Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130342e302f32332d3233203d3e203436303233.roa
File: 3130332e32342e3130342e302f32332d3233203d3e203436303233.roa (raw, json)
Hash identifier: TI+YjlvJGRKe7mjiH1RMElCichlZL3/MnvMZwVzI7PM=
Subject key identifier: 05:AD:E3:56:D5:D7:ED:A2:E1:86:EA:46:3A:35:2F:C3:54:25:91:29
Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial: 525A031B6028108E36C8459AEDA2D24E49A95118
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130342e302f32332d3233203d3e203436303233.roa
Signing time: Mon 12 Aug 2024 15:33:40 +0000
ROA not before: Mon 12 Aug 2024 15:28:40 +0000
ROA not after: Mon 11 Aug 2025 15:33:40 +0000
asID: 46023
IP address blocks: 103.24.104.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 12 Nov 2024 12:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5a:03:1b:60:28:10:8e:36:c8:45:9a:ed:a2:d2:4e:49:a9:51:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Validity
Not Before: Aug 12 15:28:40 2024 GMT
Not After : Aug 11 15:33:40 2025 GMT
Subject: CN=05ADE356D5D7EDA2E186EA463A352FC354259129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:ad:ca:6f:c5:8a:41:3c:8a:ef:f2:12:15:
a1:aa:eb:21:96:c6:92:21:b1:65:20:ef:09:b0:a0:
dc:fe:26:a9:24:be:36:1e:4b:36:d0:ae:3b:2c:7f:
8a:61:ba:c3:46:4d:8a:30:1a:43:cf:e2:40:79:66:
52:9a:0c:2d:1b:85:f5:c4:5b:e3:36:c8:e4:ab:05:
82:b8:ae:e3:7e:cc:02:91:53:9f:68:4e:88:09:c2:
b1:c2:bb:83:d5:f1:fa:65:c0:90:3e:9c:7e:ad:58:
ec:fd:36:f6:cb:56:5d:a6:05:d0:79:9d:76:87:e1:
3a:48:60:e7:04:a6:c7:b4:91:12:a3:d6:fd:ca:ea:
a2:2a:49:18:b7:80:23:85:95:ab:f2:82:a1:1a:3b:
84:e7:9e:65:3c:cd:55:a4:c4:bd:7a:85:a3:0d:e8:
02:06:32:0b:40:c5:c8:d0:1f:34:6e:81:3b:92:9d:
96:20:f1:47:a1:96:65:c5:49:8f:a4:7f:4d:44:34:
ae:08:c5:c0:6f:32:5e:0f:57:73:6d:78:35:ff:d5:
c1:0a:6d:6e:0d:c9:d9:83:7f:29:ae:3d:66:4f:a7:
f5:65:32:68:ee:47:19:e5:f9:65:78:0f:d2:66:4b:
e2:b6:a4:3e:4a:d2:69:2c:bc:ae:0c:e5:85:24:82:
33:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:E3:56:D5:D7:ED:A2:E1:86:EA:46:3A:35:2F:C3:54:25:91:29
X509v3 Authority Key Identifier:
keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130342e302f32332d3233203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.24.104.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:d8:fc:e4:17:f8:b8:83:e2:61:1d:4d:0a:ce:17:81:75:bc:
f3:6e:5d:71:f8:1a:01:f2:17:90:df:fd:d9:e4:99:6a:26:ad:
69:09:3f:a9:bf:59:82:97:e4:6b:6a:8d:82:3c:98:fc:d8:4b:
c7:b0:34:16:95:68:fc:ab:d5:a0:89:5b:6e:dc:08:cc:ee:e9:
1a:58:80:f2:4b:73:9c:a3:a9:17:d8:84:4a:b7:ec:bf:4f:e7:
b4:b3:a4:91:6d:b1:fb:ea:b7:5d:24:d6:ec:ca:52:d3:bc:29:
81:8a:6f:61:78:fb:85:47:db:b3:74:34:b4:8f:c7:87:a9:0f:
33:9a:f3:c5:3c:bc:68:d1:95:56:87:b4:0c:d5:a4:e8:04:a8:
d5:fe:99:28:85:55:51:92:10:d9:2d:f1:81:02:43:b0:2f:e7:
77:f8:31:48:1c:6b:1f:ff:54:3d:20:ce:03:8d:a1:01:06:49:
8e:b6:9c:4e:a0:e2:60:ac:86:0c:ff:7d:f1:c5:0b:39:40:d8:
81:5e:cd:db:e9:48:20:c2:a7:50:67:d0:bf:de:73:ef:35:ec:
21:32:f9:bf:cd:bb:58:79:4f:77:81:f7:29:a7:bf:03:27:c4:
90:d0:46:f9:e1:87:73:a0:29:6f:93:c0:43:7a:4c:e3:a6:08:
b8:36:f8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:12:35 2024 by rpki-client on console-fra.rpki-client.org