Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32342e302f32322d3232203d3e203633343937.roa
File: 3130332e39302e32342e302f32322d3232203d3e203633343937.roa (raw, json)
Hash identifier: 1EpOC72MFGPgGRFp1sZkMejcClHtEs8UUY0Fme3cO0c=
Subject key identifier: 1E:42:BC:26:76:EC:32:6E:65:8D:EE:48:FC:32:86:B2:68:3E:6B:06
Certificate issuer: /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial: 02D6B392D1439FD12D2F9E3C923B1032D292E224
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32342e302f32322d3232203d3e203633343937.roa
Signing time: Mon 31 Jul 2023 00:08:09 +0000
ROA not before: Mon 31 Jul 2023 00:03:09 +0000
ROA not after: Mon 29 Jul 2024 00:08:09 +0000
asID: 63497
IP address blocks: 103.90.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:d6:b3:92:d1:43:9f:d1:2d:2f:9e:3c:92:3b:10:32:d2:92:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Validity
Not Before: Jul 31 00:03:09 2023 GMT
Not After : Jul 29 00:08:09 2024 GMT
Subject: CN=1E42BC2676EC326E658DEE48FC3286B2683E6B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:58:34:da:eb:a1:8a:64:55:f2:0e:37:d3:
ff:01:5a:2a:f9:58:97:e0:39:18:46:f4:e7:4b:84:
71:7d:19:3c:3c:3a:41:4f:61:9a:a9:18:43:16:dc:
12:af:4c:29:d9:52:b6:3c:39:65:ce:54:7e:1c:a5:
4e:f7:80:0c:52:07:be:ff:a6:e2:71:aa:d2:1d:5e:
7a:98:4f:9a:ba:f5:55:fd:ad:e9:05:c6:ab:f2:44:
10:da:70:78:62:96:4f:3d:f3:c1:1d:1f:40:e8:93:
ee:db:c0:41:28:aa:2d:ab:ec:c5:d6:29:32:51:03:
fc:c0:20:b0:9c:f2:97:10:8a:46:b8:1c:66:44:c6:
9b:5f:c8:fb:39:a8:d3:d8:fa:b9:ad:1f:36:99:5c:
e0:9d:eb:a9:97:21:94:71:b6:08:b6:e8:84:6c:32:
e6:c2:b3:96:0d:bb:42:ea:89:6a:d2:b0:5d:a1:76:
4c:60:cb:22:98:d3:e0:14:51:82:00:2b:b2:74:b6:
b9:45:9e:c4:32:19:d4:dd:35:ce:d1:2a:56:fe:8c:
8a:fb:ee:ea:76:8a:27:8e:6b:d4:d1:31:58:d8:f8:
96:82:56:ab:05:90:89:f0:dc:e9:17:6f:53:9f:d1:
ae:9f:e9:7d:0d:cd:91:08:50:69:ec:62:37:7b:6a:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:BC:26:76:EC:32:6E:65:8D:EE:48:FC:32:86:B2:68:3E:6B:06
X509v3 Authority Key Identifier:
keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32342e302f32322d3232203d3e203633343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.24.0/22
Signature Algorithm: sha256WithRSAEncryption
97:d6:f7:40:c3:81:52:66:20:4d:52:1a:d5:fb:92:28:4b:6c:
9e:a6:7f:67:07:61:e7:eb:d2:66:93:99:9c:5a:16:d4:c3:9c:
f7:ca:79:c0:ee:b9:7c:72:78:df:5c:1f:31:38:22:16:c0:23:
02:a0:b3:a5:9b:39:c2:1d:89:7d:95:6c:4f:7a:9c:29:86:7e:
ef:d5:f3:f9:82:03:82:26:0c:79:3a:55:72:9f:b9:03:90:2d:
2e:3d:f7:51:a6:3c:6e:57:36:2a:dc:70:82:4e:81:1b:4a:dc:
75:57:51:61:80:a5:f7:85:30:4c:0a:35:c8:a4:ca:7f:88:de:
9b:ef:b4:98:91:e2:6f:4f:2c:6e:3c:ab:71:4b:f3:6e:64:ba:
58:c0:0c:4c:f7:89:61:ae:5e:13:e1:4a:55:6c:7a:f0:94:c6:
5f:60:5c:63:9a:0b:bc:93:6d:c0:ef:ab:f0:6b:40:3b:e9:27:
1e:45:76:87:97:af:6b:84:16:00:a6:7e:0e:4a:74:63:e1:51:
95:89:6b:28:79:f9:74:5a:4b:68:2a:e5:33:dc:a1:55:a7:a8:
17:6c:c0:90:40:bd:e8:96:38:20:61:fa:54:a3:2e:c6:c3:c5:
2c:0b:f8:5b:89:ee:d4:f7:d4:31:13:a3:14:cc:57:d1:3a:44:
fa:77:13:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 10:51:22 2023 by rpki-client on console-fra.rpki-client.org