Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3232312e3133322e3139322e302f31382d3138203d3e203233363933.roa
File: 3232312e3133322e3139322e302f31382d3138203d3e203233363933.roa (raw, json)
Hash identifier: /dh+GCcYSU6tveAyF3c3qfF9cuUPBcxYddG8FwEqn4I=
Subject key identifier: 07:CA:FD:BA:23:99:D1:2F:06:44:08:D8:54:B5:6E:28:B3:A2:AD:4D
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 3FBA6CFAC5EDB5DCF0666A9E200A6B7BBFB320E3
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3232312e3133322e3139322e302f31382d3138203d3e203233363933.roa
Signing time: Fri 08 Nov 2024 07:56:12 +0000
ROA not before: Fri 08 Nov 2024 07:51:12 +0000
ROA not after: Fri 07 Nov 2025 07:56:12 +0000
asID: 23693
IP address blocks: 221.132.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ba:6c:fa:c5:ed:b5:dc:f0:66:6a:9e:20:0a:6b:7b:bf:b3:20:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 8 07:51:12 2024 GMT
Not After : Nov 7 07:56:12 2025 GMT
Subject: CN=07CAFDBA2399D12F064408D854B56E28B3A2AD4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:d8:f1:00:f5:ab:7b:dd:da:25:12:27:54:
78:8a:3d:ad:ed:35:d2:5d:a5:7b:8e:01:af:13:16:
ac:bf:98:fb:89:f6:19:02:ba:7e:eb:b6:12:ca:39:
a7:9a:23:8a:86:1c:aa:0e:e0:4b:0d:55:49:c2:fd:
38:dd:f3:79:2f:13:84:f7:2f:fe:5b:95:9b:8e:96:
73:c8:fb:7d:3d:9e:9f:9f:7c:b6:9e:20:46:63:71:
94:e7:71:b8:26:10:70:91:44:ed:62:68:75:73:6d:
dd:30:23:06:e6:59:ab:be:d5:34:90:d6:88:d2:b4:
3c:d8:0f:5d:6f:d4:56:b6:17:7e:53:89:17:fd:7a:
33:03:4d:e1:8a:d9:6e:da:d8:1c:48:5d:d7:2b:85:
4e:46:fc:58:a1:aa:f7:66:8b:30:97:c5:bd:4e:52:
80:cd:50:22:a0:dc:b5:35:e8:e1:ea:c0:a0:60:1b:
64:25:36:44:00:92:48:a6:da:1f:ac:60:56:f5:c7:
76:49:2b:9e:39:7c:20:37:52:f0:12:e6:ad:a1:8a:
b3:05:de:dc:8f:e4:80:5f:de:33:2a:b3:79:d0:3c:
36:e0:7f:5c:63:b0:70:7d:cc:63:57:66:d4:2e:0f:
56:38:79:2f:35:63:29:23:d4:ee:93:13:5c:5f:80:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CA:FD:BA:23:99:D1:2F:06:44:08:D8:54:B5:6E:28:B3:A2:AD:4D
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3232312e3133322e3139322e302f31382d3138203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
221.132.192.0/18
Signature Algorithm: sha256WithRSAEncryption
63:49:10:cf:45:cf:d2:9b:7d:e4:cd:97:84:ad:db:de:e6:5e:
57:9c:65:9b:49:90:b4:3b:1e:54:0b:60:e7:25:f3:42:e6:12:
ae:86:72:ce:8b:d7:56:7d:8f:e2:76:bf:06:b3:96:06:fd:b8:
b6:7e:cc:2f:30:35:e7:04:d8:35:6a:69:7d:3e:1e:77:47:08:
