Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e322e3136302e302f32302d3230203d3e203233363933.roa
File: 3138322e322e3136302e302f32302d3230203d3e203233363933.roa (raw, json)
Hash identifier: r7PqaFlP36iOmp2oN5IxP7gcKG1oLwjW5bJZirbTaJM=
Subject key identifier: 47:BA:5A:E1:94:10:71:D6:4E:C9:AC:F8:B5:39:07:97:06:3C:0E:5C
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 66C99766786EF9FEB3A352587759DDE4034D3E1F
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e322e3136302e302f32302d3230203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:57:33 +0000
ROA not before: Mon 11 Nov 2024 03:52:33 +0000
ROA not after: Mon 10 Nov 2025 03:57:33 +0000
asID: 23693
IP address blocks: 182.2.160.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c9:97:66:78:6e:f9:fe:b3:a3:52:58:77:59:dd:e4:03:4d:3e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:52:33 2024 GMT
Not After : Nov 10 03:57:33 2025 GMT
Subject: CN=47BA5AE1941071D64EC9ACF8B5390797063C0E5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:f3:81:de:0e:36:d7:1a:1c:e8:61:76:5f:
e2:6b:23:e9:bb:98:94:e9:a3:6f:96:31:93:73:17:
6a:5f:73:6c:ec:a7:5c:f8:23:b1:2b:08:32:cb:24:
18:94:4a:a9:87:fa:d9:16:d6:ca:7a:60:fb:04:47:
71:ba:2d:45:64:35:a6:4e:01:9d:19:a1:a9:0e:a7:
b1:aa:0f:5c:2c:24:42:44:37:71:85:15:b9:d6:07:
20:bd:94:b1:3c:fd:e6:58:bb:54:f1:53:54:37:6e:
cf:25:6f:f7:64:35:dc:af:35:1d:36:8d:7d:7b:97:
64:f7:38:ad:a9:29:a4:83:7d:18:de:f5:6f:74:d4:
21:68:30:eb:97:6a:14:d5:30:89:ee:7d:f3:55:0a:
d7:db:55:5a:89:84:80:5f:8b:77:c0:f1:ae:05:b6:
1f:f5:5f:5b:1c:5e:55:9e:71:60:bb:cb:55:bf:a2:
71:46:e9:1a:ad:32:fb:d1:5a:cc:38:65:d1:c0:10:
c8:e9:1f:24:ec:84:c1:69:35:38:74:bd:e7:cd:eb:
cd:50:a2:ac:a6:14:84:10:93:13:78:e6:43:c6:38:
37:e0:ed:39:2b:20:f4:3b:37:3d:3b:be:28:76:6e:
ed:c6:fe:72:31:20:89:c6:6d:23:0f:5c:ef:bc:61:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BA:5A:E1:94:10:71:D6:4E:C9:AC:F8:B5:39:07:97:06:3C:0E:5C
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e322e3136302e302f32302d3230203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.2.160.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:a6:6a:df:1d:4a:25:48:f6:09:93:5e:e1:cb:35:a2:6c:c1:
c3:8a:24:51:95:80:f3:f9:0f:da:6b:7c:8b:d6:28:f7:3a:b4:
1f:57:0d:2e:78:91:96:13:a5:75:8d:3c:53:df:89:c8:94:67:
67:f7:8d:42:3a:c3:e7:d0:60:e6:b3:58:04:c3:d4:9e:95:7d:
fa:1d:36:45:5c:04:3a:3d:ad:80:07:6c:5e:b2:08:50:dd:11:
3f:80:87:2c:dd:25:e6:33:08:db:2d:2d:84:14:70:5f:1f:1a:
66:41:4b:08:85:2a:bf:0e:9d:45:b2:e6:a1:5c:8d:14:df:fe:
e0:b5:7a:27:0c:5c:5d:f4:96:18:5b:00:63:b7:b8:2d:a7:50:
40:97:5f:cc:0b:4d:6b:bf:5e:12:61:76:66:6a:8b:61:78:ff:
14:c8:ed:17:07:ae:71:ca:44:8f:e1:05:32:49:43:d4:a7:a1:
0b:cc:85:ba:6f:5b:b3:63:d1:41:87:5b:07:c0:24:57:f4:12:
55:0b:4f:1e:4e:21:9e:91:f4:4a:84:06:31:ac:04:07:79:aa:
cf:68:25:a4:2b:62:b0:d9:d0:71:64:12:65:2f:ac:70:84:22:
94:73:68:bf:32:9a:af:9c:92:35:e8:31:4a:5c:67:1b:9c:e9:
29:82:58:18
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZsmXZnhu+f6zo1JYd1nd5ANNPh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2
QjlDOUYzQTAeFw0yNDExMTEwMzUyMzNaFw0yNTExMTAwMzU3MzNaMDMxMTAvBgNV
BAMTKDQ3QkE1QUUxOTQxMDcxRDY0RUM5QUNGOEI1MzkwNzk3MDYzQzBFNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKV/OB3g421xoc6GF2X+JrI+m7
mJTpo2+WMZNzF2pfc2zsp1z4I7ErCDLLJBiUSqmH+tkW1sp6YPsER3G6LUVkNaZO
AZ0ZoakOp7GqD1wsJEJEN3GFFbnWByC9lLE8/eZYu1TxU1Q3bs8lb/dkNdyvNR02
jX17l2T3OK2pKaSDfRje9W901CFoMOuXahTVMInuffNVCtfbVVqJhIBfi3fA8a4F
th/1X1scXlWecWC7y1W/onFG6RqtMvvRWsw4ZdHAEMjpHyTshMFpNTh0vefN681Q
oqymFIQQkxN45kPGODfg7TkrIPQ7Nz07vih2bu3G/nIxIInGbSMPXO+8YRxlAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUR7pa4ZQQcdZOyaz4tTkHlwY8DlwwHwYDVR0j
BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz
QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD
OUYzQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjhmMjRlLWRjN2YtNDU2Mi1h
NTFkLWUyZTM4YzM2NzdkMS8wLzMxMzgzMjJlMzIyZTMxMzYzMDJlMzAyZjMyMzAy
ZDMyMzAyMDNkM2UyMDMyMzMzNjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS2AqAwDQYJKoZIhvcN
AQELBQADggEBABqmat8dSiVI9gmTXuHLNaJswcOKJFGVgPP5D9prfIvWKPc6tB9X
DS54kZYTpXWNPFPficiUZ2f3jUI6w+fQYOazWATD1J6VffodNkVcBDo9rYAHbF6y
CFDdET+AhyzdJeYzCNstLYQUcF8fGmZBSwiFKr8OnUWy5qFcjRTf/uC1eicMXF30
lhhbAGO3uC2nUECXX8wLTWu/XhJhdmZqi2F4/xTI7RcHrnHKRI/hBTJJQ9SnoQvM
hbpvW7Nj0UGHWwfAJFf0ElULTx5OIZ6R9EqEBjGsBAd5qs9oJaQrYrDZ0HFkEmUv
rHCEIpRzaL8ymq+ckjXoMUpcZxuc6SmCWBg=
-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org