Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3230332e39362e3232382e302f32332d3233203d3e20313334363535.roa
File: 3230332e39362e3232382e302f32332d3233203d3e20313334363535.roa (raw, json)
Hash identifier: 7ihgZ2skKMJQZNUTaVoCdg/fG/IFHBKWfil0kWEzX+U=
Subject key identifier: 59:43:77:08:62:65:47:E7:7D:AE:BC:16:C8:6D:B0:2F:69:BE:63:2E
Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial: 483A8875EC7F52D781EA57D1F0E76283C3E25E1C
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3230332e39362e3232382e302f32332d3233203d3e20313334363535.roa
Signing time: Fri 13 Sep 2024 06:20:51 +0000
ROA not before: Fri 13 Sep 2024 06:15:51 +0000
ROA not after: Fri 12 Sep 2025 06:20:51 +0000
asID: 134655
IP address blocks: 203.96.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 15 Sep 2024 13:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3a:88:75:ec:7f:52:d7:81:ea:57:d1:f0:e7:62:83:c3:e2:5e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Validity
Not Before: Sep 13 06:15:51 2024 GMT
Not After : Sep 12 06:20:51 2025 GMT
Subject: CN=59437708626547E77DAEBC16C86DB02F69BE632E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:8d:50:95:1b:cc:07:7a:90:87:43:4d:b0:
11:fe:b3:9f:52:1c:19:ff:cd:66:8c:4a:b6:d1:30:
eb:a9:1d:d8:5b:3a:78:76:43:9d:80:87:de:fa:c6:
77:a1:12:d0:df:0e:8b:22:0b:85:ee:e5:3f:33:71:
7b:e9:95:e5:f8:42:2e:c2:62:c7:f6:3c:2e:9a:f7:
0e:96:00:ca:00:41:9c:f8:86:26:77:60:8d:51:0c:
0f:69:a1:09:80:ac:96:96:d4:e1:f2:14:29:cd:29:
74:5a:6a:85:69:b4:4e:bb:05:29:9c:8b:ae:97:5c:
a5:4e:d5:8e:fb:d4:ad:2d:29:f8:46:61:77:f9:95:
92:83:7c:6e:4d:96:d7:bc:5c:12:c1:8a:88:50:1c:
25:9e:31:b0:ed:07:b3:c2:0a:6b:1e:5d:e4:80:01:
71:d9:af:83:c1:ab:a5:05:2c:74:af:a3:8b:16:77:
7b:09:84:fb:92:03:fd:ca:5d:ac:3d:4f:e8:ff:f7:
9b:d1:31:38:bc:13:3b:44:c9:e4:c3:4e:fc:52:00:
db:82:22:24:75:77:47:de:de:a9:cf:e2:a4:b8:c7:
c2:aa:fa:7c:ad:7a:b2:95:2a:a4:12:e6:b7:6c:70:
33:c0:ac:19:76:c0:bd:85:9c:c0:7c:48:12:dc:58:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:43:77:08:62:65:47:E7:7D:AE:BC:16:C8:6D:B0:2F:69:BE:63:2E
X509v3 Authority Key Identifier:
keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3230332e39362e3232382e302f32332d3233203d3e20313334363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.96.228.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:29:b6:a4:48:a0:b4:21:45:c5:8f:1e:ff:cf:e1:29:38:73:
8a:12:fc:97:58:96:11:63:81:c2:78:bb:f4:d6:29:2d:06:e4:
9f:c6:e0:e9:f2:ac:cb:46:5c:d4:eb:17:3c:88:be:90:f6:a7:
9f:e4:64:f3:5d:57:b3:2c:0e:b4:ac:3d:47:c0:04:47:b9:58:
89:15:35:52:9a:76:7c:77:8d:7f:ad:1e:38:fc:2f:0d:53:40:
0f:24:51:44:94:08:b4:c9:89:a3:de:a7:f8:be:57:51:6a:ea:
6c:e4:fb:70:77:b4:0b:ac:34:8c:33:f5:40:98:0f:5e:48:fd:
f2:71:80:f2:c0:fe:1f:89:1b:6a:82:d6:23:31:e9:82:80:59:
3f:69:fd:f4:f3:ef:f7:9d:fd:6f:41:df:45:76:d1:51:87:f7:
6d:3f:10:47:94:fb:05:31:ff:15:96:83:0f:5b:87:c0:4d:70:
3d:2e:21:89:36:c9:3b:50:18:de:1f:bc:4d:93:50:b3:52:f1:
46:a7:3f:33:24:a7:d1:e9:06:45:66:c1:a3:91:74:83:e2:12:
da:e2:76:10:d3:74:8d:5a:2a:81:4f:1d:d1:e8:bd:bb:42:e1:
1d:57:1a:cb:c0:4c:f6:a7:68:f3:6d:fb:bd:a8:b8:7b:f6:b1:
34:1a:0c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 14:15:56 2024 by rpki-client on console-fra.rpki-client.org