Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3333203d3e20323030323430.roa
File: 323430313a633432303a383030303a3a2f33332d3333203d3e20323030323430.roa (raw, json)
Hash identifier: ogb90ohZ+VZzAOTFNtCPLQo7v6WrDygilJWFDdcVxTE=
Subject key identifier: 2C:03:16:EB:37:E2:F0:A5:FB:1A:32:DD:B4:03:44:59:F6:3F:5C:87
Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Certificate serial: 56C692A44847193AD831F88007B02AE734064699
Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3333203d3e20323030323430.roa
Signing time: Tue 24 Sep 2024 07:19:52 +0000
ROA not before: Tue 24 Sep 2024 07:14:52 +0000
ROA not after: Tue 23 Sep 2025 07:19:52 +0000
asID: 200240
IP address blocks: 2401:c420:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Thu 26 Sep 2024 01:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c6:92:a4:48:47:19:3a:d8:31:f8:80:07:b0:2a:e7:34:06:46:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Validity
Not Before: Sep 24 07:14:52 2024 GMT
Not After : Sep 23 07:19:52 2025 GMT
Subject: CN=2C0316EB37E2F0A5FB1A32DDB4034459F63F5C87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:f6:ec:04:5e:9a:f2:ef:1c:ea:40:a6:ec:
32:f2:a1:09:be:58:55:66:1b:77:aa:68:9e:15:a3:
9e:03:c7:b9:e8:77:f4:5b:de:88:c4:47:59:85:93:
fd:42:de:eb:bb:06:af:27:3b:bd:02:35:92:c1:2b:
12:fb:15:b1:85:76:57:b4:69:ce:0a:e2:68:65:33:
f6:7c:52:09:6f:75:7a:f9:72:e8:aa:97:7a:ce:eb:
f1:c4:37:1a:05:3a:30:72:45:2a:9b:67:7a:79:37:
db:44:f7:87:d1:99:02:00:9a:19:70:99:c6:31:42:
4c:4a:db:65:4c:3b:14:7c:59:05:6a:7c:cb:07:ba:
81:da:20:7e:e9:03:b4:fb:68:a7:59:df:0e:46:dd:
be:13:ef:1a:0a:a2:00:6b:5b:7a:a2:41:5f:7c:a9:
4c:f2:9c:fb:25:0e:ca:51:00:8e:37:93:ee:41:7a:
5f:7b:f1:fb:e5:a8:7d:87:02:4a:4c:0f:61:2a:c6:
c1:63:c8:37:5a:96:7c:1b:e5:3d:24:86:0d:2b:ea:
37:9e:a0:dd:13:09:2c:29:a0:e2:f3:79:0d:aa:a8:
8a:75:45:5b:49:7e:07:6b:e8:15:50:7a:66:6e:04:
79:dd:3b:b7:21:9b:25:f7:ca:66:12:b2:93:17:1d:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:03:16:EB:37:E2:F0:A5:FB:1A:32:DD:B4:03:44:59:F6:3F:5C:87
X509v3 Authority Key Identifier:
keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3333203d3e20323030323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:c420:8000::/33
Signature Algorithm: sha256WithRSAEncryption
b5:70:25:4f:da:9b:09:fd:24:e4:a7:e0:e6:99:ec:d0:aa:4e:
dd:01:e2:87:6f:0f:b7:45:cd:f3:10:ba:4d:be:3b:85:ef:00:
fc:bf:02:c0:a2:14:11:5a:23:6d:0b:ca:c9:4e:4a:80:09:18:
f4:fb:75:71:86:7b:83:b2:ea:d7:bd:9f:02:5a:50:96:41:24:
9c:0d:9c:5c:ea:92:08:26:00:16:ef:89:b2:61:2c:53:3e:7e:
ea:3a:57:17:25:f6:c2:a9:1a:0a:35:4f:6f:e4:79:eb:37:52:
84:bc:23:6e:34:2a:39:49:40:01:f6:37:5d:d3:13:a1:e3:b9:
c4:74:e8:31:df:13:32:94:ee:40:7b:37:6a:bc:b3:35:05:1b:
f7:e2:59:f0:7e:29:1d:78:99:e2:72:86:6b:21:0b:3f:eb:71:
30:8d:9b:06:4f:74:43:92:b6:62:9c:f0:9a:70:88:ba:d3:bb:
05:63:a6:b8:5a:23:b9:e3:fa:6b:ea:56:ca:ad:25:74:4c:5f:
c3:94:53:0e:c8:ed:b8:ac:2e:ac:9c:5e:24:35:2b:32:0f:9b:
c4:bd:10:c3:f2:f8:e0:60:f1:bd:e6:d6:ae:86:57:56:8b:ec:
b9:6b:62:62:8e:d5:62:a6:f8:d5:05:1d:d3:f7:92:c3:3d:dd:
ed:a6:83:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 02:51:20 2024 by rpki-client on console-fra.rpki-client.org