9c:f6:2d:86:99:84:c2:dd:a9:94:9a:29:68:cf:81:cd:4f:86:
f1:88:1f:c9:a1:95:cc:9a:e1:73:5c:45:3f:d1:b1:92:d2:38:
58:5d:33:cc:25:b1:0a:b9:32:79:18:d1:3b:90:93:34:5f:39:
2f:6f:fe:45:45:8e:97:a2:99:d9:67:5e:aa:64:4a:d1:89:87:
be:62:2e:46:2e:6a:6d:9c:9e:12:01:59:96:a2:ce:b7:c4:8d:
b3:3d:73:05:c1:4b:2f:e5:8a:ee:96:f7:bc:f6:8b:75:a3:90:
7f:35:13:6d:a0:75:d0:e9:c8:53:a2:af:4a:0c:93:85:10:82:
73:7d:cc:67:57:44:10:cc:8a:e0:db:e4:32:e6:2c:9b:24:d9:
77:1e:68:46:cc:b9:51:27:80:dd:a9:c2:d1:65:f1:27:43:e9:
ab:b2:a7:f5:f9:0e:31:0e:80:33:d8:8e:1e:22:c6:26:fe:a7:
53:1f:6f:1f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUP7ps+sXttdzwZmqeIApre7+zIOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2
QjlDOUYzQTAeFw0yNDExMDgwNzUxMTJaFw0yNTExMDcwNzU2MTJaMDMxMTAvBgNV
BAMTKDA3Q0FGREJBMjM5OUQxMkYwNjQ0MDhEODU0QjU2RTI4QjNBMkFENEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPv9jxAPWre93aJRInVHiKPa3t
NdJdpXuOAa8TFqy/mPuJ9hkCun7rthLKOaeaI4qGHKoO4EsNVUnC/Tjd83kvE4T3
L/5blZuOlnPI+309np+ffLaeIEZjcZTncbgmEHCRRO1iaHVzbd0wIwbmWau+1TSQ
1ojStDzYD11v1Fa2F35TiRf9ejMDTeGK2W7a2BxIXdcrhU5G/FihqvdmizCXxb1O
UoDNUCKg3LU16OHqwKBgG2QlNkQAkkim2h+sYFb1x3ZJK545fCA3UvAS5q2hirMF
3tyP5IBf3jMqs3nQPDbgf1xjsHB9zGNXZtQuD1Y4eS81Yykj1O6TE1xfgC9xAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUB8r9uiOZ0S8GRAjYVLVuKLOirU0wHwYDVR0j
BBgwFoAUZkQrhWO1pZDthPcqjHuXoWucnzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzI4ZjI0ZS1kYzdmLTQ1NjItYTUxZC1lMmUzOGMzNjc3ZDEvMC82NjQ0MkI4NTYz
QjVBNTkwRUQ4NEY3MkE4QzdCOTdBMTZCOUM5RjNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY0NDJCODU2M0I1QTU5MEVEODRGNzJBOEM3Qjk3QTE2QjlD
OUYzQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzMjhmMjRlLWRjN2YtNDU2Mi1h
NTFkLWUyZTM4YzM2NzdkMS8wLzMyMzIzMTJlMzEzMzMyMmUzMTM5MzIyZTMwMmYz
MTM4MmQzMTM4MjAzZDNlMjAzMjMzMzYzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG3YTAMA0GCSqG
SIb3DQEBCwUAA4IBAQBjSRDPRc/Sm33kzZeErdve5l5XnGWbSZC0Ox5UC2DnJfNC
5hKuhnLOi9dWfY/idr8Gs5YG/bi2fswvMDXnBNg1aml9Ph53Rwic9i2GmYTC3amU
miloz4HNT4bxiB/JoZXMmuFzXEU/0bGS0jhYXTPMJbEKuTJ5GNE7kJM0Xzkvb/5F
RY6XopnZZ16qZErRiYe+Yi5GLmptnJ4SAVmWos63xI2zPXMFwUsv5Yrulve89ot1
o5B/NRNtoHXQ6chToq9KDJOFEIJzfcxnV0QQzIrg2+Qy5iybJNl3HmhGzLlRJ4Dd
qcLRZfEnQ+mrsqf1+Q4xDoAz2I4eIsYm/qdTH28f
-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:11 2024 by rpki-client on console-ams.rpki-client.org