Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e362e302f32342d3234203d3e203338373533.roa
File: 32372e3133312e362e302f32342d3234203d3e203338373533.roa (raw, json)
Hash identifier: q1Z0T393/3iSuBpOFNUHBgcoqrEdAmaeo6Y0jZsfMvw=
Subject key identifier: 9C:EC:6A:30:97:A2:D4:D9:34:52:E4:F6:4D:5E:84:EC:D1:A2:E0:38
Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial: 2C93229BD904F7952C5A78ECE66B5731766E21AF
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e362e302f32342d3234203d3e203338373533.roa
Signing time: Fri 21 Jul 2023 07:00:42 +0000
ROA not before: Fri 21 Jul 2023 06:55:42 +0000
ROA not after: Fri 19 Jul 2024 07:00:42 +0000
asID: 38753
IP address blocks: 27.131.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 04:11:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:93:22:9b:d9:04:f7:95:2c:5a:78:ec:e6:6b:57:31:76:6e:21:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Validity
Not Before: Jul 21 06:55:42 2023 GMT
Not After : Jul 19 07:00:42 2024 GMT
Subject: CN=9CEC6A3097A2D4D93452E4F64D5E84ECD1A2E038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:9b:97:71:af:c1:ca:e9:44:96:f2:7d:a3:
6a:e7:a1:33:7f:b4:86:d2:9a:a2:12:35:24:08:cc:
34:87:22:4e:81:e8:c3:82:5e:11:63:52:24:30:27:
02:c1:59:e6:47:2d:3d:34:5f:7e:65:9a:3b:a7:b6:
a7:1d:c6:ea:b1:15:6d:02:b9:37:d3:ee:a2:6a:8a:
14:6e:95:b2:be:b2:75:39:00:62:b5:4e:e0:08:f0:
e2:dc:97:1d:a3:6d:7d:6c:2f:d6:93:c4:cc:b7:1c:
db:a9:da:e7:37:df:c9:be:fb:a4:b5:6e:10:11:03:
8e:59:b7:dd:41:85:fb:5f:53:1a:a8:87:3f:2a:84:
a9:fc:c4:e2:f6:e8:79:45:7e:9c:e6:48:a5:b0:b8:
19:03:7d:82:3e:e5:10:a1:80:4e:6e:91:bd:75:63:
de:48:5e:c9:c0:e9:b1:2a:50:31:fe:ac:29:7e:f8:
e6:2b:6c:f3:e0:a7:b0:fc:c8:c3:bc:6f:d9:cc:91:
81:0a:87:cb:cb:0d:88:d5:b2:6d:5f:7b:96:82:e2:
dd:ef:db:e8:86:ad:1a:b9:8b:8b:2b:20:1e:29:e8:
cf:c9:ae:ca:5f:9e:3a:b9:78:9a:5a:cd:70:fc:0a:
c6:64:97:f4:b4:94:d8:45:4f:8e:5a:6a:ed:5b:9f:
08:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EC:6A:30:97:A2:D4:D9:34:52:E4:F6:4D:5E:84:EC:D1:A2:E0:38
X509v3 Authority Key Identifier:
keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/32372e3133312e362e302f32342d3234203d3e203338373533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.131.6.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c1:3e:9d:98:46:08:3d:9a:fe:e5:ca:f3:89:d0:fa:09:67:
de:db:5e:78:e8:69:38:9e:63:7f:7b:3a:c4:dc:6d:a5:f1:fe:
61:da:2a:8a:63:ad:8d:50:12:b4:42:ec:d4:98:9a:a6:6c:b1:
04:e6:92:ee:ad:20:e2:72:44:d4:4e:83:71:80:b9:97:87:5d:
d1:12:59:f5:dc:b8:dd:f1:cd:9b:33:ff:d1:00:8f:b4:01:67:
a7:4b:a4:0f:32:a5:4e:17:34:d8:23:d3:56:ee:29:73:4e:c4:
42:95:d0:17:65:e4:d4:9c:ab:50:61:e2:0e:ad:eb:0b:90:a6:
65:58:b1:37:ca:9a:9b:cb:2d:fb:ec:e3:5e:a0:55:4d:d6:d1:
1b:fb:cc:1e:bd:ad:e9:83:39:a5:c1:ce:0f:a8:a8:a1:5b:e2:
6e:bd:31:0c:09:b3:7e:fa:49:34:63:1e:93:dc:00:e1:a6:28:
b2:40:b5:a5:42:11:26:cb:c2:30:fa:b9:8a:74:99:35:89:4d:
02:a0:bc:d5:21:14:8e:1b:99:63:06:fb:0e:dc:64:b6:6d:a9:
f4:7f:47:59:a6:ca:ae:5e:f7:f5:97:a8:fa:c9:0b:8a:cd:ee:
bf:2f:15:c5:98:d7:c9:cf:ee:38:35:fb:b1:19:e4:e2:44:82:
af:dc:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org