Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/3130332e3234372e34302e302f32322d3232203d3e203538343836.roa
File: 3130332e3234372e34302e302f32322d3232203d3e203538343836.roa (raw, json)
Hash identifier: u7+24WstUMU4jjixzkoQ1xjrYfFrGYkMgYeJO9BxVXM=
Subject key identifier: 27:EA:5D:53:E7:57:77:2F:9A:93:A2:79:A5:B1:AA:80:9B:8A:F7:CC
Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Certificate serial: 020C06BECA14BC0C392E844D88A96139B183979E
Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/3130332e3234372e34302e302f32322d3232203d3e203538343836.roa
Signing time: Sun 28 Aug 2022 23:02:55 +0000
ROA not before: Sun 28 Aug 2022 22:57:55 +0000
ROA not after: Sun 27 Aug 2023 23:02:55 +0000
asID: 58486
IP address blocks: 103.247.40.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0c:06:be:ca:14:bc:0c:39:2e:84:4d:88:a9:61:39:b1:83:97:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Validity
Not Before: Aug 28 22:57:55 2022 GMT
Not After : Aug 27 23:02:55 2023 GMT
Subject: CN=27EA5D53E757772F9A93A279A5B1AA809B8AF7CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:7e:4e:a5:aa:03:57:2f:58:c9:9e:63:8c:
2f:6a:5b:3e:01:f6:74:52:22:1c:1f:a1:5a:ee:01:
3c:a2:09:05:89:8d:e2:1b:b0:94:43:47:07:b1:90:
fa:e4:ec:b6:1f:b9:52:c4:7a:43:21:39:01:25:19:
d6:f1:65:b5:24:9e:f6:66:fa:b0:ef:2b:05:65:00:
fa:63:60:f0:e9:2a:7c:49:eb:d0:9a:29:b2:30:36:
33:1b:88:26:30:c3:a1:47:9b:47:c3:15:0f:39:22:
c5:c8:6b:26:ab:a7:02:05:d0:9d:ed:31:96:1b:87:
03:06:1b:7d:ac:9a:a2:ab:c7:92:d9:0d:aa:75:6f:
09:53:33:b1:e5:fb:42:b7:2a:f8:6e:5c:02:4c:fa:
d5:ac:fa:db:21:2e:1b:e9:12:8d:6a:c8:56:fc:a5:
2c:5a:d1:80:50:b5:34:a1:89:d9:b3:94:c3:46:03:
32:29:ca:a8:07:30:9c:b7:da:e8:7a:ff:56:4a:2c:
2d:04:5d:2a:d1:2a:cb:25:8a:87:db:b3:63:b2:29:
83:14:5b:b1:c9:d1:39:05:3a:27:fa:f7:66:39:9b:
f1:b2:58:15:b5:b7:e4:37:b8:7d:ed:7c:ae:5a:d3:
3b:92:95:b6:fa:c4:3a:6c:22:12:ac:bd:f4:60:ea:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EA:5D:53:E7:57:77:2F:9A:93:A2:79:A5:B1:AA:80:9B:8A:F7:CC
X509v3 Authority Key Identifier:
keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/3130332e3234372e34302e302f32322d3232203d3e203538343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:2d:5b:0e:0d:0e:b6:da:b3:d1:f6:17:49:a8:f1:e8:33:a9:
12:6a:24:7a:11:58:b3:f0:8f:9b:9c:6b:23:ab:79:fa:f9:1e:
f0:99:3b:8c:69:d2:24:ee:0d:48:fa:45:ac:08:f9:c8:1c:62:
23:42:7d:70:d9:9f:c9:c9:4d:cc:f3:06:39:76:7d:6f:5e:d3:
43:e9:01:13:e5:9d:26:47:1d:58:f0:70:9f:6e:54:4f:fe:6e:
20:ea:ae:8e:af:a1:12:93:7e:ac:0e:7c:c4:fb:0e:45:04:a7:
0f:58:24:45:96:a5:11:7b:e4:61:5c:e8:73:59:ac:16:a3:7d:
40:00:18:54:b6:6a:71:c1:88:1a:04:c5:1b:aa:37:15:11:7b:
6a:2a:16:bc:7f:84:e8:fa:d2:ca:41:5c:4d:3c:9c:dd:d4:0b:
bb:f6:45:2a:e5:58:84:d3:b7:b8:a4:28:92:3e:80:a4:70:6e:
f1:5c:5b:26:40:8d:e9:ce:a3:48:05:62:fd:7f:fb:1b:6e:51:
07:ab:df:46:ca:ce:26:ae:a9:0d:b5:55:06:ed:c5:cb:37:f6:
26:2b:8a:67:6d:55:45:3a:03:28:c8:4e:82:1c:8a:45:e2:7b:
0f:b7:0a:db:5a:92:19:7c:a8:d7:4f:ce:09:f3:ff:c7:3c:06:
d7:7d:66:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:01 2023 by rpki-client on console-ams.rpki-client.org