Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/3130332e3135332e34302e302f32342d3234203d3e20313430343534.roa
File: 3130332e3135332e34302e302f32342d3234203d3e20313430343534.roa (raw, json)
Hash identifier: u6yuStsCuwakEFmcesjI/pheSUtEcR8jfPovwQUy0k0=
Subject key identifier: A9:39:8E:11:9F:6B:58:DF:91:66:6A:DA:66:4B:DC:FB:5D:F8:A1:DB
Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948
Certificate serial: 7DC1983331E64779B93C1271DED1629B2FF48E94
Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/3130332e3135332e34302e302f32342d3234203d3e20313430343534.roa
Signing time: Mon 31 Jul 2023 00:08:18 +0000
ROA not before: Mon 31 Jul 2023 00:03:18 +0000
ROA not after: Mon 29 Jul 2024 00:08:18 +0000
asID: 140454
IP address blocks: 103.153.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:c1:98:33:31:e6:47:79:b9:3c:12:71:de:d1:62:9b:2f:f4:8e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948
Validity
Not Before: Jul 31 00:03:18 2023 GMT
Not After : Jul 29 00:08:18 2024 GMT
Subject: CN=A9398E119F6B58DF91666ADA664BDCFB5DF8A1DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:f9:b6:bc:a3:41:52:f8:74:8b:2c:fa:b7:
cb:4e:21:7f:3e:74:3d:76:4f:5d:04:59:8e:7f:cc:
0d:dd:ff:0f:4f:05:a9:89:ca:3a:02:c5:65:70:56:
5f:1b:de:e8:7a:e4:25:21:fc:ed:e6:74:44:ab:5d:
cb:80:ab:d3:2d:54:8a:c9:21:10:9d:cd:a8:06:c1:
63:a0:01:e0:ef:c7:80:6b:93:e8:5d:5f:49:ef:15:
8a:2b:19:57:81:6d:21:39:c4:d4:a0:5e:42:99:98:
a9:7b:8e:f4:32:65:6a:07:ca:7e:d0:14:38:79:ee:
1e:31:39:c1:42:01:29:79:24:8d:75:1f:38:89:a8:
14:e8:1e:86:09:0c:64:a0:32:c9:97:64:05:80:32:
1f:df:fa:85:36:f0:ee:7d:6d:5b:ee:bd:81:93:a8:
02:f1:60:03:2c:31:d5:37:d5:5a:89:02:eb:e9:50:
36:c9:57:70:bc:a3:25:31:43:ae:ad:ea:72:ed:6b:
d6:60:2f:09:54:43:d1:5d:03:f4:fa:93:21:df:28:
a3:38:12:db:10:0f:d7:06:29:fa:cf:7a:12:b5:11:
70:78:3a:3b:2b:93:61:97:3d:71:fc:2a:e7:38:04:
3a:9f:7f:01:48:2a:af:43:e0:7f:f4:93:c2:d4:42:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:8E:11:9F:6B:58:DF:91:66:6A:DA:66:4B:DC:FB:5D:F8:A1:DB
X509v3 Authority Key Identifier:
keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/3130332e3135332e34302e302f32342d3234203d3e20313430343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.40.0/24
Signature Algorithm: sha256WithRSAEncryption
53:94:e1:60:31:67:a4:2c:4d:56:75:dd:c1:db:d5:c8:a9:8d:
ae:0e:dc:fd:af:b1:11:d2:cc:65:61:ee:89:bd:02:e5:11:2a:
6d:2b:c3:65:4b:db:15:8e:b4:71:57:7a:0e:7b:74:be:6f:f9:
6b:4e:98:cb:3b:59:b9:2d:03:6d:94:48:62:7b:0b:9a:e0:bd:
c1:a0:66:67:40:77:e3:8a:89:fc:ef:fd:dc:40:76:94:b8:8d:
e5:f2:6c:9a:d5:dd:94:97:ed:f8:31:5e:6a:32:75:c8:39:95:
c6:ad:7e:42:77:6f:22:4e:ca:00:34:83:67:48:88:ec:a3:f3:
26:39:2c:e4:47:90:3e:c6:62:0a:3a:73:ff:b8:55:42:5c:17:
eb:55:64:fe:25:17:09:c1:04:ff:3d:30:9a:c7:a2:38:20:c7:
81:d1:ba:f3:48:32:23:b3:1a:21:c8:6b:97:10:82:32:8c:3f:
5f:51:63:28:4b:06:df:4a:6e:82:5a:d4:83:a4:62:bd:e9:cc:
00:7a:79:91:14:c4:c8:e2:36:4a:28:6d:4c:61:e2:7a:79:1d:
be:d9:84:58:94:6b:c2:ce:8e:72:b4:11:1c:e1:bd:0c:b8:9b:
20:38:cf:0c:2b:45:94:cc:0d:e9:28:e9:88:25:db:ee:05:b0:
90:d4:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 10:08:28 2023 by rpki-client on console-fra.rpki-client.org