Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32342d3234203d3e203338353035.roa
File: 3130332e3233332e3134322e302f32342d3234203d3e203338353035.roa (raw, json)
Hash identifier: gv4uC8nP8+HIP5bhukilthx2HTNXaK0LtXYqJjej5JE=
Subject key identifier: AE:DB:A4:FC:36:A9:A5:F7:0D:7F:E5:E9:04:78:30:FD:20:93:84:91
Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial: 07681864D1AE68E98B9BF81F559F3561A6D88523
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32342d3234203d3e203338353035.roa
Signing time: Thu 10 Aug 2023 08:00:00 +0000
ROA not before: Thu 10 Aug 2023 07:55:00 +0000
ROA not after: Thu 08 Aug 2024 08:00:00 +0000
asID: 38505
IP address blocks: 103.233.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:68:18:64:d1:ae:68:e9:8b:9b:f8:1f:55:9f:35:61:a6:d8:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Validity
Not Before: Aug 10 07:55:00 2023 GMT
Not After : Aug 8 08:00:00 2024 GMT
Subject: CN=AEDBA4FC36A9A5F70D7FE5E9047830FD20938491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:83:91:c6:85:34:1f:9b:d1:cc:53:fd:20:
21:3b:f2:7d:d9:08:11:55:48:f5:c1:70:80:69:c0:
11:42:08:38:9f:c2:72:40:e5:5f:74:da:86:5d:27:
ee:df:fb:59:a4:25:c0:f2:40:00:d4:97:c6:bb:25:
bf:3a:a6:8f:aa:4c:d8:e4:07:10:0d:a1:65:bb:ab:
d9:ef:13:30:02:ba:d6:77:cd:9e:77:14:d7:12:e1:
c7:58:5f:fe:a1:6c:e8:d7:57:30:89:d7:85:ae:fb:
da:92:a9:13:75:a1:47:f0:75:c7:22:4c:fd:df:4c:
5f:70:9c:d0:d6:40:27:5c:25:9b:35:ce:b4:7d:e0:
ac:a7:a3:5c:95:92:29:3a:6b:50:af:d4:65:b9:ed:
b7:06:68:e2:ee:50:08:d8:44:2f:02:07:48:ce:3e:
77:fe:f3:00:2d:64:84:7d:d2:8e:90:4a:51:4f:44:
4c:10:b8:75:2d:68:0a:cd:fa:9f:ce:79:b3:61:08:
da:5d:8a:84:bb:ad:da:4e:79:da:14:52:6f:79:a3:
7e:7c:29:64:40:77:62:8b:0d:a0:c6:36:40:9c:9a:
42:4d:18:9c:1c:09:0e:5e:89:1d:fd:f9:59:64:a8:
67:21:cd:f7:fa:3a:d2:16:d7:85:3e:ed:86:b1:6c:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DB:A4:FC:36:A9:A5:F7:0D:7F:E5:E9:04:78:30:FD:20:93:84:91
X509v3 Authority Key Identifier:
keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134322e302f32342d3234203d3e203338353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:74:29:f3:f4:7c:af:83:8a:ec:31:0c:ce:e1:8c:c7:92:34:
49:5e:24:6c:90:64:21:36:2d:4c:63:85:9d:a5:33:e2:ce:c4:
b1:df:09:b0:18:5d:a9:1b:17:37:91:7b:e1:e6:0d:b8:4d:56:
6c:2e:86:f6:7b:8b:c5:0a:80:08:8f:a3:6b:bd:9b:7a:a7:cd:
72:45:e8:20:1b:37:b9:3d:a9:17:5d:6a:6e:b3:46:64:25:79:
80:d5:7b:1e:41:2a:1c:03:c8:80:82:5a:55:5d:03:38:ff:a5:
65:d7:65:47:20:57:ed:c2:0d:a8:44:22:8b:f9:f2:28:5b:2b:
2c:06:93:da:68:e3:b4:ff:39:5c:c3:c7:a4:37:3a:d6:8f:52:
31:b8:59:c6:ca:df:8d:0b:69:e8:61:b0:f1:4e:20:cd:b9:62:
7a:60:0c:61:90:e2:92:15:20:f2:92:9b:e9:a4:5d:da:d9:3f:
4d:96:51:9b:7a:b1:52:11:29:34:33:29:27:70:cc:f4:ae:cd:
ea:bf:97:83:9f:96:2b:01:80:bd:4e:0e:35:63:be:b6:3c:ce:
ea:12:f7:0c:f8:85:1a:06:69:15:12:e1:b9:16:d4:2a:bb:ba:
5f:c8:7a:7d:1a:d7:da:9b:71:2a:97:3d:a9:2f:69:52:ae:f3:
ee:1d:97:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 13:48:51 2023 by rpki-client on console-fra.rpki-client.org