Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32342d3234203d3e20313338383131.roa
File: 3130332e3133372e33322e302f32342d3234203d3e20313338383131.roa (raw, json)
Hash identifier: yqQODr+glePpNdz5oo/cmXO4CdJiJaNvzIOGe1EEVPU=
Subject key identifier: 34:85:DB:C7:5F:B6:C5:E6:81:0B:6A:66:AE:4F:B5:2B:D7:0D:B9:46
Certificate issuer: /CN=7ED240749DF73AB541823D94017C578425D757A6
Certificate serial: 45C552E000D527488F90349E6880C9BEA420F9C3
Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32342d3234203d3e20313338383131.roa
Signing time: Fri 13 Oct 2023 12:00:01 +0000
ROA not before: Fri 13 Oct 2023 11:55:01 +0000
ROA not after: Fri 11 Oct 2024 12:00:01 +0000
asID: 138811
IP address blocks: 103.137.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 23:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c5:52:e0:00:d5:27:48:8f:90:34:9e:68:80:c9:be:a4:20:f9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6
Validity
Not Before: Oct 13 11:55:01 2023 GMT
Not After : Oct 11 12:00:01 2024 GMT
Subject: CN=3485DBC75FB6C5E6810B6A66AE4FB52BD70DB946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:25:1e:00:b1:98:85:a1:a2:5a:9f:5b:7d:21:
62:e3:93:c9:11:52:58:b9:9a:14:53:9a:73:94:95:
dd:f6:dc:5a:04:b2:be:44:4c:91:7d:db:56:1c:f8:
19:7b:03:12:c4:7b:89:3d:e2:33:4c:a1:b1:79:4f:
76:8e:9e:6b:3e:01:2c:46:14:b5:55:c7:c0:4e:f6:
de:e1:ed:00:6d:b9:9e:d7:d6:ad:86:0f:35:d6:3e:
23:f7:26:9d:3e:57:0e:4b:ff:be:05:bc:57:26:63:
91:55:df:db:f3:b2:0f:dd:46:51:4e:d6:8c:36:7e:
28:5d:bb:cc:fd:89:17:94:4c:be:3b:02:6b:1e:ff:
4f:93:3d:36:2f:64:ec:ca:1b:6e:7e:44:38:98:f6:
9d:00:b6:f5:da:e5:6a:72:9b:14:ce:e7:a3:2a:99:
0e:55:4a:d7:80:04:07:31:9e:71:2f:8c:11:86:6e:
a9:c0:83:1d:03:43:8b:75:7a:71:07:2f:28:f3:93:
4c:c8:1a:17:15:ff:95:f8:1a:5b:99:24:a4:8c:2c:
2c:7a:08:0e:c3:81:e1:76:a6:b3:da:fb:4b:66:6d:
96:5a:25:67:a6:e6:12:3f:19:cd:8a:76:50:56:7f:
95:0d:a7:ca:77:3e:8c:c5:be:64:48:64:6f:c4:ec:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:85:DB:C7:5F:B6:C5:E6:81:0B:6A:66:AE:4F:B5:2B:D7:0D:B9:46
X509v3 Authority Key Identifier:
keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32342d3234203d3e20313338383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.137.32.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ff:95:74:21:6b:51:38:26:0d:2b:0d:86:86:be:c7:e3:46:
c6:aa:1f:7e:5d:46:ba:19:47:49:31:89:48:9e:7c:cc:3d:49:
ed:59:00:19:8c:c9:ea:54:8f:b3:6d:2d:dd:47:fb:49:0f:57:
53:c9:ad:5b:5e:4e:5d:82:4a:cd:96:3e:a0:59:fb:57:83:ac:
f1:e1:b3:95:3a:89:5e:c8:66:79:75:7f:dc:20:13:9a:89:03:
45:c5:c0:53:90:f1:c7:48:4a:7b:e2:39:2e:f2:59:7a:8f:2f:
75:69:ca:11:e6:e4:de:fe:60:d4:57:fd:0c:cd:5e:ba:6f:e8:
e3:a8:f2:2c:c8:06:ca:5b:99:60:f9:a2:31:a5:e3:6c:25:15:
14:e6:5a:0f:90:d6:e6:4c:e4:7a:fc:f7:bc:68:65:04:28:67:
fb:9a:16:0c:41:32:d4:3d:09:49:70:3d:4a:1b:7a:72:c7:80:
0e:c2:d5:47:5d:8b:3a:54:21:8e:62:dc:51:e3:63:cd:62:c1:
f1:ae:9b:24:86:8c:a2:6a:bd:7f:3f:f0:6e:d1:1d:5e:e0:d4:
f9:3e:d7:9f:22:2f:b1:b8:bd:7e:1a:9e:33:e1:87:ed:8b:a5:
cb:ef:e6:e2:3c:2b:20:29:1f:c7:cb:f7:a7:7e:03:98:7c:f1:
da:11:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org