Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17855.roa
File: AS17855.roa (raw, json)
Hash identifier: BeKs/eOSdNfXWJG26H2UKFANXjyQoSmOhfj7LrkBu+s=
Subject key identifier: 7A:F8:1C:7A:C0:3E:47:FB:02:9B:E5:B2:C8:44:92:E9:32:3E:2B:A9
Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial: 6523D37DA98E4969C5ABF0FD2EE58B1DFBFB5F9A
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17855.roa
Signing time: Tue 20 Feb 2024 04:27:19 +0000
ROA not before: Tue 20 Feb 2024 04:22:19 +0000
ROA not after: Tue 18 Feb 2025 04:27:19 +0000
asID: 17855
IP address blocks: 112.215.47.0/24 maxlen: 24
121.52.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 13:18:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:23:d3:7d:a9:8e:49:69:c5:ab:f0:fd:2e:e5:8b:1d:fb:fb:5f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Validity
Not Before: Feb 20 04:22:19 2024 GMT
Not After : Feb 18 04:27:19 2025 GMT
Subject: CN=7AF81C7AC03E47FB029BE5B2C84492E9323E2BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:73:63:2c:5e:5b:db:32:56:99:34:55:88:
bb:c5:73:74:69:03:a4:00:f9:f1:39:87:25:e8:2f:
76:f9:8e:aa:9d:da:de:a6:15:9a:96:00:35:84:97:
24:70:13:d6:0f:86:23:2d:16:26:be:dd:c4:6a:4f:
25:7b:80:26:76:e9:a6:64:d8:eb:e2:69:b5:6c:eb:
81:9c:fe:d0:c3:f0:4b:fd:f3:44:98:83:5f:3a:6d:
e8:09:b8:4a:d8:1c:57:30:02:21:4f:94:d4:7e:d1:
30:4c:a8:dd:85:bb:64:30:c3:b3:6a:85:a9:02:16:
ed:0e:6d:a0:dc:9b:cb:18:86:46:79:05:d7:18:4d:
c4:e2:c3:cf:9c:78:36:70:d8:dd:30:d7:ca:a0:bc:
b5:cd:5d:b0:58:5e:aa:7d:3e:3b:90:35:ff:ba:1d:
c6:52:1e:4d:99:9e:3a:c8:78:16:b8:90:cc:9a:17:
85:ad:3a:ed:7e:46:ad:22:c3:7c:bd:db:64:26:f7:
04:52:ed:8f:88:d5:7c:f7:cc:97:34:ed:2b:8c:d2:
5d:91:c5:6e:46:e5:c2:ac:13:95:ba:64:1e:da:0d:
c7:13:e5:a7:ab:c0:49:82:b3:e6:dd:1d:45:e8:82:
85:22:a8:3a:b4:c2:53:3c:70:64:8c:49:0a:d4:1b:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F8:1C:7A:C0:3E:47:FB:02:9B:E5:B2:C8:44:92:E9:32:3E:2B:A9
X509v3 Authority Key Identifier:
keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17855.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.215.47.0/24
121.52.69.0/24
Signature Algorithm: sha256WithRSAEncryption
66:00:81:c7:17:63:87:aa:2d:03:a8:4f:ac:0b:21:37:d3:ac:
08:0b:ee:6d:80:1a:1a:b3:43:5d:c6:ce:48:8d:20:0d:ad:f5:
47:66:db:e0:d3:13:31:b1:42:51:42:8c:7f:71:d6:4b:37:d4:
33:a9:db:49:66:d4:9d:1f:87:5b:5c:d5:3c:73:41:25:27:8a:
e6:5f:c1:90:ef:25:a4:51:8e:52:0c:e0:7e:e6:45:17:1b:c8:
75:31:2f:d8:6a:a2:53:b5:dd:08:e3:41:c3:d5:00:2b:e8:be:
2b:6d:73:13:9e:55:a1:01:83:4e:d2:6b:2f:3f:08:0e:c0:2a:
16:4e:fc:87:72:ff:c4:69:1b:be:63:d2:3f:32:e3:b3:8b:0d:
cd:61:0f:1d:d7:57:06:2c:3c:d3:d9:3c:49:73:f8:86:87:cf:
c4:ed:ff:c5:7a:56:30:90:20:06:f2:c2:19:35:b3:ac:ad:ca:
53:04:20:0d:3d:e9:38:ee:4a:e8:a6:9b:fe:25:e5:63:43:5f:
31:f7:b4:2e:87:82:f7:1f:fe:1d:1c:8c:d0:ac:9a:8b:ee:6c:
19:aa:f7:e4:d4:ae:3b:2e:f2:46:72:54:2a:d9:48:50:aa:c9:
51:f0:47:1d:08:28:98:f8:6e:e6:a9:08:ef:c6:6a:33:8c:83:
ca:9f:7a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:44:28 2024 by rpki-client on console.sobornost.net