Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32342e302f32332d3233203d3e203633343937.roa
File: 3130332e39302e32342e302f32332d3233203d3e203633343937.roa (raw, json)
Hash identifier: dTzvQdqsveAoods3bkzvcc6Pa1bZMM4NTsYvhy9/V5g=
Subject key identifier: 98:B4:9A:95:6D:22:FE:DA:4E:CA:78:32:DA:B5:49:93:8E:94:62:0B
Certificate issuer: /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial: 2AB8CF66475E3743EC3B64E230F5FB2EF2F191EE
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32342e302f32332d3233203d3e203633343937.roa
Signing time: Mon 31 Jul 2023 00:08:10 +0000
ROA not before: Mon 31 Jul 2023 00:03:10 +0000
ROA not after: Mon 29 Jul 2024 00:08:10 +0000
asID: 63497
IP address blocks: 103.90.24.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b8:cf:66:47:5e:37:43:ec:3b:64:e2:30:f5:fb:2e:f2:f1:91:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Validity
Not Before: Jul 31 00:03:10 2023 GMT
Not After : Jul 29 00:08:10 2024 GMT
Subject: CN=98B49A956D22FEDA4ECA7832DAB549938E94620B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:aa:e8:0d:99:b5:b0:ff:e6:b1:b9:3b:4b:
07:37:d7:64:0b:bd:3c:f0:07:33:dc:16:7f:26:6a:
38:24:ea:f0:3f:79:dd:90:45:df:11:b5:02:f6:d0:
84:63:da:4c:ef:a5:b0:0d:fc:96:e7:cb:cf:21:e6:
d8:f8:11:36:36:aa:06:fc:22:1c:ba:7a:e4:2f:3f:
29:b1:c5:67:80:98:03:15:0f:38:ad:ab:12:bb:67:
f2:54:95:c5:12:d9:fa:59:37:39:db:08:b9:aa:b4:
d3:47:81:ec:fd:0d:66:48:12:fc:8e:ea:38:89:9e:
e4:f3:fd:d9:f1:c2:0a:7d:83:b2:2e:ce:29:c0:81:
67:b5:96:63:7e:bf:f2:a8:85:ef:30:d5:de:19:cd:
c0:6e:2f:bb:98:6b:10:10:9d:63:b6:16:da:d8:cd:
e8:bf:cc:0b:2b:08:74:e8:ed:10:49:77:06:22:d4:
8f:fb:6f:58:33:af:6a:5c:98:42:d1:ec:f0:e4:9c:
74:0d:de:14:1f:41:96:19:94:3f:85:19:6d:4e:04:
23:4f:f1:4a:7a:f1:1d:1f:a4:2c:e6:b2:a8:57:9e:
cf:33:d8:84:cc:54:0e:28:20:44:b1:5a:a9:7c:e7:
d4:1f:71:5c:4e:62:90:72:65:ef:16:ce:a7:ca:3d:
bd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:9A:95:6D:22:FE:DA:4E:CA:78:32:DA:B5:49:93:8E:94:62:0B
X509v3 Authority Key Identifier:
keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32342e302f32332d3233203d3e203633343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.24.0/23
Signature Algorithm: sha256WithRSAEncryption
54:c0:97:cd:a6:b2:32:9c:07:34:b3:77:e0:66:2a:ec:d5:53:
f8:f1:73:63:a4:7b:09:43:d5:6d:7a:f8:79:fd:18:65:d3:dd:
f4:c8:09:cb:77:fb:4e:3f:23:90:dc:db:0b:41:57:37:49:63:
d1:5c:85:c8:a0:78:05:30:4d:85:ee:47:16:35:f0:e3:6b:94:
24:99:39:43:1a:7a:f6:19:cd:79:5d:a5:95:9d:87:b7:ae:0b:
7a:02:aa:90:30:d8:75:48:a4:d9:9b:72:3c:ea:23:ff:b6:fd:
4b:23:60:68:e1:8b:ed:2d:a9:b0:fd:ac:66:9a:ca:5b:75:7c:
f5:ce:7a:66:e1:c2:98:98:69:84:c1:5a:84:b7:95:e9:d7:e2:
13:89:0a:c8:b2:70:82:a4:66:ff:ae:df:97:5a:0e:cc:93:18:
17:66:6b:93:a0:e6:bb:a2:5b:42:2a:ef:61:be:c3:ef:b9:c3:
f3:ed:5c:46:de:ee:bb:8b:84:98:1c:a0:b2:bb:43:f5:46:63:
17:e0:44:c0:b6:dc:1b:d7:2e:fd:19:5b:c7:dd:9f:6a:56:67:
ff:7b:db:bb:0e:19:42:a0:8a:61:15:20:dd:a2:d9:8e:a1:05:
af:81:18:46:57:dd:e2:b0:6b:24:8f:d6:86:de:8a:d5:8f:0f:
3b:65:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 10:51:22 2023 by rpki-client on console-fra.rpki-client.org