Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134322e302f32342d3234203d3e203234323036.roa
File: 3230332e38342e3134322e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier: jhT0AdC9qk4gMF84AIAzH0ok7xSnOAuJ5OntURH2xMU=
Subject key identifier: BB:88:0E:3A:6B:40:1B:31:47:92:C5:4A:E3:D6:DE:59:26:C5:26:90
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 69B18F017F0088380BD71F45DE20069DA87197BB
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134322e302f32342d3234203d3e203234323036.roa
Signing time: Fri 30 Aug 2024 16:00:01 +0000
ROA not before: Fri 30 Aug 2024 15:55:01 +0000
ROA not after: Fri 29 Aug 2025 16:00:01 +0000
asID: 24206
IP address blocks: 203.84.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 02:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b1:8f:01:7f:00:88:38:0b:d7:1f:45:de:20:06:9d:a8:71:97:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Aug 30 15:55:01 2024 GMT
Not After : Aug 29 16:00:01 2025 GMT
Subject: CN=BB880E3A6B401B314792C54AE3D6DE5926C52690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:5e:42:60:92:89:58:2f:f8:2e:c5:41:5a:
c5:ca:c6:9f:4a:40:35:8a:46:41:87:d1:c7:6f:e9:
75:12:2d:d5:5b:0a:91:bb:97:80:3d:0e:22:f8:9e:
bb:dd:4a:17:91:cb:0e:ee:88:52:8a:2f:97:23:79:
3a:68:67:7b:e1:ec:0c:67:ec:37:05:1c:c3:ca:42:
56:bf:f5:79:e6:2b:6c:91:9c:f8:49:d1:7b:bf:ba:
b7:95:2d:44:90:fb:e3:39:81:39:1b:27:a1:40:2c:
32:42:62:91:bf:5c:ea:aa:bb:31:84:93:d1:2f:51:
96:e6:60:2b:72:a2:4f:08:1c:05:93:9a:61:d7:b2:
72:45:1d:68:25:c6:96:2a:1d:3e:82:8f:8c:44:c5:
48:99:a2:dd:ad:ac:ef:39:28:aa:ca:8e:95:27:31:
17:3f:f2:79:a9:f9:9d:ce:0b:f6:19:76:00:b3:60:
ec:cc:bb:79:10:4f:7e:db:2b:a9:20:47:cf:e8:b0:
e3:07:a3:34:1f:4f:5b:15:04:97:62:bb:bc:dc:49:
c2:cd:47:0f:9b:9e:ea:9e:28:a1:79:27:93:06:33:
a4:7e:2b:4f:92:23:e8:28:0a:d7:69:a2:c2:d5:e5:
30:14:fe:11:f2:86:03:6c:34:27:19:99:21:7b:05:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:88:0E:3A:6B:40:1B:31:47:92:C5:4A:E3:D6:DE:59:26:C5:26:90
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3134322e302f32342d3234203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.142.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0c:31:23:05:d3:1c:5d:4a:8c:66:ca:2b:3d:11:d9:a0:22:
12:29:8d:a3:44:d0:d9:19:b7:ec:48:2c:ec:7e:0c:6a:98:e0:
f1:1c:8d:ef:c5:a2:28:47:8f:fa:3b:f3:7d:63:6b:85:d2:73:
b8:b7:da:3a:64:37:a6:9d:3a:c8:94:0a:af:fb:73:b4:b8:03:
08:a0:26:dd:ff:43:1e:af:78:b7:19:a3:c7:b9:46:c1:0c:fc:
ef:dc:31:da:c5:52:bd:bf:25:5c:43:aa:84:3d:c4:39:81:e7:
ef:61:65:2e:bd:4e:44:b6:37:75:99:e3:90:67:a9:05:5b:68:
69:71:b3:a1:e3:d9:d5:ab:af:eb:bf:11:62:05:86:bb:ee:b8:
9b:6b:4a:1b:e1:2a:1f:cf:84:b6:db:75:6f:6f:5c:7b:03:43:
8a:f7:a1:de:02:57:e6:3a:62:81:b9:9a:ff:d4:80:7d:4f:6e:
2c:e5:ba:a8:1b:c5:d0:bb:45:7a:11:8e:25:48:b2:d8:07:e8:
77:5d:81:7f:48:92:9b:cd:38:b3:e6:b8:d8:51:04:3d:98:27:
83:de:35:84:41:9f:f0:8b:69:03:36:93:ff:d6:a7:b1:2b:23:
58:80:87:30:16:06:9a:55:5b:cf:e4:b2:34:d2:4d:21:17:65:
8e:a3:2f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 04:15:26 2024 by rpki-client on console-ams.rpki-client.org