Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e322e36342e302f31392d3139203d3e203233363933.roa
File: 3138322e322e36342e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: +xTrlLXFXqzpqDlYJX63LrgSH8JKtE3KPDfrj+YBB88=
Subject key identifier: C2:4E:40:63:1A:40:CA:E0:19:C7:60:F0:B7:8D:5C:FA:4B:98:D7:08
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 4EEEEC94B8E09C0842931A927AD058A17A28DA7A
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e322e36342e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:57:00 +0000
ROA not before: Mon 11 Nov 2024 03:52:00 +0000
ROA not after: Mon 10 Nov 2025 03:57:00 +0000
asID: 23693
IP address blocks: 182.2.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 13:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ee:ec:94:b8:e0:9c:08:42:93:1a:92:7a:d0:58:a1:7a:28:da:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:52:00 2024 GMT
Not After : Nov 10 03:57:00 2025 GMT
Subject: CN=C24E40631A40CAE019C760F0B78D5CFA4B98D708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:a8:9f:9b:29:42:a2:ee:29:3d:1c:66:fc:
15:c0:d1:2d:42:67:63:c4:84:10:d6:92:d5:03:ab:
c6:03:19:30:e6:4a:37:d5:a4:cd:74:69:bf:70:e0:
a0:27:ae:4d:ac:a5:7c:0c:d1:25:8f:ac:4a:ee:a2:
0f:90:74:ea:02:a9:c2:e6:59:62:79:78:e8:7d:9b:
21:76:27:cd:19:4a:ff:4f:05:51:4f:30:ee:5b:f3:
b9:06:4b:8a:7d:1f:96:85:5e:75:39:bf:6f:3c:f6:
a4:5f:56:02:49:28:ec:cd:94:f3:cb:f4:9d:de:f1:
12:e0:31:6c:14:2f:70:bc:8a:25:48:8d:ea:93:91:
23:fe:19:57:7f:ae:f2:da:f7:38:11:39:05:3f:25:
f4:a2:09:56:a2:e9:6d:8c:22:d5:bc:e3:81:62:c2:
7e:a0:5a:5f:14:1d:ff:9a:61:55:00:b4:d2:67:9b:
fb:1c:bc:09:bf:27:96:36:d9:0b:a2:54:af:c0:19:
79:6b:ec:c2:98:36:bc:cc:92:67:e2:7f:e8:50:5d:
cd:f4:99:fb:f2:39:fa:cc:5b:20:e7:b1:76:f4:ea:
18:2d:e7:09:42:fd:d1:e1:c1:f3:86:cf:38:c3:f8:
6d:67:eb:1a:1e:a9:8e:d6:6c:8c:76:27:e0:8c:bc:
da:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:40:63:1A:40:CA:E0:19:C7:60:F0:B7:8D:5C:FA:4B:98:D7:08
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e322e36342e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.2.64.0/19
Signature Algorithm: sha256WithRSAEncryption
09:6b:cd:3d:ea:be:7a:43:ae:c9:2b:4f:28:96:cd:1b:7a:8a:
76:77:9b:b1:71:57:75:5f:ad:77:87:e1:72:33:e8:c6:40:2d:
2e:ce:8d:84:81:ff:72:86:b7:b0:d1:43:60:5e:23:0e:10:a6:
1a:23:ab:c9:15:f5:d8:8b:82:0c:ae:23:a3:05:0e:30:b7:a6:
aa:59:52:2f:8a:d1:08:8b:a3:cb:26:e0:93:71:75:37:5c:98:
0f:26:e6:44:da:2c:08:0e:c6:44:80:1b:e1:02:04:00:d3:7e:
34:c1:ce:e3:07:dc:c5:eb:55:ac:d2:1a:bd:23:33:f5:db:a8:
49:5b:8e:3a:f2:d0:98:08:5b:10:78:d4:25:d9:de:e2:a3:59:
db:7b:2d:91:a5:c2:4e:41:60:eb:c5:61:d2:4a:d2:83:a6:41:
83:aa:e2:ff:2e:cc:d3:bb:1e:ff:df:45:75:3a:79:f6:38:de:
b5:28:35:70:09:a4:c4:c6:b9:58:14:6b:9d:5f:fc:18:71:b6:
62:55:c4:9a:d1:88:e0:6b:54:d7:a2:bc:57:d1:39:3b:e5:d6:
84:46:8e:8b:5f:31:31:18:8a:3b:bd:38:2f:42:f3:1d:a4:b7:
60:bd:98:49:eb:9a:38:a0:39:72:e4:db:6b:57:e0:32:52:c0:
73:63:41:73
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUTu7slLjgnAhCkxqSetBYoXoo2nowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2
QjlDOUYzQTAeFw0yNDExMTEwMzUyMDBaFw0yNTExMTAwMzU3MDBaMDMxMTAvBgNV
BAMTKEMyNEU0MDYzMUE0MENBRTAxOUM3NjBGMEI3OEQ1Q0ZBNEI5OEQ3MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVqifmylCou4pPRxm/BXA0S1C
Z2PEhBDWktUDq8YDGTDmSjfVpM10ab9w4KAnrk2spXwM0SWPrEruog+QdOoCqcLm
WWJ5eOh9myF2J80ZSv9PBVFPMO5b87kGS4p9H5aFXnU5v2889qRfVgJJKOzNlPPL
9J3e8RLgMWwUL3C8iiVIjeqTkSP+GVd/rvLa9zgROQU/JfSiCVai6W2MItW844Fi
wn6gWl8UHf+aYVUAtNJnm/scvAm/J5Y22QuiVK/AGXlr7MKYNrzMkmfif+hQXc30
mfvyOfrMWyDnsXb06hgt5wlC/dHhwfOGzzjD+G1n6xoeqY7WbIx2J+CMvNodAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUwk5AYxpAyuAZx2Dwt41c+kuY1wgwHwYDVR0j
BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz
QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD
OUYzQS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyOGYyNGUtZGM3Zi00NTYyLWE1
MWQtZTJlMzhjMzY3N2QxLzAvMzEzODMyMmUzMjJlMzYzNDJlMzAyZjMxMzkyZDMx
MzkyMDNkM2UyMDMyMzMzNjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW2AkAwDQYJKoZIhvcNAQEL
BQADggEBAAlrzT3qvnpDrskrTyiWzRt6inZ3m7FxV3VfrXeH4XIz6MZALS7OjYSB
/3KGt7DRQ2BeIw4Qphojq8kV9diLggyuI6MFDjC3pqpZUi+K0QiLo8sm4JNxdTdc
mA8m5kTaLAgOxkSAG+ECBADTfjTBzuMH3MXrVazSGr0jM/XbqElbjjry0JgIWxB4
1CXZ3uKjWdt7LZGlwk5BYOvFYdJK0oOmQYOq4v8uzNO7Hv/fRXU6efY43rUoNXAJ
pMTGuVgUa51f/BhxtmJVxJrRiOBrVNeivFfROTvl1oRGjotfMTEYiju9OC9C8x2k
t2C9mEnrmjigOXLk22tX4DJSwHNjQXM=
-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:07 2024 by rpki-client on console-fra.rpki-client.org