Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134332e302f32342d3234203d3e203338353035.roa
File: 3130332e3233332e3134332e302f32342d3234203d3e203338353035.roa (raw, json)
Hash identifier: WuH2UDw6Oyseroe8TFY7wqxAk+8WAMg7FRihu4vAGJM=
Subject key identifier: 69:69:B4:63:6F:1E:7B:AE:B8:72:2F:27:99:87:FA:E0:10:0F:96:F6
Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial: 65C4779CA6C9757EBBCE5556CB23588400E0E6EF
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134332e302f32342d3234203d3e203338353035.roa
Signing time: Thu 10 Aug 2023 08:00:02 +0000
ROA not before: Thu 10 Aug 2023 07:55:02 +0000
ROA not after: Thu 08 Aug 2024 08:00:02 +0000
asID: 38505
IP address blocks: 103.233.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c4:77:9c:a6:c9:75:7e:bb:ce:55:56:cb:23:58:84:00:e0:e6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Validity
Not Before: Aug 10 07:55:02 2023 GMT
Not After : Aug 8 08:00:02 2024 GMT
Subject: CN=6969B4636F1E7BAEB8722F279987FAE0100F96F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6f:b1:a2:85:d0:67:57:21:76:20:82:c1:c8:
4f:64:36:f2:2c:30:16:20:5b:4f:5c:6c:c2:79:5b:
ca:a1:37:32:06:74:ee:c6:83:ff:bc:fe:ce:8f:cb:
45:2c:15:13:8b:8e:7f:38:1e:03:9c:c6:64:ae:ad:
f0:82:c2:4c:34:7d:cc:89:e9:99:c9:00:ae:b2:cb:
e3:ab:39:ba:9a:2d:7a:40:c4:c9:0b:75:e7:27:e4:
b7:6a:9b:e7:e0:e4:5c:3d:13:76:a3:0c:3b:fc:cd:
03:29:87:b8:3d:fd:8f:43:db:8c:d4:37:1e:25:7d:
ad:aa:06:2a:2a:a8:8d:3f:84:b9:7d:e2:3d:7a:99:
dc:0a:bd:aa:94:e4:28:44:10:73:eb:e1:3c:ec:50:
32:9a:e1:a1:d5:9c:df:06:57:03:e6:69:7d:5e:2a:
5f:9b:6e:84:b9:16:bb:6c:eb:46:68:2e:f3:51:13:
db:60:03:20:75:e8:f0:4a:82:96:3e:e3:3f:2b:b5:
58:a4:c8:46:73:61:88:b8:bb:fc:9b:41:c6:1a:d4:
17:20:cc:65:31:cc:42:e0:45:5b:dc:a2:88:62:75:
95:41:22:d8:f8:a7:38:58:33:70:54:0e:6c:44:54:
af:e2:99:bd:26:d4:62:62:2d:a6:5a:e0:0f:07:3a:
84:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:B4:63:6F:1E:7B:AE:B8:72:2F:27:99:87:FA:E0:10:0F:96:F6
X509v3 Authority Key Identifier:
keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3130332e3233332e3134332e302f32342d3234203d3e203338353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.143.0/24
Signature Algorithm: sha256WithRSAEncryption
68:24:0c:72:27:80:c4:24:85:df:74:bf:b3:2b:7d:65:ea:6b:
e1:87:08:c9:bf:a2:e2:fb:d9:cc:e2:3c:c4:14:4f:0d:fe:40:
7d:cf:08:3c:2d:e0:33:bc:c0:75:81:24:d2:51:d1:27:ed:f5:
a0:66:7c:82:6e:ee:69:0f:cb:f3:10:68:fb:0c:3a:95:1b:25:
a5:84:79:47:f9:32:36:1e:93:2f:dc:eb:f5:92:9b:4e:6c:9a:
bc:b5:f4:d6:e0:08:66:1c:e6:53:fe:5c:a3:c2:ab:e3:1e:46:
05:50:d5:9d:4b:4c:bf:f1:cd:9f:1a:75:ee:6d:55:30:79:43:
a2:c6:c9:ca:67:fb:0e:d1:d8:5b:19:c6:d8:59:85:2b:55:c8:
2f:84:03:11:28:eb:c5:75:48:01:f6:11:ee:b6:d6:19:15:b8:
1a:b6:46:45:cd:51:f9:a1:5c:22:73:75:6b:c9:bb:a8:b5:b9:
80:72:76:1e:0f:3f:86:1e:12:a1:f9:14:9b:de:ef:f5:ee:2c:
e5:a6:40:7a:7a:b7:3e:67:76:f0:1b:1b:7f:0d:a7:8f:8b:b1:
81:97:aa:d8:25:3b:9f:60:76:e0:f8:9f:e4:8c:8a:28:e3:5e:
76:74:c6:c3:b2:7f:73:07:1f:76:69:4a:2a:57:a2:50:26:46:
50:a7:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 13:55:27 2023 by rpki-client on console-ams.rpki-client.org