Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32332d3233203d3e203137393935.roa
File: 3130332e3137302e3139362e302f32332d3233203d3e203137393935.roa (raw, json)
Hash identifier: 4yhjAvFMUwQmoL5bROOy6nDqabuSudGr10ktA4sb3Y8=
Subject key identifier: 30:5D:BF:D8:3F:79:B8:C1:ED:6A:F9:FD:56:30:A4:1C:EA:EB:F0:3F
Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
Certificate serial: 69F8CB3BFC2B9BFB38EF746F8918D43A0BF0F8EC
Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32332d3233203d3e203137393935.roa
Signing time: Fri 09 Jun 2023 05:00:01 +0000
ROA not before: Fri 09 Jun 2023 04:55:01 +0000
ROA not after: Fri 07 Jun 2024 05:00:01 +0000
asID: 17995
IP address blocks: 103.170.196.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 17 Apr 2024 10:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f8:cb:3b:fc:2b:9b:fb:38:ef:74:6f:89:18:d4:3a:0b:f0:f8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
Validity
Not Before: Jun 9 04:55:01 2023 GMT
Not After : Jun 7 05:00:01 2024 GMT
Subject: CN=305DBFD83F79B8C1ED6AF9FD5630A41CEAEBF03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:45:c2:2b:5a:bc:e4:34:c1:8f:9c:bf:f6:
2a:20:81:2d:36:6d:51:6a:f6:33:30:21:b4:3e:56:
df:7c:2e:8c:b3:f4:5d:c6:93:68:75:c8:e9:1d:c4:
3f:1d:45:15:c0:9a:69:a9:c5:df:a5:08:fc:fa:53:
3c:cc:7b:d4:46:b2:a2:2f:08:08:c5:7e:80:93:07:
d2:4c:17:c8:2c:31:56:63:9b:49:88:7f:71:74:32:
68:d1:73:1d:a0:b2:6d:05:07:c2:b7:af:4d:df:ea:
0a:c3:68:4e:64:16:6c:ce:54:10:14:10:a1:6c:e1:
c4:8e:5f:d8:95:f4:ce:ba:d4:fc:78:9f:f0:85:1f:
53:68:15:fa:13:9a:8c:8f:80:13:8e:87:73:d3:32:
ea:0f:07:c1:8b:e9:b2:91:ec:09:b2:4d:56:f1:c8:
c5:2f:80:99:c0:86:16:cd:aa:41:5d:4d:36:c2:25:
1a:38:cf:bf:f2:16:85:76:19:ac:68:78:70:70:c0:
2e:a5:6d:4e:df:02:b2:eb:3f:79:07:f7:7c:5f:8f:
14:a2:36:bf:28:f2:80:24:98:c4:49:a4:3e:f5:79:
bb:5b:e2:f5:f6:4a:18:2b:3b:54:a3:4c:9a:77:2b:
98:b6:f7:6e:10:3c:47:ed:94:63:c2:c0:5a:20:74:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5D:BF:D8:3F:79:B8:C1:ED:6A:F9:FD:56:30:A4:1C:EA:EB:F0:3F
X509v3 Authority Key Identifier:
keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32332d3233203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.196.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:e2:60:4c:6f:0a:70:ca:57:e7:16:0e:96:b1:79:fd:d3:27:
b4:9c:b5:b8:df:28:d3:56:9d:08:ef:4c:35:0c:32:4b:ac:6a:
d4:17:9e:c8:9a:0c:4f:53:c5:52:27:2e:6a:59:6b:d6:ab:06:
14:9d:94:a6:64:bb:34:06:10:b8:c1:d9:40:8c:35:e8:41:a9:
8b:13:c5:d9:15:a9:76:58:f3:68:d9:85:b3:19:ef:14:a1:28:
50:b5:1d:c2:b4:3a:25:27:b5:29:df:18:ff:f7:81:02:cb:8d:
57:4c:74:39:54:83:f0:e4:e4:a5:fb:23:1d:ea:31:b3:9b:9f:
09:b2:49:09:67:49:b3:7a:ec:aa:7d:15:bb:df:4f:1a:9e:71:
c5:b8:3f:b4:48:db:32:16:19:2a:52:ed:1f:19:28:33:03:80:
18:2e:05:76:c3:33:1c:df:cd:42:02:8c:c7:3d:24:1c:eb:68:
0d:a6:ce:f4:87:72:cd:d3:bb:ef:5c:96:05:8d:23:b9:ec:29:
41:93:f3:a8:eb:62:40:73:46:88:d3:27:83:5c:71:79:5c:48:
63:d9:ee:f7:f8:88:c1:32:57:a3:82:13:41:e8:fb:4c:b0:7b:
fa:16:05:9c:59:15:94:33:31:2d:48:df:ea:52:51:a3:55:25:
c0:fc:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 12:33:38 2024 by rpki-client on console-ams.rpki-client.org