Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e332e39362e302f31392d3139203d3e203233363933.roa
File: 3138322e332e39362e302f31392d3139203d3e203233363933.roa (raw, json)
Hash identifier: l5ovK9UW7Dv/TlAE71Ir1IFALN7RLZlggno6uou/ueE=
Subject key identifier: CE:74:09:B9:A8:B1:BB:B3:93:E2:4A:08:AE:B0:5C:40:FA:53:96:A8
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 4A7F07920FBCCCF7F28C1BBB91F9A0B2EF13E4D5
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e332e39362e302f31392d3139203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:58:11 +0000
ROA not before: Mon 11 Nov 2024 03:53:11 +0000
ROA not after: Mon 10 Nov 2025 03:58:11 +0000
asID: 23693
IP address blocks: 182.3.96.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7f:07:92:0f:bc:cc:f7:f2:8c:1b:bb:91:f9:a0:b2:ef:13:e4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:53:11 2024 GMT
Not After : Nov 10 03:58:11 2025 GMT
Subject: CN=CE7409B9A8B1BBB393E24A08AEB05C40FA5396A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:59:49:13:f7:7c:2f:8e:75:9b:0d:26:f6:
b5:49:56:fe:9c:b1:c0:fa:cd:c3:3c:44:6d:e9:09:
ef:cc:0d:b8:e7:54:dc:9a:85:74:21:11:96:76:7a:
3d:2a:2b:f2:bf:ba:4b:29:06:80:89:79:3c:f9:6b:
ac:1a:5b:d7:03:bd:ce:2d:f5:9c:e7:c4:9c:f8:ef:
06:a4:72:51:6a:06:bf:c2:8e:41:5a:d9:b9:ef:12:
05:c8:d9:f9:70:fd:a5:c5:28:82:ff:09:4a:30:7e:
c9:73:e3:8d:33:9a:1e:e3:0a:9f:ad:78:61:30:a5:
96:4e:10:07:fc:d7:64:13:7d:b9:48:69:3e:22:b6:
52:bd:77:47:d5:da:b1:c6:ad:86:58:ec:c0:8c:84:
69:4e:86:b0:14:7f:38:81:17:41:3a:eb:75:31:60:
87:4f:01:c0:a9:1a:69:da:f7:38:b9:a5:25:d0:30:
2b:c3:b1:70:ef:4c:f5:52:81:ed:55:6c:fd:ab:98:
1b:c0:b0:8c:29:67:10:46:fd:3a:13:a3:e3:b9:33:
ad:e7:56:ce:86:15:95:cc:2f:ec:ce:a6:bd:0f:8c:
9b:33:25:db:43:e2:c8:4d:66:2f:80:c4:e8:ff:2b:
fd:4b:41:2b:1c:ff:d5:f2:d5:75:03:aa:03:b5:ae:
ad:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:74:09:B9:A8:B1:BB:B3:93:E2:4A:08:AE:B0:5C:40:FA:53:96:A8
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3138322e332e39362e302f31392d3139203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.3.96.0/19
Signature Algorithm: sha256WithRSAEncryption
15:0d:1d:4d:2e:f1:9c:bb:aa:d2:15:32:b8:f2:f3:97:e4:6f:
26:03:90:f0:b7:ce:47:5f:f4:6a:24:b0:5b:10:de:72:d1:3b:
ba:92:5e:03:0a:6c:f3:2d:30:bf:71:74:2a:14:7e:5a:a8:75:
87:c3:91:36:e1:d2:9a:f6:42:ff:c2:22:c8:7a:39:46:b1:45:
0a:eb:a3:34:15:04:ab:15:a0:5b:d1:80:4b:9e:16:c2:e2:e2:
fd:6b:43:de:57:2d:08:5e:af:f6:cf:c0:26:0e:6b:7d:3c:0f:
57:01:56:c2:b7:91:58:f1:16:b0:bb:da:6b:29:89:63:08:ef:
7d:b8:0c:67:41:d6:dd:a8:7e:55:b5:52:00:aa:eb:36:d7:e4:
6f:e6:41:ad:71:4d:1c:53:f3:a8:35:79:e3:4a:99:63:0b:80:
53:b5:95:2e:6e:be:d3:21:b2:9c:30:a9:16:50:9c:ca:2a:0b:
54:6a:5e:13:df:62:24:2f:06:b8:bd:82:e3:55:21:40:a9:9d:
bc:6d:d4:f5:59:bd:32:06:ff:27:65:d0:2c:15:ca:95:bf:fa:
ad:20:7a:a9:fd:3c:ba:da:40:fb:2f:c1:d0:1a:b5:29:6f:8b:
c6:6e:ee:e0:69:50:62:4b:72:01:d2:17:5b:7c:f8:2c:ad:1b:
d1:1b:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org