Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233352e302f32342d3234203d3e203137393935.roa
File: 3130332e3137302e3233352e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: Yf++NG/hMfht+aBvRxlJ5wcATM8tLaifNyqGxOBYWD4=
Subject key identifier: 65:44:6B:B2:73:72:85:7D:E7:B1:95:CD:31:9D:58:51:CE:33:2F:D0
Certificate issuer: /CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Certificate serial: 60728C86C6F4BF5B50C7C8C3630E7755441DCD8D
Authority key identifier: CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233352e302f32342d3234203d3e203137393935.roa
Signing time: Thu 08 Jun 2023 08:00:01 +0000
ROA not before: Thu 08 Jun 2023 07:55:01 +0000
ROA not after: Thu 06 Jun 2024 08:00:01 +0000
asID: 17995
IP address blocks: 103.170.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 10:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:72:8c:86:c6:f4:bf:5b:50:c7:c8:c3:63:0e:77:55:44:1d:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD7C267C58AE2F51817FAA5202B0BF91C84ECED4
Validity
Not Before: Jun 8 07:55:01 2023 GMT
Not After : Jun 6 08:00:01 2024 GMT
Subject: CN=65446BB27372857DE7B195CD319D5851CE332FD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8e:5e:8e:18:a3:75:d5:af:ad:f0:da:a3:f7:
a6:2c:97:5d:96:af:cf:89:44:75:37:e3:72:48:7c:
3f:3b:f0:83:fb:49:2a:ff:03:39:0d:7b:76:ff:13:
b8:20:18:40:6d:53:a9:1f:f3:ae:5c:f0:fc:55:e5:
a1:91:64:33:c3:9a:9d:99:c9:55:d7:70:e2:37:3c:
43:9b:71:97:36:2f:fc:3d:e3:cb:12:17:6f:3d:db:
25:a6:35:64:d5:05:24:55:06:b6:3c:4b:f0:b9:66:
0a:9e:24:28:e6:2c:d3:21:5c:47:26:6b:21:42:7d:
be:10:8c:90:a1:ca:ff:6b:ef:04:45:1e:da:87:84:
2b:71:0e:fd:86:37:df:d3:32:12:e0:06:2a:e5:bd:
54:a6:ac:00:b7:1b:51:38:1d:5c:c8:c4:ed:9a:5e:
50:0a:93:7e:44:a5:33:4a:58:16:d5:17:9e:b8:9a:
ff:cc:14:c8:6a:c7:5d:27:97:73:a7:e8:58:16:43:
d7:9e:a9:1c:10:27:db:78:13:5f:d1:f5:33:6c:b0:
8d:94:a2:00:4f:cb:0f:c9:b2:d0:1e:86:1e:d7:03:
1e:6b:0a:b1:a3:cd:ff:e5:a2:d7:97:9f:71:49:58:
ab:fb:14:63:6a:62:00:b5:0d:44:40:73:f4:03:62:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:6B:B2:73:72:85:7D:E7:B1:95:CD:31:9D:58:51:CE:33:2F:D0
X509v3 Authority Key Identifier:
keyid:CD:7C:26:7C:58:AE:2F:51:81:7F:AA:52:02:B0:BF:91:C8:4E:CE:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD7C267C58AE2F51817FAA5202B0BF91C84ECED4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8144d576-3818-49d6-8662-f8df89ab2863/0/3130332e3137302e3233352e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:05:19:a4:64:6c:0a:aa:4c:61:e4:bd:cf:7a:f3:f6:88:7f:
59:68:25:d9:86:78:8e:d5:5f:6d:5e:3b:d7:c0:9c:ea:bc:ac:
2f:b1:a8:1c:03:f6:3e:91:37:33:2e:95:a6:eb:67:d6:3c:6e:
cf:19:a6:b4:41:bc:20:07:49:e2:a0:d6:35:cf:e1:d0:72:00:
9b:c3:de:c2:3c:7d:e2:c0:9c:30:1b:00:69:a1:b8:49:bc:86:
d7:db:75:1a:90:5c:f9:60:f3:15:1d:3b:5c:db:4f:50:a9:75:
7c:c6:5d:04:0f:88:5a:32:8e:22:b9:6e:7d:0f:19:4e:6b:51:
fe:af:f8:0f:09:40:35:36:6a:41:ef:5e:e8:ce:c9:0b:e5:36:
d7:ac:b6:58:e9:2d:2d:fe:a6:4a:55:99:2a:27:6c:7b:cf:dd:
91:b5:63:b8:7d:5f:28:83:86:23:cb:89:d7:c4:69:a7:06:0d:
2c:67:71:6a:60:17:77:53:c0:0e:a8:2e:cd:45:cc:2c:ac:19:
21:eb:c1:d9:36:76:d0:2d:05:c6:e3:ca:9b:41:be:f6:88:79:
46:a8:d9:29:0d:71:35:b9:d5:dd:20:28:05:91:4b:17:d3:6f:
7b:c1:73:4b:73:e5:f3:12:5d:a9:0a:49:cc:f1:fa:de:68:3c:
e3:2d:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 15:04:42 2024 by rpki-client on console-ams.rpki-client.org