Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132302e302f32342d3234203d3e203633353136.roa
File: 3130332e34322e3132302e302f32342d3234203d3e203633353136.roa (raw, json)
Hash identifier: hadFZf9fvmvihLzV0r1XReS8OJ/KIWrgbJvJrIKFtWk=
Subject key identifier: D2:B5:BE:38:ED:E9:51:74:DD:1E:1D:C4:1A:BF:D6:FC:DB:4F:91:55
Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial: 476F2A51020E433EE29BB524F942F6515305FD38
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132302e302f32342d3234203d3e203633353136.roa
Signing time: Thu 07 Sep 2023 05:00:00 +0000
ROA not before: Thu 07 Sep 2023 04:55:00 +0000
ROA not after: Thu 05 Sep 2024 05:00:00 +0000
asID: 63516
IP address blocks: 103.42.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 02:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6f:2a:51:02:0e:43:3e:e2:9b:b5:24:f9:42:f6:51:53:05:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Validity
Not Before: Sep 7 04:55:00 2023 GMT
Not After : Sep 5 05:00:00 2024 GMT
Subject: CN=D2B5BE38EDE95174DD1E1DC41ABFD6FCDB4F9155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9b:63:0d:af:7b:67:c7:ca:40:e4:ec:04:6d:
f6:0f:ae:b9:4d:55:00:b6:80:70:c7:a6:e5:58:99:
7e:a0:5b:7a:83:03:7e:b5:92:c4:99:c7:fe:ce:6e:
93:ba:9c:04:c6:07:09:00:9b:f1:0e:33:7b:a2:ab:
ec:a3:f1:70:b1:2b:0d:b7:64:5a:d9:30:a0:c2:6a:
12:dc:26:d1:82:a0:a3:7e:99:c1:6b:49:46:75:66:
a5:51:91:b2:cd:71:02:5e:e2:3d:0a:6b:c6:55:91:
e6:2a:5c:e2:b0:fa:bf:39:ec:f9:8e:eb:f2:06:a0:
97:d6:99:c5:6c:7b:17:36:93:b3:a7:78:6a:ec:8c:
89:d0:1e:80:74:ae:fc:39:25:30:84:59:d4:a3:d8:
f7:97:ca:f9:70:9a:ef:1e:92:56:b7:de:24:61:2a:
48:6e:ff:01:de:0d:08:c2:d1:0e:41:59:6b:5f:8a:
f4:58:07:7e:79:2e:34:4a:e8:b2:97:a4:25:a2:fa:
4b:24:75:41:7f:89:bd:cc:72:90:5a:57:b9:7b:51:
ea:0d:86:c0:77:df:4a:18:8e:96:f0:09:43:f9:40:
cd:d0:e0:4b:70:c0:55:5c:a0:33:9d:b3:9c:80:a0:
42:ba:25:cd:8a:41:33:30:6b:05:fe:e0:cb:0a:de:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:BE:38:ED:E9:51:74:DD:1E:1D:C4:1A:BF:D6:FC:DB:4F:91:55
X509v3 Authority Key Identifier:
keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132302e302f32342d3234203d3e203633353136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.120.0/24
Signature Algorithm: sha256WithRSAEncryption
27:9e:ef:11:3b:e3:98:46:8c:c2:8f:3e:fc:47:e1:52:3c:ff:
1e:83:b6:fc:14:4e:ea:13:d7:a2:f6:96:55:8c:e6:4d:8d:9f:
25:28:c8:e5:78:9f:7e:67:fc:86:a0:b8:d1:5d:f8:c4:02:87:
95:be:b2:39:e0:1f:b3:1a:0c:e9:d3:bc:40:c3:dd:6f:71:da:
c3:f9:f3:2c:59:f5:d0:f4:27:9f:64:f5:bb:b5:29:d2:33:ae:
f5:18:f4:2c:60:1c:02:bf:28:50:77:84:56:4b:0c:ce:e6:c6:
4d:a5:dd:06:e3:a2:04:16:aa:af:ef:c8:a7:80:6e:7a:9f:ed:
d5:c8:c1:6e:f0:9d:74:5a:a7:93:45:d0:ea:1c:ba:8b:3e:69:
34:40:6d:d8:04:55:74:f2:b2:f6:de:a6:b1:0b:26:fc:4f:0f:
71:48:8b:19:dc:30:5b:0c:11:52:13:a5:16:5f:3a:25:45:74:
68:c1:0b:41:4d:23:68:68:23:a3:0a:5d:aa:1b:33:73:32:9b:
29:06:42:ff:18:22:49:ba:b0:0e:0c:28:57:d3:b0:93:8b:cc:
83:a0:45:fa:73:db:53:3c:bf:08:26:e0:4b:8a:b2:f5:91:32:
f4:cf:b2:fa:c6:21:b6:8e:bd:4d:65:09:ec:38:0c:9b:b1:02:
8c:24:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org