Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137392e302f32342d3234203d3e20313430343231.roa
File: 3230322e38372e3137392e302f32342d3234203d3e20313430343231.roa (raw, json)
Hash identifier: k5EYEXZcgx2+jmsxjW9Nx5I0ryY3GoD0eQwUpQNvF1w=
Subject key identifier: 18:90:6F:1B:97:15:7F:50:17:46:F3:09:00:AE:09:2B:E5:8D:6D:48
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 64EA8D3DF8946CBA32AF53DDA39182545FE4C423
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137392e302f32342d3234203d3e20313430343231.roa
Signing time: Thu 03 Oct 2024 03:12:07 +0000
ROA not before: Thu 03 Oct 2024 03:07:07 +0000
ROA not after: Thu 02 Oct 2025 03:12:07 +0000
asID: 140421
IP address blocks: 202.87.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 03:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ea:8d:3d:f8:94:6c:ba:32:af:53:dd:a3:91:82:54:5f:e4:c4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Oct 3 03:07:07 2024 GMT
Not After : Oct 2 03:12:07 2025 GMT
Subject: CN=18906F1B97157F501746F30900AE092BE58D6D48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:59:0a:89:18:33:d8:80:21:d1:77:b6:0b:58:
42:93:8d:9d:17:ce:89:c4:be:18:1a:a7:9a:37:a5:
6d:40:d0:04:c3:38:92:56:cd:20:63:7c:0b:c9:a1:
b2:48:24:18:3d:25:0f:4d:aa:bf:1a:05:c1:b1:9d:
eb:57:90:39:3b:59:f2:3a:08:7b:50:0d:11:d0:bc:
b6:49:26:e9:79:5e:99:59:87:19:a6:8b:1a:d9:17:
a3:cd:f9:ca:3e:b6:7b:01:58:69:3a:91:30:32:08:
b4:34:5a:19:74:aa:de:0e:33:f6:c6:ee:05:15:80:
07:80:c0:6f:a3:d3:d4:67:ee:bc:28:bb:8d:c0:b7:
56:6a:22:c1:11:c4:de:28:c4:47:75:50:73:fe:8b:
f3:d2:33:09:17:f6:94:da:c3:32:5a:e8:0c:e8:74:
11:c0:00:88:a7:ef:5f:56:8d:43:cf:63:6e:8a:33:
c5:3f:f5:9d:aa:83:04:1d:9b:d6:c4:a6:1d:e2:77:
09:b1:b8:ad:43:bf:c2:bb:f3:2a:ae:30:88:11:e3:
34:f9:05:cb:cf:77:3e:a7:93:49:5d:ea:4c:d7:7d:
6f:72:81:25:0b:0b:2c:ea:82:57:00:83:10:41:70:
dc:c0:39:15:41:a6:e8:33:9c:27:60:d4:a2:e9:c9:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:90:6F:1B:97:15:7F:50:17:46:F3:09:00:AE:09:2B:E5:8D:6D:48
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137392e302f32342d3234203d3e20313430343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:67:58:f3:bc:0e:36:89:ae:f6:a5:38:41:87:e6:2d:bd:f4:
42:df:e6:37:f0:5b:b2:f9:e9:0f:e7:bc:9f:cf:e7:d9:4d:99:
59:a3:a4:6b:75:2f:79:c0:fc:4a:c4:51:6e:b6:10:70:4d:5b:
45:0c:f5:e3:d3:12:f2:66:09:75:ba:da:a3:0f:5e:42:f9:05:
1f:32:0d:f3:e1:48:0d:31:11:b6:3a:d6:a1:f0:35:41:cd:51:
a1:95:56:6c:42:69:22:a5:76:e4:2a:3d:ea:88:20:af:9e:1f:
01:90:09:a9:2b:74:a7:43:d7:7e:4b:64:81:8d:28:7b:cf:f0:
72:6e:10:53:76:74:15:a1:cb:a8:3a:9a:b2:c6:44:05:f8:22:
4b:d6:be:d3:b4:b3:2b:fa:11:0a:a1:90:83:3c:ee:d9:fb:26:
b6:2b:6c:a0:10:b8:4c:88:cb:b4:25:18:64:dc:fe:ff:72:e9:
08:5a:51:ce:96:28:1c:0c:93:67:ff:04:99:3d:79:df:dc:58:
c6:66:3e:66:a6:e6:f9:e4:0f:a6:56:ef:aa:e3:ac:a8:b0:b7:
62:01:65:e3:8a:da:a2:a3:4f:22:99:26:8c:24:9d:85:c1:b6:
31:cc:d2:8b:e5:3f:25:e7:5b:bd:68:2b:54:89:0f:3e:17:eb:
29:d9:13:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 06:32:33 2024 by rpki-client on console-ams.rpki-client.org