Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138.roa
File: 3132322e3132382e32392e302f32342d3234203d3e203138.roa (raw, json)
Hash identifier: vsuyXPuO5ZWTk54/q3ar0WD/uNoObKM7sq/PeFKjVrQ=
Subject key identifier: 48:4E:9D:6A:85:0D:64:D3:F6:E2:7F:F2:DE:1A:CF:DF:B6:2D:73:0D
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 0DC167667B03635CA6E97A7724AF46EDF5EC33C6
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138.roa
Signing time: Wed 22 Nov 2023 10:31:37 +0000
ROA not before: Wed 22 Nov 2023 10:26:37 +0000
ROA not after: Wed 20 Nov 2024 10:31:37 +0000
asID: 18
IP address blocks: 122.128.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 14:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:c1:67:66:7b:03:63:5c:a6:e9:7a:77:24:af:46:ed:f5:ec:33:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Nov 22 10:26:37 2023 GMT
Not After : Nov 20 10:31:37 2024 GMT
Subject: CN=484E9D6A850D64D3F6E27FF2DE1ACFDFB62D730D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:98:61:df:18:8e:5f:b6:20:74:52:e3:4f:
ec:62:21:f3:e9:9f:f8:a9:84:2b:01:21:39:a3:fc:
7d:91:d1:ac:cf:6b:04:8e:63:96:5d:b3:25:f8:47:
2b:6b:61:5c:25:71:d9:c2:50:35:f1:ad:ce:26:d6:
14:6f:85:89:c2:d8:32:d5:ea:7d:20:55:08:47:1f:
9c:07:e0:49:70:d0:7a:e4:ee:fd:dd:77:71:ba:6d:
6e:67:c4:3e:90:65:9d:25:d5:34:af:6c:df:a9:ce:
6c:91:e4:2e:c1:3d:3d:61:74:93:71:57:9a:fd:9d:
ef:66:ed:a9:32:97:6b:8b:8d:ac:4c:97:ea:07:c6:
32:4b:c8:d5:3d:91:3c:4b:53:64:b5:84:b6:d9:c0:
ad:96:07:05:a7:2a:4a:2e:47:ce:1c:60:78:ab:a9:
e6:67:c3:1b:b9:1b:8a:8c:b2:6d:92:6f:47:ca:f7:
b7:e8:99:1a:a8:22:fb:7d:74:2e:87:90:79:47:2d:
6f:12:2a:3a:71:a2:77:0a:8d:84:b5:bb:6f:4f:f8:
9c:0d:8c:b1:ee:dc:38:2e:2c:0d:6e:0f:f2:11:46:
f8:32:53:9a:f6:b9:a3:fb:bf:9e:bb:46:3a:d3:28:
5f:8e:83:c8:dc:88:bd:9f:70:05:4e:d4:bd:d0:5c:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4E:9D:6A:85:0D:64:D3:F6:E2:7F:F2:DE:1A:CF:DF:B6:2D:73:0D
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3132322e3132382e32392e302f32342d3234203d3e203138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.128.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ee:53:98:95:e2:49:22:00:f4:e0:f5:29:8a:44:f9:e1:5e:
5e:c8:26:b9:7f:88:02:79:6a:2f:a3:e5:36:c1:af:07:a8:00:
1c:68:6e:2b:26:bb:fd:72:fb:65:43:7a:ac:60:31:47:b9:73:
61:d6:52:3b:c9:55:b6:e0:5f:68:1c:bc:d3:23:89:54:01:73:
c4:dc:8d:30:bd:7d:15:01:b3:e3:c5:97:31:c6:82:cd:5e:c5:
97:a9:29:2d:e9:4f:12:01:9e:a4:8b:b8:4f:16:6b:13:82:dd:
ed:c3:5b:b4:fc:92:b8:a8:5f:4b:82:e8:c9:57:c2:92:1d:b9:
ae:f5:12:a5:43:5a:20:b5:ee:da:23:18:f5:9b:fe:da:68:61:
67:18:49:e9:9c:f1:75:26:11:a6:d2:86:29:ed:f4:e2:05:81:
6b:38:84:ad:39:11:ee:12:70:59:2f:02:57:98:57:7f:bf:ff:
25:08:7c:e8:c4:e6:ff:6e:4b:82:20:f0:bc:c9:90:04:df:00:
d2:a4:49:f7:fe:14:ca:7c:f8:54:d1:ce:24:e6:e1:59:5e:78:
cd:55:78:63:38:c1:b1:13:76:b2:2f:a5:d6:b5:c0:fa:45:db:
d0:57:c4:12:74:57:aa:c1:aa:1b:b6:34:49:8a:51:fb:60:5d:
76:a3:4c:72
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUDcFnZnsDY1ym6Xp3JK9G7fXsM8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2
QzhBMUQ4RTAeFw0yMzExMjIxMDI2MzdaFw0yNDExMjAxMDMxMzdaMDMxMTAvBgNV
BAMTKDQ4NEU5RDZBODUwRDY0RDNGNkUyN0ZGMkRFMUFDRkRGQjYyRDczMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FZhh3xiOX7YgdFLjT+xiIfPp
n/iphCsBITmj/H2R0azPawSOY5ZdsyX4RytrYVwlcdnCUDXxrc4m1hRvhYnC2DLV
6n0gVQhHH5wH4Elw0Hrk7v3dd3G6bW5nxD6QZZ0l1TSvbN+pzmyR5C7BPT1hdJNx
V5r9ne9m7akyl2uLjaxMl+oHxjJLyNU9kTxLU2S1hLbZwK2WBwWnKkouR84cYHir
qeZnwxu5G4qMsm2Sb0fK97fomRqoIvt9dC6HkHlHLW8SKjpxoncKjYS1u29P+JwN
jLHu3DguLA1uD/IRRvgyU5r2uaP7v567RjrTKF+Og8jciL2fcAVO1L3QXLhbAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUSE6daoUNZNP24n/y3hrP37Ytcw0wHwYDVR0j
BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1
MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB
MUQ4RS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI4MzY3NjMtMTJiNi00ZDhmLWFk
MGItNGNkNWI2MTk1OWVmLzAvMzEzMjMyMmUzMTMyMzgyZTMyMzkyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAeoAdMA0GCSqGSIb3DQEBCwUA
A4IBAQCi7lOYleJJIgD04PUpikT54V5eyCa5f4gCeWovo+U2wa8HqAAcaG4rJrv9
cvtlQ3qsYDFHuXNh1lI7yVW24F9oHLzTI4lUAXPE3I0wvX0VAbPjxZcxxoLNXsWX
qSkt6U8SAZ6ki7hPFmsTgt3tw1u0/JK4qF9LgujJV8KSHbmu9RKlQ1ogte7aIxj1
m/7aaGFnGEnpnPF1JhGm0oYp7fTiBYFrOIStORHuEnBZLwJXmFd/v/8lCHzoxOb/
bkuCIPC8yZAE3wDSpEn3/hTKfPhU0c4k5uFZXnjNVXhjOMGxE3ayL6XWtcD6RdvQ
V8QSdFeqwaobtjRJilH7YF12o0xy
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org