
64:7c:12:b2:48:2e:a7:57:02:c8:b4:b8:88:a6:44:d1:9d:99:
5f:0d:3d:13:eb:b8:74:2b:e9:38:0a:86:4a:7c:a5:16:59:da:
0a:8b:10:c7:5c:76:de:32:64:b4:36:45:06:23:bd:ce:30:2f:
33:ad:a3:d2:2a:76:e8:87:94:e0:93:4f:23:6d:74:0f:5e:45:
cd:f7:26:1a:27:6e:bc:bb:32:0b:94:07:77:19:5f:c5:d1:46:
dc:e7:10:a7:95:40:d3:9e:d9:58:80:2b:ed:f0:bd:8e:83:34:
40:b4:dd:ed:e8:52:d3:c2:27:2b:d3:74:91:fc:36:b1:03:15:
7f:56:ef:5f:51:09:28:52:61:d1:0f:2c:52:ff:1f:c4:76:b1:
20:cc:b1:0c:34:8d:af:82:78:5c:f4:59:c9:2c:e0:02:d8:40:
4e:4c:3a:d6:91:9b:99:a2:31:e4:52:cf:2f:a7:4e:94:c9:a1:
72:ee:31:dc:da:7d:cc:c9:03:e2:c2:8b:7d:6e:0e:2c:e7:ad:
81:e6:e8:80:72:d6:75:8c:cb:a9:ef:0f:1b:e3:93:b9:ab:3d:
ee:29:6d:e6
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUBnxCGshqab3eosI4nxhvtYZi1NkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2
QjlDOUYzQTAeFw0yNDExMTEwMzUyMTdaFw0yNTExMTAwMzU3MTdaMDMxMTAvBgNV
BAMTKDQwNUI3QTRGNURCOEUwNDEzM0E5QzY0RDBFNzQ2NDI0NjZBQzdCMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTayb4Uegph9A7mlBvuyPMNUM
Jj0iblAy6xq5pkwd99HipAXoD763N1/wXwqCEkdyghWww/PZhHQ/HAaeeShUJE8r
qPnVNWXjUwiTXAia89/lPjAXmrZicMag6Hayncj58vcnrBiWsDbWzFmvfvypN5W0
zzXh03IDxAPd/iB09mDF7XZIqq4NoKVmZX7yy0G+Utwy0XMNS6Sp4IqmqK6dEBlK
oeYFGYrh4KeN9llcD0ad0Af2GNQqbziokwsO/eBngb5ObJMpPYwaioh0gI2sQB9Y
eeNRCf4v60yi4o20RgeIXEHK37SG8W0Ti9dmLr5fpi4I0ztcg818VBUqqi/dAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUQFt6T1244EEzqcZNDnRkJGasewswHwYDVR0j
BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz
QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD
OUYzQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjhmMjRlLWRjN2YtNDU2Mi1h
NTFkLWUyZTM4YzM2NzdkMS8wLzMxMzgzMjJlMzIyZTMxMzIzODJlMzAyZjMxMzky
ZDMxMzkyMDNkM2UyMDMyMzMzNjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW2AoAwDQYJKoZIhvcN
AQELBQADggEBAJFVYBIYjrbLNzN1YJaAank1i2Q+xJqOEHpmsuFop+DMXY0aW2R8
ErJILqdXAsi0uIimRNGdmV8NPRPruHQr6TgKhkp8pRZZ2gqLEMdcdt4yZLQ2RQYj
vc4wLzOto9IqduiHlOCTTyNtdA9eRc33Jhonbry7MguUB3cZX8XRRtznEKeVQNOe
2ViAK+3wvY6DNEC03e3oUtPCJyvTdJH8NrEDFX9W719RCShSYdEPLFL/H8R2sSDM
sQw0ja+CeFz0Wcks4ALYQE5MOtaRm5miMeRSzy+nTpTJoXLuMdzafczJA+LCi31u
DiznrYHm6IBy1nWMy6nvDxvjk7mrPe4pbeY=
-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org