Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32342d3234203d3e203137393935.roa
File: 3130332e3137302e3139362e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: 8ZD9TLZjp3ZL0D62BX1aanEuzVRdOv1D2V5r6AMOKQA=
Subject key identifier: FF:37:D4:8E:03:49:93:53:EE:79:89:B3:A3:A7:C4:3F:F2:5B:D2:AF
Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
Certificate serial: 1629FEF37711CE988016D327125B425271B7A41D
Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32342d3234203d3e203137393935.roa
Signing time: Fri 09 Jun 2023 05:00:01 +0000
ROA not before: Fri 09 Jun 2023 04:55:01 +0000
ROA not after: Fri 07 Jun 2024 05:00:01 +0000
asID: 17995
IP address blocks: 103.170.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 10:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:29:fe:f3:77:11:ce:98:80:16:d3:27:12:5b:42:52:71:b7:a4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3
Validity
Not Before: Jun 9 04:55:01 2023 GMT
Not After : Jun 7 05:00:01 2024 GMT
Subject: CN=FF37D48E03499353EE7989B3A3A7C43FF25BD2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:c1:5c:f5:4b:de:c0:2b:e8:a8:e2:a9:03:
bc:1c:bf:1a:38:ea:83:ec:9e:c0:93:0c:4a:0e:9e:
b0:50:13:fb:05:74:5c:a7:fb:41:06:45:f7:f5:0f:
8a:66:52:8d:d5:a2:26:09:3b:6b:f1:b0:f9:a0:d2:
78:ad:13:ed:ed:05:13:35:b3:ed:7d:96:e4:fd:a3:
09:55:48:91:24:47:be:36:cd:92:7e:27:a4:19:72:
07:67:ab:fa:a4:9e:48:33:16:a8:1e:33:ba:67:0b:
e0:a0:34:e5:8f:88:6f:a8:3c:ea:a9:62:18:9a:57:
10:91:84:cd:3a:5f:77:b9:b4:4e:71:d9:6c:c5:8c:
cc:fa:a2:a9:73:ae:7b:21:ea:71:0b:b8:e9:d1:dc:
b9:65:42:cd:6e:ac:51:f3:50:1d:18:f8:36:bd:8b:
7d:6d:78:77:6f:a4:02:6f:14:2c:0f:d7:27:7c:4f:
2e:82:e1:14:20:9b:37:b9:3e:b2:e6:87:12:fb:83:
10:4b:cf:69:6a:9d:06:60:d7:66:d3:6a:bf:e4:52:
c6:02:2d:8f:60:cd:e9:a0:ad:99:af:ae:12:1a:fd:
44:6b:14:71:9c:9e:5d:16:2e:5b:13:05:dd:43:04:
48:25:6c:2c:7b:b7:7c:7a:65:1c:4b:99:04:78:cb:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:37:D4:8E:03:49:93:53:EE:79:89:B3:A3:A7:C4:3F:F2:5B:D2:AF
X509v3 Authority Key Identifier:
keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.196.0/24
Signature Algorithm: sha256WithRSAEncryption
07:07:dc:08:51:ba:71:e5:3e:a2:4c:3c:1e:e3:f5:d3:83:1c:
78:52:dd:20:f0:dc:19:e8:3f:05:0e:c1:5c:bc:9c:33:24:be:
e2:98:0c:bd:13:61:fc:f7:1e:ad:0a:aa:3d:55:fd:e6:94:b5:
5a:57:d3:c0:70:96:c2:c9:dd:a7:82:41:92:97:b9:66:87:fa:
cb:dd:1f:0d:68:68:f0:61:d6:43:cc:b0:cd:6d:7b:17:c7:fd:
f1:97:ed:75:49:47:12:02:29:a1:a3:58:97:48:2e:88:6f:70:
15:c0:c0:06:c0:6b:dd:d3:5a:cb:0f:5c:00:5d:e7:7f:28:01:
5c:eb:11:48:00:87:d4:97:7a:40:a0:65:99:a4:71:1c:01:70:
4d:fb:6e:0c:ed:2b:29:b7:29:e0:ba:4b:fb:da:e1:86:c9:b4:
99:94:d9:9c:08:8a:bd:1a:d8:14:27:fc:04:59:e1:ce:cf:c5:
8a:ab:ee:95:5f:4b:63:b9:cc:e4:3f:f8:8e:cf:1f:15:ab:38:
36:c1:47:79:13:d7:ce:42:88:d7:f6:a8:88:4c:19:b3:1e:91:
f6:65:24:76:e6:d1:00:91:73:be:60:7e:1f:4e:62:36:ee:ca:
cb:c2:5b:b2:c8:2f:1c:62:8f:2a:f3:45:85:3c:60:76:f5:d2:
84:f8:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 12:33:39 2024 by rpki-client on console-ams.rpki-client.org