Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e203234323036.roa
File: 3230332e38342e3133372e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier: AvEFilgKZIBjSWNfYiQwyCIzCycSySRUJyMZQjtEvyw=
Subject key identifier: 8B:0D:DF:CE:EB:04:25:DC:22:C7:16:1B:7C:3B:B0:FE:F9:64:54:17
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 7337B40DB2BAFDB3953314BA3EECDB21C4E6F240
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e203234323036.roa
Signing time: Tue 23 Jul 2024 11:46:22 +0000
ROA not before: Tue 23 Jul 2024 11:41:22 +0000
ROA not after: Tue 22 Jul 2025 11:46:22 +0000
asID: 24206
IP address blocks: 203.84.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 03:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:37:b4:0d:b2:ba:fd:b3:95:33:14:ba:3e:ec:db:21:c4:e6:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Jul 23 11:41:22 2024 GMT
Not After : Jul 22 11:46:22 2025 GMT
Subject: CN=8B0DDFCEEB0425DC22C7161B7C3BB0FEF9645417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:de:da:e5:ae:c4:8f:50:a1:b2:41:03:c9:
32:1e:d6:01:14:c1:0e:3b:b7:06:6e:57:2f:23:25:
b0:eb:e5:9c:f2:2f:87:43:27:53:20:1f:66:56:f1:
7c:09:33:f5:69:8e:88:46:21:58:81:67:7f:e7:58:
01:bc:92:b4:c8:85:94:f1:31:b7:01:d2:ce:50:9d:
47:7d:79:2f:06:99:c6:5a:ce:eb:31:2c:45:09:8f:
2f:8c:fb:b3:7a:aa:34:7d:b3:6b:4e:8d:c5:cf:9c:
6e:f6:ee:3c:71:8c:75:92:70:9b:b8:a5:fe:c2:18:
8b:49:54:24:d5:9b:f3:98:d4:2c:a7:6b:78:29:40:
66:bd:f3:7f:d3:37:13:6b:3d:96:2e:b9:ca:32:c6:
c4:4d:7d:5a:f5:98:62:c7:ee:74:0c:43:11:7c:77:
c8:b4:2b:f0:a4:52:7d:2b:1b:a8:34:ee:ea:fb:83:
1b:e5:2d:5e:41:da:8d:b7:68:c9:7c:2e:25:bb:06:
82:99:c7:0b:aa:53:5a:5f:1e:33:d4:a9:35:6d:9d:
b2:0d:48:4a:c9:ef:05:a9:79:8f:f9:88:60:5b:4e:
ca:00:39:89:46:6e:c1:99:a2:93:1f:85:c5:a8:02:
73:28:6d:22:c9:c7:e0:ab:e6:d9:26:ff:e6:27:6f:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0D:DF:CE:EB:04:25:DC:22:C7:16:1B:7C:3B:B0:FE:F9:64:54:17
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.137.0/24
Signature Algorithm: sha256WithRSAEncryption
99:61:cc:e2:28:a7:cd:33:dc:0f:a0:b1:54:bb:b9:69:06:53:
a7:94:75:89:b7:c8:23:9c:b2:f9:47:fc:fa:02:23:2f:8d:f4:
32:24:4e:d4:fc:f8:ee:3c:0e:42:de:12:e1:c9:d6:b6:e5:bd:
1f:b7:70:c3:9d:01:16:86:b9:75:5c:9c:c8:0c:e7:2e:1c:35:
d4:36:40:b9:10:10:f8:38:35:0e:4e:76:c4:b8:1e:fa:b0:59:
ca:d5:57:78:6f:08:60:92:c8:74:f9:ce:15:d1:70:86:25:4d:
44:46:a1:a3:c6:5f:34:66:14:a1:71:39:a1:75:1c:b1:3a:85:
39:7f:e2:76:d4:a2:2e:cf:a3:72:4e:ce:b9:fb:14:9d:47:14:
d6:2e:95:0f:a1:27:0e:f7:73:60:3a:d5:a9:a8:ea:da:94:f7:
3b:5a:d9:d0:22:f9:be:e1:8a:25:60:01:9d:43:6a:ea:4b:76:
43:bd:03:48:bb:d7:72:81:88:d6:c0:72:02:aa:5c:be:cf:94:
e3:d2:20:d7:40:dc:25:cb:6d:7e:81:d5:57:05:af:bf:48:de:
5f:de:07:94:4e:b7:bf:4a:95:ef:4a:bf:4f:2f:fd:43:88:c7:
a5:af:12:1b:20:a4:b0:47:67:56:68:b5:67:52:5d:88:f2:9f:
f2:09:1a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 06:09:41 2024 by rpki-client on console-fra.rpki-client.org