Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e2039333236.roa
File: 3131382e3135312e3232332e302f32342d3234203d3e2039333236.roa (raw, json)
Hash identifier: qF8rZKeg5eSMW7/8nFJ5qDPDevyrtGU4pWOqENGpj7I=
Subject key identifier: 70:23:5B:2E:33:AA:18:96:55:16:27:BF:66:EA:BF:E6:12:43:44:FD
Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
Certificate serial: 25EF02C98F2B89A1A61C3F5F2EAFFC9609C20387
Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e2039333236.roa
Signing time: Wed 07 Jun 2023 10:19:34 +0000
ROA not before: Wed 07 Jun 2023 10:14:34 +0000
ROA not after: Wed 05 Jun 2024 10:19:34 +0000
asID: 9326
IP address blocks: 118.151.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 20:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ef:02:c9:8f:2b:89:a1:a6:1c:3f:5f:2e:af:fc:96:09:c2:03:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
Validity
Not Before: Jun 7 10:14:34 2023 GMT
Not After : Jun 5 10:19:34 2024 GMT
Subject: CN=70235B2E33AA1896551627BF66EABFE6124344FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:83:0d:3e:c4:49:ed:95:e8:47:be:db:55:
92:5a:32:43:43:df:8f:68:f2:14:6c:52:b3:0c:de:
0a:06:3f:c8:85:34:c3:5d:9c:aa:64:f9:20:bc:fb:
04:cb:28:e9:ba:03:2a:f1:6e:52:05:21:02:64:93:
7f:e6:b7:36:bd:26:c3:b4:3e:bc:c3:03:1b:27:3d:
99:ae:da:41:ff:2b:48:93:42:a9:f5:5a:93:54:55:
93:55:a2:2c:35:02:13:0f:f9:40:75:1a:57:d9:88:
86:3e:fa:95:4d:6d:8b:e1:66:50:9c:58:03:82:0d:
37:dc:08:d0:0c:34:d3:52:25:80:72:f7:71:81:94:
30:49:36:d8:2f:a3:17:67:9f:c4:e6:d9:77:dc:ae:
d2:23:ea:33:3d:e0:fb:10:af:44:ed:e3:98:24:c7:
c5:29:15:e8:49:f7:4b:65:83:d6:3d:6a:41:ec:5b:
17:a3:4e:14:c2:a1:4c:79:b4:bc:fa:2f:f0:44:ca:
8b:07:5c:04:54:9e:4d:9c:96:fd:db:21:a2:f8:49:
20:c3:5b:4d:83:4c:7e:ec:ac:f4:b6:1a:df:d5:c1:
1e:b3:77:86:8a:12:f5:5f:f4:60:2f:de:bb:9f:f8:
f2:33:67:2b:73:64:5d:74:bf:03:34:4d:06:be:d3:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:5B:2E:33:AA:18:96:55:16:27:BF:66:EA:BF:E6:12:43:44:FD
X509v3 Authority Key Identifier:
keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e2039333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.151.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:43:b9:78:f2:dc:22:86:f1:d8:81:b6:54:8b:63:36:c2:90:
87:b5:17:0a:bd:ce:2d:bd:d3:b8:0c:2a:3d:c4:be:9b:41:c4:
21:ef:6d:f8:5e:eb:1e:69:28:41:10:78:fb:e2:dc:2d:6e:53:
62:67:93:3c:25:33:54:1d:8c:83:68:c7:25:ea:e7:44:c6:39:
85:50:63:8c:f0:93:3b:9d:d7:31:11:72:2a:ec:c1:49:7e:d7:
ae:81:35:a0:c2:d3:01:46:d6:2a:43:bd:ee:9e:a3:46:85:79:
9a:de:00:f1:04:89:92:b8:9e:cf:19:3c:28:38:53:a9:9c:39:
9f:f5:db:ab:8c:40:70:19:6e:be:17:5c:c9:e5:40:43:e3:0c:
b5:99:e8:f9:d0:04:ea:3e:19:93:de:9d:b9:11:88:78:90:57:
80:a2:74:b3:d8:db:ad:18:d3:1e:72:63:d7:53:26:b0:58:b8:
da:b8:9a:24:98:15:58:e5:fe:fb:24:6e:61:ce:18:26:80:fb:
f2:6f:97:c8:10:5d:00:6e:f0:28:f2:83:91:84:d0:11:30:96:
84:3d:1b:e9:3a:67:3f:90:3d:97:e3:d6:d6:43:a8:db:cd:f8:
2c:d0:e1:be:2c:b6:dc:0b:5b:00:d7:71:1b:19:df:ee:4c:80:
90:54:ad:01
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJe8CyY8riaGmHD9fLq/8lgnCA4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC
RUIyM0ZFODAeFw0yMzA2MDcxMDE0MzRaFw0yNDA2MDUxMDE5MzRaMDMxMTAvBgNV
BAMTKDcwMjM1QjJFMzNBQTE4OTY1NTE2MjdCRjY2RUFCRkU2MTI0MzQ0RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5YMNPsRJ7ZXoR77bVZJaMkND
349o8hRsUrMM3goGP8iFNMNdnKpk+SC8+wTLKOm6AyrxblIFIQJkk3/mtza9JsO0
PrzDAxsnPZmu2kH/K0iTQqn1WpNUVZNVoiw1AhMP+UB1GlfZiIY++pVNbYvhZlCc
WAOCDTfcCNAMNNNSJYBy93GBlDBJNtgvoxdnn8Tm2XfcrtIj6jM94PsQr0Tt45gk
x8UpFehJ90tlg9Y9akHsWxejThTCoUx5tLz6L/BEyosHXARUnk2clv3bIaL4SSDD
W02DTH7srPS2Gt/VwR6zd4aKEvVf9GAv3ruf+PIzZytzZF10vwM0TQa+05OjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUcCNbLjOqGJZVFie/Zuq/5hJDRP0wHwYDVR0j
BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG
RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy
M0ZFOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1N2I5MGNiLThlYmQtNGM3Yi04
YzMxLTEzM2E4YjRlZDY5Yy8wLzMxMzEzODJlMzEzNTMxMmUzMjMyMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHaX3zANBgkqhkiG
9w0BAQsFAAOCAQEAP0O5ePLcIobx2IG2VItjNsKQh7UXCr3OLb3TuAwqPcS+m0HE
Ie9t+F7rHmkoQRB4++LcLW5TYmeTPCUzVB2Mg2jHJernRMY5hVBjjPCTO53XMRFy
KuzBSX7XroE1oMLTAUbWKkO97p6jRoV5mt4A8QSJkriezxk8KDhTqZw5n/Xbq4xA
cBluvhdcyeVAQ+MMtZno+dAE6j4Zk96duRGIeJBXgKJ0s9jbrRjTHnJj11MmsFi4
2riaJJgVWOX++yRuYc4YJoD78m+XyBBdAG7wKPKDkYTQETCWhD0b6TpnP5A9l+PW
1kOo2834LNDhviy23AtbANdxGxnf7kyAkFStAQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org