Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234332e302f32342d3234203d3e20313430343035.roa
File: 3231302e3234372e3234332e302f32342d3234203d3e20313430343035.roa (raw, json)
Hash identifier: HI69nW8ZoJE44sYt9hYlZT+j5xFDUCy4aImfF03geNA=
Subject key identifier: EA:58:0B:96:3C:E5:B3:2D:47:C4:63:4F:A2:41:4A:E8:13:CE:BB:73
Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial: 108837071FB16D2CF965AD3A801DC1405CEC6E5E
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234332e302f32342d3234203d3e20313430343035.roa
Signing time: Mon 01 Jul 2024 01:03:35 +0000
ROA not before: Mon 01 Jul 2024 00:58:35 +0000
ROA not after: Mon 30 Jun 2025 01:03:35 +0000
asID: 140405
IP address blocks: 210.247.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Aug 2024 00:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:88:37:07:1f:b1:6d:2c:f9:65:ad:3a:80:1d:c1:40:5c:ec:6e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Validity
Not Before: Jul 1 00:58:35 2024 GMT
Not After : Jun 30 01:03:35 2025 GMT
Subject: CN=EA580B963CE5B32D47C4634FA2414AE813CEBB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:f5:fb:89:40:6f:d2:37:a4:07:b3:ed:88:
d9:1d:5f:8a:e8:06:ba:e9:3a:8c:78:50:57:ba:a2:
8f:84:73:45:bc:90:1c:a0:ea:65:56:68:55:44:1a:
86:24:e3:04:b6:81:80:fa:59:71:3f:05:69:b9:2e:
01:cd:96:71:6d:bb:bb:4e:4e:66:89:d3:ea:0f:68:
d6:2e:90:f8:a8:b5:9e:e7:68:fe:08:c5:96:ed:3f:
3a:f7:1b:cc:4b:80:33:ad:19:97:62:b0:c8:33:9e:
da:2e:d1:e6:a7:c7:d3:a6:5d:ed:7d:e3:d3:f3:0f:
28:3e:aa:1f:8f:60:08:5f:7b:65:95:17:8e:34:3b:
76:03:17:a6:1e:f2:f8:7a:8c:7c:c9:c6:cd:2d:a5:
36:93:09:d7:f5:e6:d7:32:20:6d:f7:e3:ff:c7:cb:
ac:35:d9:63:2d:45:9d:60:24:0f:c4:91:71:89:94:
16:f3:2d:d0:4b:ff:2f:aa:e6:e9:f1:4d:46:01:97:
08:75:91:86:e4:b7:e7:f3:94:be:6e:3e:3c:b4:ed:
0d:5c:e1:9c:c2:0a:db:82:2d:be:2a:58:75:20:40:
d3:dc:76:60:78:d5:12:60:d9:c0:ac:22:df:8c:bb:
a3:9d:25:b7:54:10:dc:c5:a0:b3:56:c8:5f:85:6a:
e1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:58:0B:96:3C:E5:B3:2D:47:C4:63:4F:A2:41:4A:E8:13:CE:BB:73
X509v3 Authority Key Identifier:
keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234332e302f32342d3234203d3e20313430343035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.247.243.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5b:96:f3:8e:54:ac:45:14:63:47:6f:36:b5:34:70:08:83:
42:86:b6:7e:d0:5a:53:d7:ea:9f:27:fd:94:b0:a7:e4:51:59:
99:7d:45:e2:f4:1b:fd:92:06:a4:39:da:35:f2:bf:c3:0a:68:
57:6b:bb:c4:49:57:1f:20:77:cd:b9:7d:b8:a2:22:9a:d7:06:
c0:85:2d:02:61:86:0b:44:b6:2d:4c:1d:e4:37:08:62:00:f9:
09:c5:09:86:c8:a2:4b:f3:9c:24:6a:e7:01:01:b6:8d:7b:52:
b9:7f:64:8b:07:94:f5:db:82:f5:be:bb:c9:1b:77:a5:cf:0a:
80:34:e0:30:72:59:ab:ee:32:a1:fd:12:42:e4:6f:33:34:4e:
41:94:bf:d5:6c:80:7d:f0:83:2c:67:8f:cd:4d:61:97:d7:87:
ea:60:9e:63:40:fd:d2:78:da:68:49:b1:3e:a7:a5:04:9f:96:
20:55:1f:79:3f:cf:1e:c3:c9:cf:11:72:59:cd:6b:16:80:6b:
9d:15:e2:b5:aa:66:bb:93:25:65:6c:21:ae:49:50:1d:03:87:
d5:03:a7:85:ed:79:d6:60:ec:17:f6:09:dd:87:4c:f9:51:b7:
62:fd:5b:35:4f:6d:d9:25:2a:f8:75:9a:67:16:52:9f:74:5f:
54:4a:da:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 01:59:47 2024 by rpki-client on console-fra.rpki-client.org