Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/3130332e3135332e34312e302f32342d3234203d3e20313430343534.roa
File: 3130332e3135332e34312e302f32342d3234203d3e20313430343534.roa (raw, json)
Hash identifier: GL0kOmTjtronIcjVbZBXjVeoxQPGiqDiN5uinhl8FI0=
Subject key identifier: 62:1C:32:32:36:E9:DD:53:69:24:13:A4:85:4F:EE:54:B0:F5:C8:78
Certificate issuer: /CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948
Certificate serial: 3DCDFE9E4CC43555D5AE8275D2409858F6C27E28
Authority key identifier: 5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/3130332e3135332e34312e302f32342d3234203d3e20313430343534.roa
Signing time: Mon 31 Jul 2023 00:08:18 +0000
ROA not before: Mon 31 Jul 2023 00:03:18 +0000
ROA not after: Mon 29 Jul 2024 00:08:18 +0000
asID: 140454
IP address blocks: 103.153.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:cd:fe:9e:4c:c4:35:55:d5:ae:82:75:d2:40:98:58:f6:c2:7e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B122103D3C1C730AECE59A7ED28A79DD0C79948
Validity
Not Before: Jul 31 00:03:18 2023 GMT
Not After : Jul 29 00:08:18 2024 GMT
Subject: CN=621C323236E9DD53692413A4854FEE54B0F5C878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4b:e7:74:e6:eb:7d:43:52:e1:10:17:ca:73:
ea:ea:49:bb:0c:0b:2b:4d:11:4b:bf:1f:3b:6a:10:
43:28:8c:a4:16:bc:93:05:c2:ef:a3:5d:0b:71:18:
c6:7b:8e:b2:74:0e:ea:6b:18:61:ae:20:06:00:97:
6f:04:13:60:d2:c7:e9:ca:9d:ae:47:a1:b4:cc:0b:
1c:e9:85:fc:76:b0:47:74:13:3a:21:79:f5:5a:59:
a5:6d:c3:c9:5b:7d:c3:ed:64:a2:e0:5f:b9:d8:5f:
f0:b7:fa:3e:61:29:4f:cc:b5:bb:52:88:11:78:c6:
b3:d2:8c:7e:87:73:00:b6:22:b6:09:b9:cb:8f:29:
1a:93:a5:f2:ee:8a:5b:66:a5:9a:49:19:29:4b:62:
b6:fc:9e:be:91:76:9a:29:16:4c:71:8a:6f:2c:84:
33:d4:11:40:aa:fe:04:40:57:43:99:00:bb:65:d1:
f2:7c:5d:88:36:12:25:ae:81:3b:7f:d5:5d:20:4c:
32:39:9f:25:20:3a:cd:67:eb:5e:b4:91:5b:41:4b:
21:b0:f3:36:63:0c:a0:96:7f:bf:6b:11:10:60:fc:
63:b4:ae:5e:31:a1:7b:70:1e:67:49:11:21:dc:84:
57:d5:2f:82:93:65:19:e4:e7:57:43:f5:99:bf:28:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:32:32:36:E9:DD:53:69:24:13:A4:85:4F:EE:54:B0:F5:C8:78
X509v3 Authority Key Identifier:
keyid:5B:12:21:03:D3:C1:C7:30:AE:CE:59:A7:ED:28:A7:9D:D0:C7:99:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/5B122103D3C1C730AECE59A7ED28A79DD0C79948.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B122103D3C1C730AECE59A7ED28A79DD0C79948.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6172eef9-ec6a-4558-8181-a11fe65b8ff8/0/3130332e3135332e34312e302f32342d3234203d3e20313430343534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.153.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:de:5c:da:2f:9f:74:f4:f0:6e:67:d4:1e:54:f0:e7:a7:52:
00:dd:86:05:fa:99:2a:9d:1d:9f:65:72:0b:08:72:d9:29:e0:
f5:75:d4:f8:f3:d6:4d:0d:9b:b1:21:b1:95:f0:9c:5b:87:e0:
2d:5e:c6:30:9e:ea:48:e5:62:0e:1a:2b:4e:2f:ed:4d:90:df:
c3:a6:95:37:17:f3:39:19:45:e0:0a:3c:a8:85:fd:aa:6e:b9:
54:06:82:48:67:1f:53:50:97:be:f8:87:e3:4b:a1:48:bc:1d:
19:73:ff:b6:89:fb:6e:bb:83:6d:02:5e:a2:fb:68:a0:ac:73:
ea:40:74:11:16:b5:c9:19:00:e3:04:94:17:da:b8:2d:04:af:
7a:66:b7:da:0c:bb:84:ad:b6:73:74:53:fa:af:80:ea:b1:bc:
ca:1f:df:a7:2f:39:3d:49:56:11:e4:19:e0:cd:fd:2d:64:de:
5d:cd:8f:99:46:ec:a8:b8:e3:b0:d9:69:07:84:9b:93:ee:ac:
2a:1b:88:38:6f:aa:13:b2:0d:80:70:22:62:67:d3:c7:66:8d:
72:b9:e8:9f:24:ac:a2:3b:de:42:ff:e4:bb:b8:24:bf:37:6c:
de:f5:3e:6d:14:38:a7:f6:47:f7:11:54:fd:da:d7:64:20:78:
89:f4:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 10:16:00 2023 by rpki-client on console-ams.rpki-client.org