Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34332e3235322e3135382e302f32342d3234203d3e20313439373436.roa
File: 34332e3235322e3135382e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier: XrP3I0vKyOswNDopRB063emOFT3CSgZ5POwpuarjnzc=
Subject key identifier: 42:9E:5E:DF:9C:BE:C4:20:C7:AE:D6:D4:AA:56:38:D5:D0:3D:5E:B0
Certificate issuer: /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial: 7D0E0FF16DA28D07D17D5934525A86C35F8C6151
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34332e3235322e3135382e302f32342d3234203d3e20313439373436.roa
Signing time: Thu 07 Dec 2023 03:16:08 +0000
ROA not before: Thu 07 Dec 2023 03:11:08 +0000
ROA not after: Thu 05 Dec 2024 03:16:08 +0000
asID: 149746
IP address blocks: 43.252.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 17:50:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0e:0f:f1:6d:a2:8d:07:d1:7d:59:34:52:5a:86:c3:5f:8c:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C00163880F235714759920507217F2A7D557C953
Validity
Not Before: Dec 7 03:11:08 2023 GMT
Not After : Dec 5 03:16:08 2024 GMT
Subject: CN=429E5EDF9CBEC420C7AED6D4AA5638D5D03D5EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:60:66:88:f5:36:d2:15:e3:48:e2:6b:be:
bb:39:86:0b:ea:8f:ae:f3:18:79:34:22:f8:68:11:
7e:35:7d:18:9d:26:d0:4d:db:b9:4e:dd:52:0a:b9:
f0:60:2c:a3:57:79:4b:a7:73:67:ab:ab:c4:2e:48:
0d:74:25:fe:1d:47:27:14:e3:28:d2:66:a1:b1:92:
93:1c:80:48:cc:87:3a:47:30:8f:b2:97:be:53:73:
e3:9d:d9:d7:18:28:4c:0e:ff:b3:0e:b0:51:69:11:
c5:86:22:29:f6:9d:9c:1e:93:17:c7:92:1c:94:7f:
68:20:d7:34:72:a7:21:b3:a7:b4:84:d3:ca:33:14:
62:97:5d:16:a4:3f:85:ae:e6:6b:1e:35:84:81:1b:
cc:0c:62:ac:0e:bc:d1:da:63:0b:9a:7b:27:ca:f5:
f6:7e:9d:93:92:3d:0d:46:aa:30:33:52:8d:ae:a3:
88:a5:a0:a8:30:30:6e:53:39:c4:e8:b7:72:b1:8c:
d1:00:c9:4c:5e:ae:25:67:ac:4f:cd:1a:32:49:9a:
1c:9a:93:90:fa:70:91:e4:84:0e:79:27:08:71:6c:
09:a1:a8:ab:b0:89:33:36:18:8e:07:3b:82:14:4e:
62:12:c3:fc:2f:35:36:7d:49:b1:a5:94:6a:97:0e:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:5E:DF:9C:BE:C4:20:C7:AE:D6:D4:AA:56:38:D5:D0:3D:5E:B0
X509v3 Authority Key Identifier:
keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/34332e3235322e3135382e302f32342d3234203d3e20313439373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.252.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ae:a2:fe:a1:80:97:92:d3:8a:1e:06:72:5b:a0:17:b9:73:
3b:d7:df:ea:b3:0d:bd:f7:06:df:9e:37:cf:5f:d4:a1:e6:28:
75:80:4f:e2:92:8c:f1:da:bb:6e:40:6d:74:7c:2b:53:04:cf:
d1:33:e3:44:64:92:cd:d6:e4:54:e0:b2:f1:f3:b7:de:38:57:
1b:6c:54:59:8e:a9:38:aa:6d:8f:e1:ca:a2:1b:f7:87:02:48:
89:95:27:8c:fb:28:e9:c6:58:1a:70:69:64:d6:d9:1d:d1:5c:
83:dc:3c:5a:2d:e9:41:8e:67:d2:ba:dc:bd:04:bd:c4:58:97:
67:ec:64:d3:2d:4f:bd:48:9f:5f:1b:de:64:13:5c:73:7c:ce:
c6:b4:8b:ca:19:1d:2a:d9:de:ba:1e:a3:bb:97:79:ff:e1:e0:
81:58:1a:3c:a4:ba:fb:b3:31:ec:54:d7:0c:4a:ba:0b:cf:06:
59:83:01:bc:5b:d7:4c:75:3b:88:b9:1d:b1:a8:aa:cb:61:86:
45:d3:8e:03:c1:b9:bd:65:06:bd:83:75:9f:48:4e:13:db:83:
cc:f7:27:ba:13:8d:33:85:69:0e:af:39:e9:46:c9:a4:1e:b1:
2f:5d:c6:ae:3c:12:a1:82:70:a1:a2:88:04:e2:0a:72:ff:ff:
11:26:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org