Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136302e302f32342d3234203d3e203138303539.roa
File: 3230322e34332e3136302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier: RdVEHL83JIYZSfHu6MCeA4rCNbTY1Ae6mW67piCUOnY=
Subject key identifier: F5:4F:CB:75:5E:36:DB:1E:2F:F1:B5:C4:CB:87:7F:56:54:6F:8E:82
Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial: 31D5ECE621B909D2B6622D01BA550DD761AD833B
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136302e302f32342d3234203d3e203138303539.roa
Signing time: Fri 24 Nov 2023 03:08:33 +0000
ROA not before: Fri 24 Nov 2023 03:03:33 +0000
ROA not after: Fri 22 Nov 2024 03:08:33 +0000
asID: 18059
IP address blocks: 202.43.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 18:07:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d5:ec:e6:21:b9:09:d2:b6:62:2d:01:ba:55:0d:d7:61:ad:83:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Validity
Not Before: Nov 24 03:03:33 2023 GMT
Not After : Nov 22 03:08:33 2024 GMT
Subject: CN=F54FCB755E36DB1E2FF1B5C4CB877F56546F8E82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:a1:fa:ee:bd:32:47:6e:70:bf:36:2c:fe:
79:75:7c:aa:c5:97:9d:ca:9e:53:09:ce:15:af:c4:
ea:5d:eb:05:2a:4c:f4:c8:54:eb:d7:92:c4:14:ce:
0e:5a:ea:a8:7f:51:c9:bf:eb:5e:8b:a5:a5:f2:ea:
88:c2:5d:53:ba:f6:c9:42:3e:b5:34:61:d4:31:35:
7d:c1:4e:a7:97:08:14:11:01:cd:06:d0:0e:3b:85:
28:2a:d1:a0:c2:e9:18:9f:4a:f5:bb:86:50:ef:04:
77:33:fe:3b:cb:b4:c5:bc:79:8b:1c:15:66:7b:9f:
d6:68:4c:28:47:31:df:82:ba:a8:b6:a3:30:31:03:
37:0e:90:8c:46:af:56:5c:b5:22:c1:bf:ad:65:ec:
c6:97:7b:e3:73:bf:d4:9f:e3:db:3b:a3:35:8d:13:
11:00:c8:7a:47:2a:0d:d4:38:84:21:08:f9:07:cf:
9e:b6:a4:43:f3:72:67:03:a6:fc:e1:ff:9d:41:af:
4c:65:55:dd:ae:45:85:b0:76:c5:fd:91:26:8a:b1:
39:fb:05:98:aa:92:14:d5:da:14:13:b0:c7:bd:9f:
dc:63:14:6a:55:e6:27:a2:26:cc:ec:71:ce:f1:b4:
41:26:29:e9:ba:65:25:5d:36:82:a0:b6:64:e6:bb:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4F:CB:75:5E:36:DB:1E:2F:F1:B5:C4:CB:87:7F:56:54:6F:8E:82
X509v3 Authority Key Identifier:
keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136302e302f32342d3234203d3e203138303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.43.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1c:74:c0:73:bf:23:19:62:d4:6a:76:5d:56:95:80:1a:2b:
e0:6f:20:38:60:b2:23:2c:4c:60:90:32:14:b2:fc:8c:6d:1a:
cc:1c:98:ea:20:85:62:b2:c9:08:21:5e:24:da:d9:9e:70:e3:
c7:f8:84:c7:20:69:af:86:7f:b2:8e:f8:6a:81:93:db:c2:48:
04:ce:92:41:00:3e:f5:e3:b8:5d:f7:2a:8e:3f:6e:dc:88:c7:
9f:ad:2b:43:76:6f:51:61:3f:ed:d0:35:4b:cf:8d:8e:db:15:
8e:db:d1:69:7c:10:57:ec:23:33:2e:98:11:f9:fb:1b:4d:53:
e3:ac:17:6e:3e:98:bb:2c:80:f8:b2:0e:c2:eb:81:39:df:ee:
42:10:80:40:42:b1:1f:55:ab:fb:76:3e:5a:a6:7f:7a:1a:22:
6e:54:73:c0:1f:44:64:34:d0:8a:29:72:7d:9e:af:aa:08:af:
af:54:ff:9e:60:41:e7:17:02:d8:4e:d2:96:1f:bf:de:4e:86:
ae:8e:56:82:5d:94:d1:e7:c3:cf:75:00:25:f9:28:4d:dc:f2:
c3:4d:4b:ea:b8:38:99:de:7d:69:ba:55:85:36:f0:2e:2e:cf:
de:89:58:a5:00:d3:f5:89:6d:d9:74:ac:a5:ed:6d:7e:28:88:
1f:6a:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 20:57:34 2024 by rpki-client on console-fra.rpki-client.org