Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36352e302f32342d3234203d3e20313331373137.roa
File: 3130332e3135352e36352e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier: K6c4HWWOixqrai8F8bxyF5yYFA2492SZg7UYBRMjFTU=
Subject key identifier: 2E:42:68:AC:DE:0E:13:2C:A4:46:B1:60:D1:80:CA:89:38:20:37:1B
Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial: 762040CBC52D62636739A29EF6851F3D79777F5F
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36352e302f32342d3234203d3e20313331373137.roa
Signing time: Sun 31 Jul 2022 04:16:38 +0000
ROA not before: Sun 31 Jul 2022 04:11:38 +0000
ROA not after: Sun 30 Jul 2023 04:16:38 +0000
asID: 131717
IP address blocks: 103.155.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:20:40:cb:c5:2d:62:63:67:39:a2:9e:f6:85:1f:3d:79:77:7f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
Validity
Not Before: Jul 31 04:11:38 2022 GMT
Not After : Jul 30 04:16:38 2023 GMT
Subject: CN=2E4268ACDE0E132CA446B160D180CA893820371B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:9a:7c:50:7f:43:9f:9b:d3:ff:44:72:77:
ae:7b:ef:05:d7:91:a9:6c:36:eb:21:70:b5:26:67:
31:7d:27:51:26:e2:f2:42:ac:2e:cf:b9:fa:96:34:
16:39:c8:f2:2a:75:2f:f9:c0:1e:51:80:fd:ec:8a:
7e:aa:cc:27:ac:c4:93:70:ac:50:5c:c3:fa:80:3a:
20:81:ec:dc:9f:b8:8b:17:d8:e0:6d:53:eb:1d:34:
69:97:b6:5e:67:29:46:79:b6:8b:5e:32:1c:68:7b:
bc:5e:2c:d7:67:d2:3c:02:24:78:13:02:39:b1:49:
9b:c7:0c:aa:d0:44:9c:7d:ad:c0:a6:f5:aa:cb:31:
53:2d:d0:1e:b3:50:72:60:f8:c9:5c:29:b8:95:fd:
ab:0f:fa:5b:e2:94:75:1a:af:c3:bb:7e:fe:05:96:
2f:43:85:38:ac:f2:1b:91:52:af:1c:2b:5f:d4:f9:
11:3a:27:a8:9c:0f:68:d3:15:9e:e8:6d:77:86:bb:
9a:18:5f:06:3e:aa:c0:97:e0:54:34:57:32:74:02:
09:eb:f7:d4:22:5a:69:36:c1:0e:93:bf:9c:93:86:
06:cd:03:46:6f:71:fe:e8:69:ff:13:22:f1:81:13:
3f:9b:40:9f:ad:3c:9f:89:3f:ac:9f:fa:a2:f6:12:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:68:AC:DE:0E:13:2C:A4:46:B1:60:D1:80:CA:89:38:20:37:1B
X509v3 Authority Key Identifier:
keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36352e302f32342d3234203d3e20313331373137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.65.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:9c:01:0f:78:4a:06:b9:2d:fd:16:14:e1:af:35:fb:e7:b8:
1c:68:1d:34:e8:87:49:14:d5:ad:34:e5:aa:0f:6e:f4:41:20:
b4:c8:eb:17:ce:20:b8:b8:81:c9:39:25:e9:48:be:50:21:cf:
8d:1d:6f:5c:81:c5:16:3d:d1:14:d0:d8:17:38:c2:f9:f4:58:
4c:67:7b:70:cb:d5:dc:d0:79:71:fd:a9:65:17:7c:42:80:31:
54:bd:dc:7c:c0:60:b8:45:dd:ed:07:73:63:8e:aa:ef:22:8c:
7b:c0:c5:f3:68:6f:fd:4c:1f:1b:7b:43:2a:9b:2f:0e:7a:92:
51:8c:52:ee:97:a2:b8:95:74:97:b9:eb:59:85:35:24:dd:e8:
89:88:6a:3f:f5:41:59:71:b4:5d:ec:7e:b1:71:20:c6:39:bf:
67:0d:36:bf:ea:52:66:ff:bd:4e:1c:df:19:de:6c:73:4a:3d:
94:ae:de:82:4f:16:1f:86:de:0c:c4:d6:ab:6d:0b:ff:90:39:
7d:5b:ef:01:55:c1:92:06:2c:a2:e8:50:6b:6e:f2:82:f1:32:
4a:11:49:11:32:33:90:b5:20:4d:9b:fd:70:da:fb:19:40:38:
46:5b:ce:82:ec:e6:a2:27:bd:c4:5a:9f:9e:da:3f:90:fe:ee:
e9:81:10:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org