Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137372e302f32342d3234203d3e203338343936.roa
File: 3230322e38372e3137372e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: qf9QV/tB9+r8MBbYZqZQnUWbgC18+MpL2jJXTX5gZFU=
Subject key identifier: 45:42:D3:EE:3C:AB:C8:C5:8F:B5:1F:15:59:1A:55:6E:E2:BB:46:88
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 52F0CF1EE3BC7962AF3B0995C88FE4B41880F3F0
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137372e302f32342d3234203d3e203338343936.roa
Signing time: Wed 10 Jan 2024 05:00:33 +0000
ROA not before: Wed 10 Jan 2024 04:55:33 +0000
ROA not after: Wed 08 Jan 2025 05:00:33 +0000
asID: 38496
IP address blocks: 202.87.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Aug 2024 08:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f0:cf:1e:e3:bc:79:62:af:3b:09:95:c8:8f:e4:b4:18:80:f3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Jan 10 04:55:33 2024 GMT
Not After : Jan 8 05:00:33 2025 GMT
Subject: CN=4542D3EE3CABC8C58FB51F15591A556EE2BB4688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:ec:a7:3a:39:9b:e5:6e:a7:e7:90:0a:26:
da:eb:67:79:3b:72:1a:49:84:50:aa:8c:3a:b9:e5:
4c:30:0c:b0:25:a1:e3:d4:82:8b:de:43:76:01:18:
b7:0c:5c:cf:1c:35:ec:d3:17:75:77:c2:f7:0a:ec:
64:24:37:c3:38:83:0c:24:34:f2:8e:1f:80:5e:1e:
90:43:4d:fb:31:00:bf:80:e6:b9:89:22:e2:9b:89:
60:c1:7a:6e:8a:0c:f1:b6:cb:21:e9:39:1f:c1:f1:
28:ab:8f:ec:c9:82:e0:e7:63:0f:e6:30:fe:d7:af:
90:47:6d:74:d5:44:c1:f5:fa:5e:2e:ca:c0:8e:7f:
7b:e1:f5:e3:0d:70:a5:e8:00:c6:e7:77:a7:8c:aa:
5f:2a:5b:5c:c0:51:1a:11:95:b7:82:0b:2a:c8:0c:
b2:c9:e8:e1:9e:56:18:96:4b:fc:e6:31:35:0e:27:
9a:b3:79:50:47:2a:dd:4c:ef:e5:f2:57:3d:2b:71:
1d:ec:38:3d:19:a5:3f:31:c4:54:a0:1a:58:7d:d1:
44:6c:0f:43:c7:18:e4:8f:a7:e7:de:dc:8c:75:52:
76:0e:27:0c:e5:c1:3f:d1:5f:e2:b9:f6:b6:ac:f3:
2e:fb:42:7d:48:8c:81:96:da:f0:97:87:34:b8:81:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:42:D3:EE:3C:AB:C8:C5:8F:B5:1F:15:59:1A:55:6E:E2:BB:46:88
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137372e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.177.0/24
Signature Algorithm: sha256WithRSAEncryption
54:41:91:ac:71:88:6c:bd:7d:34:ab:3c:e9:39:68:b7:f4:f0:
60:3f:72:a5:4b:33:d0:4b:9a:4d:07:6a:e9:56:6c:5a:fe:f7:
9e:71:ed:10:8a:26:ea:5d:7f:70:18:76:6f:f9:57:56:ea:1b:
2d:1c:a2:2e:f0:50:42:26:f9:98:3b:fc:a1:1f:b9:97:3b:ad:
a5:7b:25:6c:bd:11:d0:9d:af:7d:a5:75:b5:e6:68:a5:11:80:
32:cb:ab:5f:68:7d:35:d1:e5:a5:56:d7:94:82:98:50:0d:f8:
14:c8:98:ca:1d:a1:f2:e4:6c:a7:33:d5:ff:b1:10:5a:9a:41:
81:6e:ae:0f:26:b1:2c:fb:59:82:3b:98:65:36:4b:f1:03:13:
9c:14:4d:88:7b:51:91:92:89:69:e0:4e:9b:d5:10:13:32:f9:
d7:24:a9:07:c8:ee:f6:b3:c1:c9:8d:8c:a6:48:a0:05:e1:dd:
dc:44:7f:6c:3f:30:35:9b:22:dd:79:00:c7:2d:f8:84:03:ba:
34:49:f2:01:8a:08:90:11:13:01:45:23:58:25:9f:c2:05:ea:
2e:c3:21:3d:1a:07:a8:a6:7e:2d:51:b7:3e:91:d4:72:ae:2c:
51:0c:ed:ab:3d:14:52:e1:9a:5e:f9:41:e6:4a:bf:3a:ad:5d:
15:9e:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 10:58:17 2024 by rpki-client on console-fra.rpki-client.org