Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132332e302f32342d3234203d3e203338353035.roa
File: 3230332e3135332e3132332e302f32342d3234203d3e203338353035.roa (raw, json)
Hash identifier: CTDTqkgb4+w5dIZ8KKT9gjkxHihU+G9IvGXBGUanqvs=
Subject key identifier: 9A:BC:B9:60:E3:F8:E4:C0:A1:A4:0D:F0:39:B2:D5:D0:43:47:93:7D
Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial: 63D9A9FD850544782765C4D811967D3B1AA857A1
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132332e302f32342d3234203d3e203338353035.roa
Signing time: Thu 10 Aug 2023 08:00:00 +0000
ROA not before: Thu 10 Aug 2023 07:55:00 +0000
ROA not after: Thu 08 Aug 2024 08:00:00 +0000
asID: 38505
IP address blocks: 203.153.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d9:a9:fd:85:05:44:78:27:65:c4:d8:11:96:7d:3b:1a:a8:57:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Validity
Not Before: Aug 10 07:55:00 2023 GMT
Not After : Aug 8 08:00:00 2024 GMT
Subject: CN=9ABCB960E3F8E4C0A1A40DF039B2D5D04347937D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:58:f5:ab:61:ed:6b:82:87:5f:e5:bb:ea:
44:d9:f8:c8:c0:1d:c6:09:d0:db:e2:20:ab:9d:cf:
b4:6f:a6:59:48:42:78:2f:cc:8c:1a:b9:42:1f:65:
56:d7:10:60:6e:8f:8f:8d:fd:76:07:28:bf:63:2a:
d9:f9:94:5e:3a:67:85:7c:22:5a:0f:16:39:20:e4:
cc:99:fd:af:69:a9:8e:da:51:df:f4:92:db:6f:fd:
16:d1:d1:8b:6e:44:94:93:71:b2:72:bc:29:21:b1:
46:2e:95:35:04:65:66:74:01:42:22:d0:8f:63:61:
21:fe:69:5b:ae:b7:08:f0:e4:c3:cb:9a:eb:6d:6b:
5a:e4:dd:bd:3d:1f:75:fd:67:e7:dc:7a:76:b8:72:
a3:b1:43:3a:ea:e1:b5:0e:67:bd:8c:9e:b1:30:9b:
07:24:ac:62:c2:bd:8b:26:7f:75:49:5f:b9:ab:49:
8c:ac:a9:69:7a:7e:11:a3:39:8b:71:58:67:41:dd:
37:91:7f:b9:c3:d3:7b:a3:47:aa:5b:a8:df:89:e8:
41:70:fd:59:f7:b2:21:a1:3b:60:9b:8e:56:84:ab:
9b:d1:ae:68:2b:0d:d8:8e:d9:63:07:74:ee:41:5c:
c3:47:70:51:c1:18:9c:cb:29:9e:af:ce:fd:e3:73:
a9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:B9:60:E3:F8:E4:C0:A1:A4:0D:F0:39:B2:D5:D0:43:47:93:7D
X509v3 Authority Key Identifier:
keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3230332e3135332e3132332e302f32342d3234203d3e203338353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.153.123.0/24
Signature Algorithm: sha256WithRSAEncryption
96:8c:a9:40:23:7b:aa:6c:b3:59:10:08:eb:ee:f5:8d:6a:01:
a7:e9:c0:1b:61:db:37:1e:36:44:52:34:62:1a:64:da:c6:a5:
3d:79:3d:83:15:82:08:16:23:4c:23:66:4f:48:bf:e2:60:09:
84:00:15:c3:1d:0f:36:36:c2:7f:f7:61:b1:69:79:2e:01:13:
f6:d5:9f:83:3a:05:fd:f1:d7:7c:3a:2d:0c:eb:28:40:92:fe:
fc:88:0f:e3:9a:ca:81:cb:40:e1:2c:39:26:55:3c:e8:94:70:
64:f5:08:70:a5:1d:93:19:e7:91:33:7e:b3:e2:92:75:4e:6d:
ae:1f:37:4b:73:0d:fa:fd:f4:e9:37:39:e3:8c:81:40:d0:74:
d9:16:8d:ca:52:ea:ba:df:6a:76:d7:4a:cd:a3:10:52:b3:5e:
5d:b4:8d:d4:25:8e:b0:dd:31:6c:02:ef:41:4b:87:d4:aa:2f:
ea:da:b3:49:b8:e4:e1:19:69:28:39:d3:02:55:b6:e0:04:25:
0e:ee:50:9e:e7:24:2e:04:66:4a:37:02:28:2d:f9:fb:26:2b:
a4:0a:50:b1:9f:d0:1b:45:e8:c7:4d:17:13:f9:4e:8d:97:7a:
bf:ea:42:f9:36:b4:99:fb:74:0f:9e:ae:54:ba:e8:a6:d9:22:
6a:61:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 13:55:27 2023 by rpki-client on console-ams.rpki-client.org