Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333637.roa
File: 3130332e3131362e3231372e302f32342d3234203d3e20313337333637.roa (raw, json)
Hash identifier: 6/nglbm/CT8YKaksaVIzNPWXx4hRlj56TOogQqczNyM=
Subject key identifier: D1:7A:09:45:42:CD:45:8E:E7:6B:50:E8:20:2D:6C:0D:66:11:3B:C2
Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial: 784B4480BC8158F7C33C53D6F826505CD70D0327
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333637.roa
Signing time: Mon 31 Jul 2023 00:07:13 +0000
ROA not before: Mon 31 Jul 2023 00:02:13 +0000
ROA not after: Mon 29 Jul 2024 00:07:13 +0000
asID: 137367
IP address blocks: 103.116.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:4b:44:80:bc:81:58:f7:c3:3c:53:d6:f8:26:50:5c:d7:0d:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Validity
Not Before: Jul 31 00:02:13 2023 GMT
Not After : Jul 29 00:07:13 2024 GMT
Subject: CN=D17A094542CD458EE76B50E8202D6C0D66113BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:b1:66:b8:fd:b2:9b:47:c0:2e:a9:7a:b9:
94:4c:9d:2e:1f:2b:27:70:d9:23:ec:68:04:4d:68:
d6:8e:d9:0f:43:2d:40:a7:8d:dd:f7:a7:18:a3:cb:
1d:f9:c8:49:87:21:af:12:af:9a:70:ed:38:ff:c9:
34:48:10:aa:2d:6a:e2:51:a5:d8:45:b8:f3:7b:f2:
9d:e9:c0:44:c4:7f:d6:e0:1e:b3:10:a9:e8:1c:19:
b1:c0:86:54:18:f1:1d:d9:48:3a:c6:67:e3:c6:91:
4e:2f:c5:a6:35:5f:26:60:70:8a:9e:ad:34:76:c6:
85:ce:95:bc:7c:ff:a2:64:49:c7:4f:be:fc:80:e3:
e4:74:5c:fb:b3:8b:29:c0:58:de:f6:cc:34:80:64:
54:92:28:7c:c4:89:61:97:c7:1d:ca:9e:1b:36:53:
c8:1d:49:d9:0b:82:5e:f2:27:ef:50:b1:fd:82:a1:
56:0a:a7:d8:a5:cb:33:72:48:ad:c4:04:49:0b:e5:
09:7f:dc:e5:78:f2:fc:72:68:14:a4:38:9f:1c:e0:
f3:ee:05:a8:74:5d:78:aa:ed:bc:bd:23:e5:b6:08:
3c:5c:b4:84:34:d2:cd:dc:6d:81:15:9d:36:31:8a:
0f:b5:f9:38:f3:10:71:fa:ba:f8:e0:57:2b:04:03:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7A:09:45:42:CD:45:8E:E7:6B:50:E8:20:2D:6C:0D:66:11:3B:C2
X509v3 Authority Key Identifier:
keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.116.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7f:d6:c4:0e:35:49:71:57:3b:14:5e:f5:f6:8d:4e:c4:71:
bc:6e:49:0a:72:f1:c4:9f:a7:d8:c5:ea:15:44:ed:e2:af:e1:
b2:a3:5b:14:96:4f:f3:d4:9c:cf:2c:87:01:cb:ad:b1:d3:bb:
c4:f6:89:b8:e2:72:f3:14:45:81:23:cb:e3:04:91:1f:46:29:
1c:d6:cc:71:90:2c:16:58:7e:9a:a8:63:76:32:be:f6:3d:77:
2f:40:37:28:a7:7d:0c:6f:19:2e:dc:78:12:7f:bd:84:6c:8f:
15:f3:8d:22:ca:32:bb:cf:e0:a2:40:06:a8:df:aa:3b:be:55:
df:d3:50:06:d0:31:5d:b1:98:d3:27:85:84:33:c9:16:fe:ca:
36:dc:2d:ac:14:88:95:30:d5:44:2f:03:8c:52:77:c3:cf:8d:
ce:e5:32:f7:b8:b3:2c:f7:d1:67:e9:33:bd:cb:1c:9b:f7:7e:
bb:b9:65:84:19:15:49:0a:a8:fd:6f:da:1c:9a:41:13:e1:a0:
79:ac:eb:c7:67:82:45:77:dc:1f:dc:2f:3e:85:57:c3:bc:64:
68:4e:85:97:1d:04:17:70:41:c6:e6:d5:f2:77:30:8c:b8:ac:
b3:b9:23:dc:c6:cc:81:30:c4:f4:1d:03:68:ab:22:3f:1f:65:
ca:4c:19:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 12:33:47 2023 by rpki-client on console-fra.rpki-client.org