Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e203437363932.roa
File: 3230322e35312e35382e302f32342d3234203d3e203437363932.roa (raw, json)
Hash identifier: q94p84SUE9W83+ijo7S8vKqGsIfQETpVKfrRavdqvcw=
Subject key identifier: 88:06:18:D0:0A:F6:3F:05:0B:67:93:EA:62:4E:4B:13:FE:55:BB:11
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 2B66EB7C2C733AF981793499EDCEF4D0D9EAF7A9
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e203437363932.roa
Signing time: Wed 24 Jul 2024 15:37:02 +0000
ROA not before: Wed 24 Jul 2024 15:32:02 +0000
ROA not after: Wed 23 Jul 2025 15:37:02 +0000
asID: 47692
IP address blocks: 202.51.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Feb 2025 05:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:66:eb:7c:2c:73:3a:f9:81:79:34:99:ed:ce:f4:d0:d9:ea:f7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Jul 24 15:32:02 2024 GMT
Not After : Jul 23 15:37:02 2025 GMT
Subject: CN=880618D00AF63F050B6793EA624E4B13FE55BB11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:73:c8:17:e5:99:48:b9:c0:cb:79:9c:7f:
14:67:41:b5:54:3c:6d:a6:ed:fb:3f:0a:ea:46:0a:
eb:a3:ef:5f:0e:4b:19:28:5c:88:04:8c:e7:4b:99:
b1:52:be:18:b1:55:8a:86:ee:c5:b2:77:1e:55:5f:
dd:9f:5e:6d:c8:4e:0a:d3:15:b7:7f:ff:f3:59:b4:
10:89:1e:f4:84:74:11:32:17:39:ae:95:4a:34:f0:
5d:a9:4b:71:81:85:8e:d5:a0:dd:bf:f1:77:d6:78:
85:23:ad:d4:dd:3c:b5:8c:3c:d2:0a:c8:0f:7d:b7:
4c:5f:5f:45:d4:be:8d:a1:fd:c1:3a:3b:d1:79:52:
85:06:d9:b4:33:2a:e1:81:65:c0:22:9c:51:4b:28:
50:52:5b:a6:ae:71:a6:dd:b7:96:db:47:aa:3e:05:
8d:d5:5c:42:33:d5:19:80:72:88:1b:64:10:71:58:
3a:eb:67:e0:16:93:29:29:f7:46:69:6e:64:d0:8f:
b8:77:7c:e9:c7:12:49:f8:ff:02:80:b0:81:35:20:
47:12:17:63:38:c2:0c:9f:18:01:c5:48:46:bf:34:
24:cb:4c:da:5e:a0:7a:98:02:aa:b6:1b:41:24:5c:
40:91:40:29:d5:b0:e0:77:22:a1:f6:1b:06:4b:f7:
b0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:06:18:D0:0A:F6:3F:05:0B:67:93:EA:62:4E:4B:13:FE:55:BB:11
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e203437363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.58.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b0:20:15:12:fc:3d:ff:d4:5c:14:3a:c7:e3:da:9d:92:e7:
6f:f4:a4:c3:ac:c9:94:8c:b4:ba:07:19:44:dd:47:7d:20:6d:
d9:b6:a4:b9:82:23:14:f0:62:ff:52:ab:c4:15:28:20:c9:cf:
be:89:b3:13:99:3d:5f:f9:14:fe:71:c4:70:cb:7e:69:e2:36:
19:bf:a6:0e:df:7c:56:69:ec:ef:76:52:b3:a1:fc:8d:69:91:
f7:24:fc:8c:43:d9:41:72:ae:09:da:40:ae:21:98:cf:8c:24:
70:55:29:e6:53:94:f3:ca:f1:a4:df:5c:84:a5:34:9b:fe:d7:
44:87:ad:07:69:9f:3f:d1:76:a2:50:a8:a6:35:c3:e8:89:1f:
a5:e6:3e:f9:95:19:a4:0b:6b:82:04:16:b8:20:7d:6f:6c:2a:
8b:61:73:1f:b0:25:96:45:ed:92:d1:f3:f5:49:d8:90:50:a9:
be:99:4b:85:86:40:1c:98:f0:72:98:eb:a4:9b:b9:8c:3c:99:
2b:f6:68:a7:fc:df:df:8d:0c:1b:e9:de:50:a7:93:e9:c7:0b:
0a:12:3a:1c:30:c3:c4:86:ec:33:1c:b9:60:b9:87:f5:55:84:
09:d4:04:e9:d3:01:bc:57:5e:7b:7a:20:59:eb:aa:08:3d:97:
54:5e:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:03 2025 by rpki-client