Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32332d3233203d3e20313338383433.roa
File: 3230332e38342e3133382e302f32332d3233203d3e20313338383433.roa (raw, json)
Hash identifier: nnI4WQn7vab8N5T2pemkgh0uZL4kECaWUj8Txm+QT/c=
Subject key identifier: 08:DF:7D:2F:68:6D:42:28:C5:39:29:6D:3E:F4:1A:3A:CB:E7:BA:BE
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 0B3EE5A519BEE7234CE27C2347BFD154A71E5B26
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32332d3233203d3e20313338383433.roa
Signing time: Sun 21 Jul 2024 15:17:16 +0000
ROA not before: Sun 21 Jul 2024 15:12:16 +0000
ROA not after: Sun 20 Jul 2025 15:17:16 +0000
asID: 138843
IP address blocks: 203.84.138.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 23 Jul 2024 11:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:3e:e5:a5:19:be:e7:23:4c:e2:7c:23:47:bf:d1:54:a7:1e:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Jul 21 15:12:16 2024 GMT
Not After : Jul 20 15:17:16 2025 GMT
Subject: CN=08DF7D2F686D4228C539296D3EF41A3ACBE7BABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:32:c2:9d:83:58:b7:56:a5:1d:8e:61:b0:
df:41:90:d6:5f:5b:48:3c:4f:57:ea:9d:55:21:b0:
c1:90:ad:9f:f1:b1:00:6c:04:a4:7d:c7:35:c3:c4:
b8:1b:9b:67:40:3b:2f:be:43:4d:4d:8d:4f:a8:81:
5f:28:ad:a2:36:66:b9:c8:6d:b7:89:43:49:fa:6c:
0f:de:2a:87:6c:57:a6:c9:8d:d3:d9:9a:d7:ae:e0:
bd:a5:bf:41:89:d0:4c:d4:9a:19:79:99:57:2b:6c:
a0:40:77:59:af:62:df:32:22:ed:9a:d1:49:d9:62:
dd:2f:82:1e:80:cf:9e:92:67:74:ff:6b:dd:59:52:
9d:f1:cb:ff:97:63:c4:ad:a7:87:8c:b8:18:c9:27:
5b:61:aa:3a:44:02:22:cd:f6:63:ca:b4:55:cc:a6:
8a:77:8b:ba:36:9b:a1:d2:52:18:ae:6e:45:c6:15:
62:55:0f:c2:ad:ce:9a:3b:be:cf:85:70:9a:8f:63:
10:44:1a:0b:c8:16:27:a9:62:26:d2:3a:95:48:a3:
9d:1a:6d:4c:0b:02:7f:0f:91:6b:77:16:c3:9c:8a:
30:57:14:06:9c:12:49:9e:8b:0a:e1:31:2f:28:73:
0f:08:1b:9f:31:54:f7:67:66:95:58:d1:52:c0:da:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DF:7D:2F:68:6D:42:28:C5:39:29:6D:3E:F4:1A:3A:CB:E7:BA:BE
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32332d3233203d3e20313338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:21:2c:92:28:37:f7:03:0f:2c:5c:cc:d0:c1:69:ac:67:e5:
7b:d5:6b:b3:d4:68:97:c9:a9:11:fc:d2:5f:54:d6:b7:11:14:
89:96:dd:f5:f5:c6:db:01:4c:35:40:b6:04:78:57:2c:59:79:
f2:66:d7:c6:b6:1c:46:16:27:1e:fa:64:11:cd:dc:c7:f1:05:
ac:14:b7:a7:9a:84:e4:23:19:fc:16:ed:ff:d2:fa:08:07:a3:
d8:20:db:c2:a4:cc:e4:3c:60:8a:be:e4:c4:c4:f1:54:d7:c9:
0c:72:70:bd:a1:aa:ac:9c:9b:7b:5e:a5:ae:1b:ee:5e:05:0a:
3b:51:af:8b:8a:08:84:f3:69:11:1e:77:6a:fe:68:36:79:50:
24:d5:4d:1b:7c:13:88:62:74:b5:12:3e:2f:14:66:f6:85:bd:
1c:27:8d:45:79:34:0d:99:94:58:04:d7:d9:2b:1d:0e:b5:25:
86:a6:71:2e:e5:a6:c6:9a:af:cd:2f:a1:2e:48:60:4c:e3:21:
fd:ab:c0:93:ce:ad:e8:5c:6c:1d:de:ca:11:86:6c:94:7d:a4:
75:11:2e:16:a0:d6:57:3b:53:45:8c:be:ff:6f:77:ae:d8:a7:
05:5f:c6:8a:c3:79:6a:1f:95:f8:f3:49:1e:ef:e9:ad:68:55:
09:05:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 14:10:13 2024 by rpki-client on console-fra.rpki-client.org