Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137392e302f32342d3234203d3e203338343936.roa
File: 3230322e38372e3137392e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: cAAtj5+KAk83jafzdUw4j20o5nOoG9tS0DhgtKz6WTI=
Subject key identifier: F4:DA:E1:31:83:1F:EF:3C:D5:1D:CB:05:36:78:0E:01:CE:FF:D1:9F
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 107CD08671C4F29F1984605B43FF10AAFE4E7518
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137392e302f32342d3234203d3e203338343936.roa
Signing time: Sat 06 Apr 2024 04:02:02 +0000
ROA not before: Sat 06 Apr 2024 03:57:02 +0000
ROA not after: Sat 05 Apr 2025 04:02:02 +0000
asID: 38496
IP address blocks: 202.87.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 03:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7c:d0:86:71:c4:f2:9f:19:84:60:5b:43:ff:10:aa:fe:4e:75:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Apr 6 03:57:02 2024 GMT
Not After : Apr 5 04:02:02 2025 GMT
Subject: CN=F4DAE131831FEF3CD51DCB0536780E01CEFFD19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:73:c1:ec:91:03:90:4b:c1:c6:02:48:c4:
6a:5d:02:e8:83:28:e2:ca:57:89:97:58:05:9c:c8:
c1:80:34:eb:46:19:46:87:52:02:89:2f:2d:9b:2c:
56:9d:31:00:ae:e0:4c:4a:92:34:b7:4e:72:a8:10:
a3:66:83:89:87:53:f2:ff:3f:ea:b1:40:b5:f1:f9:
5d:a9:97:54:6e:91:4d:f3:44:cd:f4:45:20:1f:af:
4a:2d:9d:41:57:ca:6e:a7:7a:9b:d6:da:d1:a0:f9:
89:71:06:c1:50:18:85:68:79:d3:18:7c:32:81:05:
c5:fc:8d:85:9b:20:4f:ad:67:22:af:4f:5b:21:d8:
17:6b:62:e2:67:3e:5b:a4:9b:50:4b:34:ec:52:3e:
dd:df:b5:d3:30:1b:8d:fb:91:da:cf:89:25:b3:11:
e7:df:bc:74:c2:4d:47:ed:fb:00:1a:44:78:03:fb:
d6:3a:5f:b2:fb:0e:1f:3b:f4:d2:71:21:7e:35:b0:
25:e1:d1:9b:be:72:7b:c4:3a:e9:9c:b5:0f:18:3e:
1a:bd:fd:9e:4a:39:dd:b2:e5:c6:c5:9a:f0:87:5d:
b9:eb:90:d9:c7:0f:bc:1c:c6:45:39:c9:68:2b:01:
31:ea:90:d4:25:15:90:a8:fb:dd:8b:98:f8:b0:a7:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DA:E1:31:83:1F:EF:3C:D5:1D:CB:05:36:78:0E:01:CE:FF:D1:9F
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137392e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:5c:d0:0e:26:de:38:f3:31:7c:61:d6:f0:7d:2b:20:4b:5c:
02:30:60:28:1e:52:67:89:95:34:45:5b:5b:bb:b1:37:8b:ed:
02:9f:9a:c1:82:70:36:06:83:fa:c4:24:eb:ff:4c:57:02:d8:
2c:07:ca:7d:f8:9b:0c:ad:11:84:51:03:85:45:ab:90:4a:36:
92:60:9b:4f:1a:e5:b8:9c:8d:6a:44:5f:65:cd:00:bb:cc:3d:
31:b2:8e:d7:68:5a:92:2d:52:e4:94:a3:0e:80:4d:ce:a1:a7:
32:7c:c9:d8:49:d5:61:e6:39:d3:0d:b3:a5:a8:80:86:01:48:
de:b9:64:f2:41:d1:9a:40:32:ea:07:40:e6:2e:e8:59:ed:a3:
a3:49:38:16:c5:cd:1a:3d:44:0d:fa:11:d7:2a:3a:18:3e:c1:
f5:48:d8:9c:21:dd:fc:20:10:a4:ba:f0:e0:25:9a:30:61:ed:
7e:8d:58:a2:57:ac:f6:c9:31:0c:4d:9f:2f:3e:bf:74:1a:84:
37:95:90:2f:2b:ab:37:e0:4e:12:2b:95:d5:34:61:af:68:39:
70:bd:27:01:d0:41:22:9c:b0:0f:d0:a5:1f:c2:34:83:b2:d1:
93:ba:48:e7:69:24:15:f6:4e:bd:60:ff:77:ff:0d:82:1b:80:
ef:2e:3f:40
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEHzQhnHE8p8ZhGBbQ/8Qqv5OdRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA0MDYwMzU3MDJaFw0yNTA0MDUwNDAyMDJaMDMxMTAvBgNV
BAMTKEY0REFFMTMxODMxRkVGM0NENTFEQ0IwNTM2NzgwRTAxQ0VGRkQxOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK4HPB7JEDkEvBxgJIxGpdAuiD
KOLKV4mXWAWcyMGANOtGGUaHUgKJLy2bLFadMQCu4ExKkjS3TnKoEKNmg4mHU/L/
P+qxQLXx+V2pl1RukU3zRM30RSAfr0otnUFXym6nepvW2tGg+YlxBsFQGIVoedMY
fDKBBcX8jYWbIE+tZyKvT1sh2BdrYuJnPlukm1BLNOxSPt3ftdMwG437kdrPiSWz
EeffvHTCTUft+wAaRHgD+9Y6X7L7Dh879NJxIX41sCXh0Zu+cnvEOumctQ8YPhq9
/Z5KOd2y5cbFmvCHXbnrkNnHD7wcxkU5yWgrATHqkNQlFZCo+92LmPiwpzqhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9NrhMYMf7zzVHcsFNngOAc7/0Z8wHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzAzMjJlMzgzNzJlMzEzNzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpXszANBgkqhkiG
9w0BAQsFAAOCAQEAmlzQDibeOPMxfGHW8H0rIEtcAjBgKB5SZ4mVNEVbW7uxN4vt
Ap+awYJwNgaD+sQk6/9MVwLYLAfKffibDK0RhFEDhUWrkEo2kmCbTxrluJyNakRf
Zc0Au8w9MbKO12haki1S5JSjDoBNzqGnMnzJ2EnVYeY50w2zpaiAhgFI3rlk8kHR
mkAy6gdA5i7oWe2jo0k4FsXNGj1EDfoR1yo6GD7B9UjYnCHd/CAQpLrw4CWaMGHt
fo1Yoles9skxDE2fLz6/dBqEN5WQLyurN+BOEiuV1TRhr2g5cL0nAdBBIpywD9Cl
H8I0g7LRk7pI52kkFfZOvWD/d/8NghuA7y4/QA==
-----END CERTIFICATE-----
Generated at Thu Oct 3 05:59:13 2024 by rpki-client on console-fra.rpki-client.org