Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20313338383433.roa
File: 3230332e38342e3133382e302f32342d3234203d3e20313338383433.roa (raw, json)
Hash identifier: O/0DAw+83O2vTrnonc9I1cY3/NeQFYrSyljj5/iOvXg=
Subject key identifier: 4F:1D:3A:4D:08:30:36:16:13:59:E6:48:7F:E7:A7:47:0C:1D:F0:37
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 62A9E403BC8F83D0222AC426049C10D428C6814C
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20313338383433.roa
Signing time: Sun 21 Jul 2024 15:15:42 +0000
ROA not before: Sun 21 Jul 2024 15:10:42 +0000
ROA not after: Sun 20 Jul 2025 15:15:42 +0000
asID: 138843
IP address blocks: 203.84.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 11:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a9:e4:03:bc:8f:83:d0:22:2a:c4:26:04:9c:10:d4:28:c6:81:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Jul 21 15:10:42 2024 GMT
Not After : Jul 20 15:15:42 2025 GMT
Subject: CN=4F1D3A4D083036161359E6487FE7A7470C1DF037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:ba:79:de:53:e5:2d:d2:94:d8:e6:6e:14:
21:90:cf:ae:3c:89:a0:82:1e:ef:50:b4:f6:93:f9:
4b:96:3b:8d:5f:96:8a:cb:c9:0a:a4:f3:61:f6:59:
b2:e9:2b:c3:b8:50:8e:e7:e5:23:14:56:15:8a:10:
2d:3e:5f:6b:22:d6:20:c6:70:76:5d:db:7c:d4:35:
8c:93:ee:a4:5e:c6:78:89:4c:db:d7:3e:87:ef:60:
4b:b4:44:96:9b:0b:46:90:b0:a7:ed:03:0b:56:95:
8e:1a:17:58:e6:2d:9c:4b:be:00:1b:cb:4e:0a:64:
c8:5b:ba:22:d2:2d:78:50:e4:1e:06:ec:79:04:b0:
8d:f5:a8:34:a5:9b:bb:9a:a6:97:7f:23:b7:70:22:
ba:1d:4f:bc:61:5b:34:27:6c:57:b2:00:b1:69:3a:
d9:30:ec:a8:cf:a2:8b:17:22:2e:46:fd:ae:23:78:
0d:2c:4b:10:91:a1:35:2d:45:ad:d3:b7:e2:63:c1:
a8:0d:41:7c:b5:3d:b0:59:4c:b9:44:7c:11:98:1b:
06:3d:84:17:21:e9:d4:fb:c1:41:b7:ec:3f:91:f7:
7c:bd:a9:3f:e2:0d:03:91:d9:7f:55:ed:b8:77:d9:
eb:4b:82:4f:cf:7d:e9:4b:a1:09:56:ec:db:ce:82:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1D:3A:4D:08:30:36:16:13:59:E6:48:7F:E7:A7:47:0C:1D:F0:37
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133382e302f32342d3234203d3e20313338383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.138.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cf:df:b0:05:a0:d1:50:35:f8:12:f4:40:b9:3b:8f:41:e6:
85:51:49:d9:63:bd:38:e8:d1:a1:25:1e:49:fd:e3:4d:11:22:
ec:d9:8d:f3:66:bf:47:dd:fe:90:d2:0e:2a:da:10:80:2b:de:
59:e3:97:56:6e:4d:0f:0e:27:f0:0d:49:26:de:13:5d:6f:02:
89:3c:7f:26:15:a1:3c:75:3e:ab:03:24:7d:2e:79:ee:3f:12:
7f:7e:61:27:fc:3c:b2:a3:52:8c:98:75:f0:9c:3d:aa:5c:06:
95:a7:08:15:b2:4f:cc:6d:7e:4a:1e:a3:c4:47:00:d8:6e:5c:
e8:8e:50:9e:11:4d:e7:65:3f:e1:26:92:e2:59:9a:c5:8b:ae:
9f:03:4a:c8:34:98:0a:9c:71:e5:50:6c:c9:0d:51:15:19:17:
f8:86:c1:dd:67:b5:7d:27:41:41:d5:99:b7:f0:ab:57:56:7a:
80:48:12:e9:a6:b4:61:05:1e:56:a8:ad:e8:15:b9:0b:88:75:
7e:07:e6:91:06:f0:53:c2:c5:bc:dd:0e:56:e3:e5:f9:90:26:
fa:7e:6d:47:9e:00:bb:f0:df:66:ff:b6:dc:0f:09:fa:f3:77:
c5:62:da:b6:59:be:af:3e:bb:63:7a:15:be:0b:e6:a6:5e:07:
84:ab:fc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 14:46:31 2024 by rpki-client on console-ams.rpki-client.org