Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20323039313738.roa
File: 3230332e38342e3133372e302f32342d3234203d3e20323039313738.roa (raw, json)
Hash identifier: LB6B+gujE6t1JH8cxWV1xVoUDLlpZX/L5n8vHdhKmz0=
Subject key identifier: E3:87:0C:A1:6B:48:B4:A8:4D:A5:92:D9:06:1A:F6:7F:59:9D:AA:92
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 4D6031D90AA06B5C8F9AE60460EE34ED77C8E520
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20323039313738.roa
Signing time: Tue 09 Jul 2024 14:29:12 +0000
ROA not before: Tue 09 Jul 2024 14:24:12 +0000
ROA not after: Tue 08 Jul 2025 14:29:12 +0000
asID: 209178
IP address blocks: 203.84.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 11:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:60:31:d9:0a:a0:6b:5c:8f:9a:e6:04:60:ee:34:ed:77:c8:e5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Jul 9 14:24:12 2024 GMT
Not After : Jul 8 14:29:12 2025 GMT
Subject: CN=E3870CA16B48B4A84DA592D9061AF67F599DAA92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:34:9c:e9:7e:ca:1b:f4:4f:41:7b:a3:26:
c6:4f:67:5b:6c:74:3d:1a:e9:6f:ac:f3:af:8e:e9:
35:71:40:43:4a:f0:f5:2d:05:fc:86:10:9d:0e:43:
2c:a3:2e:1a:8e:ff:45:c4:93:89:6f:75:ab:eb:97:
01:58:c0:f9:32:32:d3:af:c2:bc:c0:18:3e:d7:df:
4b:4f:96:42:7c:ac:8e:a9:1b:fa:eb:59:62:2c:9f:
9e:ef:7e:4f:d8:cf:2b:da:dc:12:ca:94:8a:19:cd:
f7:1d:2c:d7:8d:3f:c4:07:07:79:a9:5c:d7:72:90:
67:37:f8:b2:0a:fc:e6:8d:43:0b:a8:d2:8d:82:25:
e3:2b:63:14:f4:af:90:e3:7a:cd:24:98:b8:3d:cd:
9c:cf:70:b5:bf:db:25:b4:ac:33:c2:dc:fe:84:2a:
94:4b:de:0e:a9:47:3a:f1:cd:ad:8d:73:c1:ac:c1:
90:0c:37:15:fc:7a:8f:57:ee:2d:5b:a9:ad:59:e8:
3b:24:94:7d:d3:d6:32:be:3c:c6:7b:8a:e4:ba:82:
30:e9:4a:98:35:8d:22:97:d9:bf:1a:0a:1f:c1:af:
ca:0c:cd:5a:e6:a5:31:c4:11:30:88:3b:27:de:e8:
8e:88:01:fe:b3:23:e1:75:5a:ec:02:ec:0d:b0:d7:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:0C:A1:6B:48:B4:A8:4D:A5:92:D9:06:1A:F6:7F:59:9D:AA:92
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e20323039313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.137.0/24
Signature Algorithm: sha256WithRSAEncryption
38:88:09:14:23:50:e3:49:21:d5:28:83:cf:f4:15:dd:75:45:
7b:9d:fe:dc:48:25:90:11:a4:57:86:9f:8b:f4:f7:0d:83:20:
ae:8b:35:61:54:25:6e:59:ea:b0:1a:1d:90:22:af:70:5a:ae:
07:fb:04:53:ca:0c:ca:21:b2:e8:88:30:47:c2:9a:74:1f:21:
dd:da:18:2c:2a:5a:29:82:10:9c:d9:90:1f:2e:26:c8:c4:17:
ff:e5:03:fa:b7:01:31:ea:26:c6:1e:f9:9d:12:b9:80:69:e5:
7b:0e:df:19:24:09:84:33:97:9b:7e:04:b6:d7:94:01:b4:e6:
da:4e:13:9a:4a:43:f0:31:d5:3e:18:d8:6a:9f:ca:11:0b:83:
dc:a2:03:cb:3a:a9:d2:75:8b:4d:76:39:d6:20:d1:a5:86:07:
74:c5:7b:fe:0b:b9:d5:66:3e:75:77:48:d9:63:8e:a1:82:1a:
b8:21:2a:86:1f:91:1c:3b:4b:e8:4e:55:a6:53:3b:ec:57:b2:
7d:2e:a5:19:bf:94:0c:a8:9e:1b:38:3c:fc:98:f2:a7:cf:0c:
1a:fa:74:e8:d8:98:be:fb:89:c5:69:6d:14:a7:5d:bc:f3:9f:
2d:79:f8:03:7c:7f:35:45:18:65:ce:af:74:16:7b:b1:08:41:
d4:ee:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 14:46:31 2024 by rpki-client on console-ams.rpki-client.org