Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232332e302f32342d3234203d3e203137393935.roa
File: 3130332e3136392e3232332e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: 8wMSYomwwd99QhFQqTz64W+MH/kv9BBTkhlJsROtBDE=
Subject key identifier: C5:FA:BD:10:53:09:99:E1:BF:A0:CA:BC:05:BE:90:A3:C5:78:4A:A9
Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E
Certificate serial: 70CDB51F1E36D0086834934F57AFF9447AFF6274
Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232332e302f32342d3234203d3e203137393935.roa
Signing time: Thu 08 Jun 2023 07:00:46 +0000
ROA not before: Thu 08 Jun 2023 06:55:46 +0000
ROA not after: Thu 06 Jun 2024 07:00:46 +0000
asID: 17995
IP address blocks: 103.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 10:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cd:b5:1f:1e:36:d0:08:68:34:93:4f:57:af:f9:44:7a:ff:62:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E
Validity
Not Before: Jun 8 06:55:46 2023 GMT
Not After : Jun 6 07:00:46 2024 GMT
Subject: CN=C5FABD10530999E1BFA0CABC05BE90A3C5784AA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:e2:7b:c1:66:24:81:e8:06:58:4f:28:5b:
ca:69:bb:d2:a7:29:04:e1:5d:c9:a5:68:85:b0:13:
43:a2:56:ab:d7:96:ee:ea:bc:8c:e3:af:12:1a:c5:
78:75:c7:f8:aa:e3:1c:ef:29:81:af:7c:56:2a:8c:
8e:19:06:3e:86:c4:39:12:27:fa:62:6d:0d:17:c6:
0b:5d:b3:a3:27:f0:89:68:6e:d7:28:98:9a:01:24:
83:9a:1e:0b:38:cc:1a:6d:a8:9b:ab:b8:42:7f:29:
75:06:e9:96:5b:74:f7:12:cf:60:8d:d2:1b:d0:28:
fe:6c:42:e2:90:a6:c1:a1:54:19:8d:e0:84:f4:bf:
6d:ff:b7:95:e9:40:3d:bd:cf:3a:04:31:15:d2:92:
1a:8b:dc:d2:7d:88:08:ed:84:40:29:bb:9b:df:01:
f0:d6:b9:43:6f:d3:14:90:56:b6:a3:7f:e7:4a:b6:
56:f4:66:fd:11:37:fc:00:44:85:23:72:33:96:9a:
29:c9:8c:50:17:71:6a:d8:32:d8:a1:82:ba:57:c5:
43:8c:a7:e3:75:b0:92:82:b2:0a:54:6d:f6:52:e4:
46:4d:ce:cb:d2:dc:48:a6:86:30:08:d6:c4:d2:d2:
3c:4f:69:19:71:70:84:83:1f:d3:cb:9d:f9:53:bc:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FA:BD:10:53:09:99:E1:BF:A0:CA:BC:05:BE:90:A3:C5:78:4A:A9
X509v3 Authority Key Identifier:
keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/3130332e3136392e3232332e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:4f:96:4a:e7:61:cb:82:f0:88:e1:a6:f4:15:94:12:b3:39:
10:9d:66:a6:77:81:38:d5:c3:14:9d:ef:52:88:8a:fe:ca:84:
c5:d2:29:01:e4:1c:22:86:ec:09:47:fe:31:46:ac:f9:32:c9:
e6:9e:72:eb:87:24:79:a2:d0:d3:df:9c:98:83:f2:8e:81:7e:
37:f0:fe:73:9a:81:6a:e5:c8:53:6b:0c:ea:46:00:18:46:29:
18:82:e9:65:bb:7c:8f:b4:bc:f1:9d:1f:a5:2f:e9:99:8c:53:
8a:0e:51:04:42:61:62:61:d1:cb:d7:c9:26:e6:59:49:f3:1c:
25:ac:ba:56:d9:87:fe:a9:bc:26:9a:37:98:61:08:68:b8:ee:
20:d8:2a:cb:32:05:37:83:b6:3f:e1:5b:2d:c7:34:f9:57:b5:
15:dd:f8:40:45:76:b5:97:46:cb:cd:c8:8b:fa:ee:e8:c8:44:
96:9a:41:7e:07:53:fc:6a:23:98:de:65:f4:b4:ac:7a:2d:97:
d9:f0:16:9d:1d:73:aa:11:2b:51:dc:7b:5c:d6:d3:31:3a:1f:
ab:5c:0b:d5:6a:10:10:67:4d:e1:97:e5:7c:c0:f8:45:e0:7c:
7d:19:1c:87:17:c6:5d:67:57:44:81:c2:0f:e2:94:1b:f3:eb:
9a:75:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 12:33:38 2024 by rpki-client on console-ams.rpki-client.org