Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3131392e34372e39332e302f32342d3234203d3e20313334363535.roa
File: 3131392e34372e39332e302f32342d3234203d3e20313334363535.roa (raw, json)
Hash identifier: cLRqiXJkfaosxGycBWw2IsxcYMpt625zLhgth/DhCeo=
Subject key identifier: AA:93:41:32:DC:4C:3C:48:00:36:51:C5:DF:BA:5C:5D:93:16:FB:BC
Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial: 0DC807D11889A97F9A951F097C9559CAE2837938
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3131392e34372e39332e302f32342d3234203d3e20313334363535.roa
Signing time: Fri 30 Jun 2023 06:00:00 +0000
ROA not before: Fri 30 Jun 2023 05:55:00 +0000
ROA not after: Fri 28 Jun 2024 06:00:00 +0000
asID: 134655
IP address blocks: 119.47.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 14:20:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c8:07:d1:18:89:a9:7f:9a:95:1f:09:7c:95:59:ca:e2:83:79:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Validity
Not Before: Jun 30 05:55:00 2023 GMT
Not After : Jun 28 06:00:00 2024 GMT
Subject: CN=AA934132DC4C3C48003651C5DFBA5C5D9316FBBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:62:b5:74:6a:b8:5d:3a:a5:e0:7a:63:2f:
d7:54:fe:49:03:59:fc:71:b2:88:e8:cb:02:36:e5:
a3:f0:1f:06:e1:10:45:8b:3c:a5:a8:0c:53:99:b9:
b3:b6:1b:f5:16:a6:29:68:01:19:14:3c:7e:63:aa:
e0:90:92:a2:a2:44:8f:a1:a8:20:64:70:bd:df:ef:
c3:8f:75:c8:42:3b:eb:28:ac:e1:05:f8:a3:c3:eb:
11:f4:6f:a7:68:0c:d7:f6:1f:05:5a:a0:2b:3f:46:
0a:ca:29:94:68:d8:50:66:8f:7b:84:95:40:27:37:
48:c1:82:a7:14:35:2f:d3:f2:8c:85:11:71:2d:5b:
fc:3f:6e:fb:b9:4a:e1:f5:8b:0f:29:58:c8:53:ba:
f2:73:03:30:05:ff:24:79:c2:ff:4f:80:96:43:cc:
a9:af:5a:49:03:9e:d2:48:b7:84:25:23:68:92:e9:
b5:23:33:fc:65:6e:99:41:68:cf:8f:eb:5f:55:b6:
66:12:c9:8c:08:d0:b8:27:5e:9f:ef:02:97:af:bb:
85:61:4c:8c:10:42:0c:5b:b1:c8:b0:a3:16:52:8f:
84:42:ff:ca:fa:fb:ed:4c:19:e4:b2:d9:dd:fe:50:
11:7a:18:3d:ec:55:9b:e6:d0:1b:4c:06:a5:11:9f:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:41:32:DC:4C:3C:48:00:36:51:C5:DF:BA:5C:5D:93:16:FB:BC
X509v3 Authority Key Identifier:
keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3131392e34372e39332e302f32342d3234203d3e20313334363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.47.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:11:65:46:69:3f:64:68:ab:b8:65:f3:d3:43:c4:e0:82:e2:
dd:47:f3:57:35:d4:86:f0:e1:7b:73:c6:7c:7f:38:2e:1e:5a:
d3:5e:a6:34:03:80:3d:90:30:1f:21:07:34:95:89:39:d6:25:
07:6a:ae:0a:10:cf:eb:49:93:91:79:be:6c:94:31:be:0b:25:
a4:03:46:c1:b6:57:c9:18:e7:ea:b0:80:16:a6:44:5d:f3:2f:
6b:97:ec:0d:21:42:7b:ad:7a:ce:02:a2:e7:66:ab:33:5c:4c:
31:ac:f0:27:bf:49:17:c7:76:41:ca:ff:a3:39:af:a1:3d:9b:
be:05:a5:c3:74:b1:ff:30:e8:9f:b2:c5:b2:21:70:d1:04:a2:
91:35:83:82:d3:24:43:17:49:4d:82:a5:f5:d4:84:f3:29:ca:
1f:6b:2d:1e:70:2e:ef:b1:f6:11:92:d0:07:bd:01:93:5d:bf:
57:c4:38:33:88:e7:08:1b:58:53:c9:89:e6:cc:42:b1:96:8e:
f5:06:5d:e1:43:97:d5:f0:b3:19:41:98:da:1e:13:df:71:8a:
7a:db:35:ca:2a:d7:88:33:1d:0c:7f:c7:a3:8d:d7:2f:23:62:
4f:dc:50:cf:8b:02:c2:30:2f:14:a0:99:31:e0:8c:a5:7d:60:
8a:68:ce:8f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDcgH0RiJqX+alR8JfJVZyuKDeTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4
QTNCNkU3OTAeFw0yMzA2MzAwNTU1MDBaFw0yNDA2MjgwNjAwMDBaMDMxMTAvBgNV
BAMTKEFBOTM0MTMyREM0QzNDNDgwMDM2NTFDNURGQkE1QzVEOTMxNkZCQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr92K1dGq4XTql4HpjL9dU/kkD
WfxxsojoywI25aPwHwbhEEWLPKWoDFOZubO2G/UWpiloARkUPH5jquCQkqKiRI+h
qCBkcL3f78OPdchCO+sorOEF+KPD6xH0b6doDNf2HwVaoCs/RgrKKZRo2FBmj3uE
lUAnN0jBgqcUNS/T8oyFEXEtW/w/bvu5SuH1iw8pWMhTuvJzAzAF/yR5wv9PgJZD
zKmvWkkDntJIt4QlI2iS6bUjM/xlbplBaM+P619VtmYSyYwI0LgnXp/vApevu4Vh
TIwQQgxbsciwoxZSj4RC/8r6++1MGeSy2d3+UBF6GD3sVZvm0BtMBqURn05bAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUqpNBMtxMPEgANlHF37pcXZMW+7wwHwYDVR0j
BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB
M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC
NkU3OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYxLTMwNzUtNDUxOS1i
YTkwLWNlZThkMzk3OWZjZC8wLzMxMzEzOTJlMzQzNzJlMzkzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNDM2MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcvXTANBgkqhkiG
9w0BAQsFAAOCAQEAtRFlRmk/ZGiruGXz00PE4ILi3UfzVzXUhvDhe3PGfH84Lh5a
016mNAOAPZAwHyEHNJWJOdYlB2quChDP60mTkXm+bJQxvgslpANGwbZXyRjn6rCA
FqZEXfMva5fsDSFCe616zgKi52arM1xMMazwJ79JF8d2Qcr/ozmvoT2bvgWlw3Sx
/zDon7LFsiFw0QSikTWDgtMkQxdJTYKl9dSE8ynKH2stHnAu77H2EZLQB70Bk12/
V8Q4M4jnCBtYU8mJ5sxCsZaO9QZd4UOX1fCzGUGY2h4T33GKets1yirXiDMdDH/H
o43XLyNiT9xQz4sCwjAvFKCZMeCMpX1gimjOjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org