Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32332d3234203d3e20313533313332.roa
File: 3136302e3138372e3231382e302f32332d3234203d3e20313533313332.roa (raw, json)
Hash identifier: 5PTzWhcfz6zidR8AXctB+og4ersFa4mlFtvNRmX0wiA=
Subject key identifier: FE:79:C4:75:7B:95:87:03:63:BB:9B:9E:F3:90:F2:A7:3A:81:1F:8B
Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419
Certificate serial: 4DA4B9387269795B7689932DD88EE34973ED2450
Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32332d3234203d3e20313533313332.roa
Signing time: Thu 31 Oct 2024 03:43:15 +0000
ROA not before: Thu 31 Oct 2024 03:38:15 +0000
ROA not after: Thu 30 Oct 2025 03:43:15 +0000
asID: 153132
IP address blocks: 160.187.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 12:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:a4:b9:38:72:69:79:5b:76:89:93:2d:d8:8e:e3:49:73:ed:24:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419
Validity
Not Before: Oct 31 03:38:15 2024 GMT
Not After : Oct 30 03:43:15 2025 GMT
Subject: CN=FE79C4757B95870363BB9B9EF390F2A73A811F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b9:15:65:ea:bc:70:04:58:fc:9d:88:72:88:
79:65:2d:4e:14:37:6b:04:4b:12:7e:1c:d3:36:94:
72:d6:0b:04:0f:9a:cf:45:e0:59:6e:36:d3:a2:a0:
3d:4f:f6:8d:5e:fa:f2:54:02:37:7f:79:ac:f2:5d:
08:47:02:68:e1:aa:f0:ef:4c:79:48:b7:cf:10:78:
2b:99:01:08:ff:75:b6:1b:39:ae:e3:e8:09:10:cd:
f8:dc:d8:93:34:d4:88:2a:31:f5:6b:5a:2a:40:bb:
d3:a3:b9:af:9b:02:6b:df:75:73:df:29:98:9b:f3:
ec:99:14:e6:52:03:62:b5:26:e8:61:73:3e:3d:f2:
7e:a2:e1:f3:d1:50:6e:e9:41:1a:31:f4:35:97:a9:
c2:d2:17:5a:de:3f:33:7d:a4:54:26:61:7c:0a:4a:
4c:52:6f:87:b5:28:55:ea:17:92:5b:e5:cb:8b:6a:
6b:37:d4:d9:6c:b4:1a:14:e7:96:9c:84:1f:57:3b:
96:44:7f:b6:1d:9f:ce:ec:b6:18:cf:41:09:89:4a:
c0:92:f5:49:05:96:f3:ef:3c:0c:eb:ab:6d:ef:97:
45:72:e7:23:92:ed:0d:39:5f:d9:5c:04:ea:24:01:
35:62:01:67:72:42:e5:ec:9a:f1:79:27:b5:5e:86:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:79:C4:75:7B:95:87:03:63:BB:9B:9E:F3:90:F2:A7:3A:81:1F:8B
X509v3 Authority Key Identifier:
keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32332d3234203d3e20313533313332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.187.218.0/23
Signature Algorithm: sha256WithRSAEncryption
67:c7:b4:2a:f3:c7:d9:ff:db:3d:c5:bc:12:94:23:b3:6b:59:
3e:c1:ad:06:4c:ae:df:84:36:d9:c7:8b:91:82:24:7d:4c:b3:
4d:f4:28:f9:b7:c3:fd:37:72:be:96:42:c6:6f:4b:88:76:fa:
b0:79:70:70:41:b1:aa:78:d0:8c:50:f5:2e:32:3f:67:dd:4e:
0a:41:1c:b7:cf:b4:83:32:60:03:9c:14:bb:99:ae:78:7c:29:
3c:32:22:6a:1c:79:ca:9a:69:f9:7a:df:d7:55:bc:d3:68:d4:
e0:ba:3a:c8:8a:06:e5:6c:85:fa:63:ad:4f:bc:d4:4c:8d:b1:
06:67:01:5e:f3:30:6e:2c:1e:a8:1e:07:f7:55:32:f4:21:5e:
03:1a:3d:e2:95:c5:21:8c:e3:1d:b4:fd:98:43:85:b5:bf:d1:
9f:e6:e4:04:c5:29:11:8e:05:24:e8:b8:ce:2d:45:53:8b:39:
a9:33:85:d1:60:e3:6f:c2:2e:65:d1:4f:d2:61:7c:25:63:f8:
3f:49:e9:2a:3c:af:6e:5a:43:22:ef:17:77:76:2d:6c:df:84:
5c:79:5b:fb:e4:d9:72:d1:d7:aa:89:6f:02:72:b6:3c:95:fb:
01:35:0e:bf:0c:3f:25:ad:e1:ef:50:c2:0a:4e:e0:19:30:9a:
13:68:99:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 14:58:10 2024 by rpki-client on console-fra.rpki-client.org