Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137382e302f32342d3234203d3e203338343936.roa
File: 3230322e38372e3137382e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: cMJKFcSzh6VpMK4KVDUp4Tp89vtO3J2gpQFKesi7Woo=
Subject key identifier: 11:C0:9E:57:42:A5:1F:C2:15:0E:C2:09:CC:0F:F8:3E:98:39:F4:FA
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 7878068FF8F141206452AF7836C108E11D8079C9
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137382e302f32342d3234203d3e203338343936.roa
Signing time: Sat 06 Apr 2024 05:00:02 +0000
ROA not before: Sat 06 Apr 2024 04:55:02 +0000
ROA not after: Sat 05 Apr 2025 05:00:02 +0000
asID: 38496
IP address blocks: 202.87.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 03:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:78:06:8f:f8:f1:41:20:64:52:af:78:36:c1:08:e1:1d:80:79:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Apr 6 04:55:02 2024 GMT
Not After : Apr 5 05:00:02 2025 GMT
Subject: CN=11C09E5742A51FC2150EC209CC0FF83E9839F4FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:68:3b:1e:94:64:f1:77:b5:e5:34:57:13:
ac:67:8f:6d:8b:3c:f7:8a:d3:71:42:1a:01:2b:a4:
bb:87:a5:e9:c7:6f:8a:8b:b7:eb:1f:98:f6:19:d3:
93:4a:79:42:e5:d1:c9:e7:cf:f4:dc:9e:ab:3f:fc:
7d:ea:ea:9c:0f:73:20:ed:55:51:ab:20:fc:9b:80:
8d:f4:c2:e5:b6:2f:66:be:43:ad:aa:74:a9:b1:e2:
50:1f:c3:1b:ff:72:1a:6b:fe:f3:40:7b:ce:3a:f0:
3a:26:63:a2:3a:8e:0e:39:00:58:b4:7d:c0:70:da:
7e:0c:61:77:09:f0:b4:28:94:b8:7a:78:d8:7e:8b:
04:00:b8:8f:52:90:ac:95:57:16:93:20:1d:59:05:
8f:d1:86:96:75:8a:bd:6d:6e:a7:35:33:65:0b:aa:
fd:a7:87:b1:14:df:6e:c8:7e:19:03:d6:bb:c1:8a:
2d:e3:3e:e8:a2:fa:ef:78:0d:72:8f:30:44:d5:b3:
a2:b5:4e:f4:09:99:31:8e:03:4b:9d:ab:e5:02:b4:
ed:22:de:c7:c5:91:05:09:a4:16:7e:35:29:be:5d:
5b:91:e2:4f:e5:b0:01:b6:8e:09:27:45:5b:f9:6a:
8a:05:a3:c2:0f:a1:df:73:bf:76:46:39:b5:2e:ab:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C0:9E:57:42:A5:1F:C2:15:0E:C2:09:CC:0F:F8:3E:98:39:F4:FA
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137382e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.178.0/24
Signature Algorithm: sha256WithRSAEncryption
85:70:19:0a:26:50:72:0e:9a:d3:41:0e:71:38:57:33:de:59:
1b:9c:6b:ca:25:97:4e:5a:db:c8:85:92:46:95:18:b8:2d:5e:
f5:bf:c4:f0:04:7c:74:85:3b:be:4c:7b:18:ab:b4:78:80:24:
b9:fd:ea:63:50:f5:9d:3c:f4:e5:57:12:dd:cf:1e:bf:73:31:
8a:15:aa:9a:73:5d:ff:23:a8:e4:a5:1c:09:01:27:11:97:59:
08:bc:d2:2e:9f:2b:be:16:cf:08:93:ad:b9:5c:e6:33:83:56:
b9:54:63:e7:2a:0a:fb:c0:6f:0d:f0:f5:58:d3:64:03:76:c9:
18:13:5e:f8:dc:d1:66:7f:57:a5:15:18:38:15:b5:65:b4:e7:
7a:c8:dc:5c:80:00:c6:63:a9:65:d4:aa:24:15:68:61:74:d5:
82:15:39:59:eb:39:24:39:83:87:60:77:d8:6b:15:61:ce:85:
74:dd:70:db:79:7a:5d:1d:a9:6e:c6:a9:20:4d:2f:8f:e3:bf:
72:d3:36:6e:81:ec:df:d6:88:fc:31:d3:b8:20:39:73:98:5b:
28:a1:b7:e7:7d:25:46:4c:6f:73:00:2b:e5:12:5f:39:c8:d5:
ef:9a:2d:6b:61:5e:53:2b:10:10:50:3f:04:a8:af:f0:a1:e5:
31:07:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 04:28:30 2024 by rpki-client on console-fra.rpki-client.org