Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130342e302f32322d3232203d3e203436303233.roa
File: 3130332e32342e3130342e302f32322d3232203d3e203436303233.roa (raw, json)
Hash identifier: ABJbuibUK4Givubfd34+qRWj00vgUBDLRoESvPKULhQ=
Subject key identifier: 28:1E:60:A1:DE:31:7F:2F:34:03:7C:2C:76:F6:AD:43:FC:49:EC:90
Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial: 21EE5CD0D0A53588D73447B3407A84C78B28F929
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130342e302f32322d3232203d3e203436303233.roa
Signing time: Mon 12 Aug 2024 15:19:51 +0000
ROA not before: Mon 12 Aug 2024 15:14:51 +0000
ROA not after: Mon 11 Aug 2025 15:19:51 +0000
asID: 46023
IP address blocks: 103.24.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 12 Nov 2024 12:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ee:5c:d0:d0:a5:35:88:d7:34:47:b3:40:7a:84:c7:8b:28:f9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Validity
Not Before: Aug 12 15:14:51 2024 GMT
Not After : Aug 11 15:19:51 2025 GMT
Subject: CN=281E60A1DE317F2F34037C2C76F6AD43FC49EC90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:ef:f0:cc:08:9b:90:fc:c6:b0:40:ef:7a:
fa:08:fd:91:93:a4:d8:38:3d:11:cc:a5:8a:ae:16:
7b:c5:5c:c6:2a:92:12:a2:58:42:62:8a:07:82:ec:
8d:2b:91:e5:5c:aa:9d:3a:80:94:99:90:91:a4:8b:
15:eb:c5:b1:37:b7:f5:a4:bd:e3:b0:13:29:bf:3a:
91:aa:59:a7:51:d9:ec:ab:9d:d5:45:25:6c:e8:7d:
e0:42:76:2b:09:7f:6a:6f:39:30:e3:7a:3c:01:d1:
77:46:92:06:c7:43:75:a5:aa:64:08:53:c0:c1:53:
6c:fd:b4:6b:04:15:09:ab:cd:7a:c1:25:73:bf:ed:
5d:85:bd:17:dd:35:2a:bf:45:ae:b2:df:f1:53:79:
b9:24:5b:88:eb:9c:03:80:44:2b:0c:69:e6:78:78:
f7:66:8e:2e:ba:29:ac:30:11:82:b4:73:2d:37:8e:
fc:e6:ff:82:e1:e3:41:30:fb:e4:d1:ef:6b:ed:6c:
1b:8f:10:dc:e1:17:09:2e:f4:9f:52:e9:11:4e:ec:
6b:58:8d:0e:28:fa:27:f2:01:e4:c8:42:2f:a1:22:
9e:cd:7e:ae:1b:4e:60:80:b6:43:75:7e:38:9d:51:
48:cb:1a:f4:db:50:14:e4:d3:a0:0e:30:b1:9b:24:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1E:60:A1:DE:31:7F:2F:34:03:7C:2C:76:F6:AD:43:FC:49:EC:90
X509v3 Authority Key Identifier:
keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130342e302f32322d3232203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.104.0/22
Signature Algorithm: sha256WithRSAEncryption
11:58:1e:f0:cb:ed:ba:c7:9b:76:c8:93:ec:37:f3:11:53:e1:
e8:89:2f:5c:35:aa:9e:a9:75:ee:22:e8:8d:00:c4:23:c6:3f:
31:a2:ed:88:a4:f0:7b:08:5c:37:51:a9:50:94:bf:06:9c:0e:
e1:eb:97:b4:dd:11:5d:cd:71:bb:4e:e0:74:40:58:20:ca:3a:
ae:3d:9e:1e:3d:59:50:71:5e:43:e8:38:d8:2b:c1:19:c6:9a:
ba:fa:9f:cb:3a:f5:34:59:82:13:b8:d0:22:65:7e:ed:2c:e0:
84:8b:fd:b2:e4:92:f5:19:d4:b3:5e:96:7c:ae:3e:1c:af:ae:
80:a7:82:7b:2c:64:e8:34:4d:47:91:de:07:bb:5e:53:40:4e:
bb:4e:21:a5:83:46:82:33:a3:1b:e9:ef:6c:58:e6:65:61:ab:
7a:2d:8e:7d:c3:7f:e7:84:ec:3c:ad:d8:70:ef:54:e1:44:7f:
5f:f5:46:0e:89:cb:ce:39:65:de:09:06:7b:48:dd:07:f2:69:
24:d2:41:0e:00:0a:4c:5e:73:d9:75:1f:b3:5e:5f:62:bd:cd:
3a:dd:f4:84:4f:26:66:8e:24:55:4f:01:eb:37:e1:da:8c:2a:
62:57:9a:18:cf:bb:78:8b:bd:c3:3f:0c:17:17:03:38:99:0c:
35:bd:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:10 2024 by rpki-client on console-ams.rpki-client.org