Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132322e302f32342d3234203d3e203633353136.roa
File: 3130332e34322e3132322e302f32342d3234203d3e203633353136.roa (raw, json)
Hash identifier: ehhAKohwWKGO8fAuUQRMvGFKEdlUSaLy8DEdScXN9uc=
Subject key identifier: EC:62:53:24:45:F9:CE:E5:4A:98:08:96:FE:58:BC:F6:98:6E:21:C2
Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial: 724BB32F459D3E24205DBEC8995E10EC8DEE563B
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132322e302f32342d3234203d3e203633353136.roa
Signing time: Thu 07 Sep 2023 04:00:00 +0000
ROA not before: Thu 07 Sep 2023 03:55:00 +0000
ROA not after: Thu 05 Sep 2024 04:00:00 +0000
asID: 63516
IP address blocks: 103.42.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:4b:b3:2f:45:9d:3e:24:20:5d:be:c8:99:5e:10:ec:8d:ee:56:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Validity
Not Before: Sep 7 03:55:00 2023 GMT
Not After : Sep 5 04:00:00 2024 GMT
Subject: CN=EC62532445F9CEE54A980896FE58BCF6986E21C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:ad:3b:15:fb:f3:bd:43:80:17:0a:b1:5b:
fe:a0:d2:bb:85:ec:e5:07:ff:3c:be:36:91:22:f9:
f8:42:c6:09:6c:b2:22:6f:47:6e:50:05:45:c2:da:
b6:84:94:34:64:85:30:de:09:62:7d:fa:59:31:ed:
38:ac:44:9f:d9:52:c9:e4:69:77:58:b2:4f:a6:c8:
c1:10:45:dd:c6:34:8e:ad:ac:de:93:9b:e1:92:b6:
9c:46:fa:40:9a:c6:93:4e:e1:e2:b1:ab:00:ff:4b:
c3:ef:f1:ca:65:d8:a5:62:10:bb:b6:9c:4a:18:c8:
6f:41:d9:30:59:c3:a5:67:93:9f:ad:46:3d:bc:01:
2d:80:8e:43:32:14:a1:29:03:8b:83:46:59:0d:7c:
c9:83:af:b9:3f:b5:7d:83:d5:f2:ad:0d:0d:84:d8:
62:28:54:4c:49:52:48:8b:fe:21:71:75:bc:13:07:
c7:d5:db:4d:ab:29:d1:60:4a:32:63:9d:70:e0:bf:
ce:33:19:89:5d:79:b0:4e:c1:1c:0e:d2:9f:97:b5:
9b:85:9d:0a:af:5b:01:6a:67:b3:82:c1:60:da:c3:
91:88:87:49:6e:ca:b8:74:21:29:ab:3a:60:71:9d:
5d:94:76:1a:f8:9c:1f:3d:23:5c:bc:4e:48:f4:26:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:62:53:24:45:F9:CE:E5:4A:98:08:96:FE:58:BC:F6:98:6E:21:C2
X509v3 Authority Key Identifier:
keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132322e302f32342d3234203d3e203633353136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.122.0/24
Signature Algorithm: sha256WithRSAEncryption
68:00:10:12:2c:e9:5a:d6:bc:16:e0:51:35:27:ee:e7:f0:a5:
31:b6:5e:80:de:ef:9e:c2:d9:3b:09:b6:e8:f9:99:f3:4a:41:
58:42:e7:57:40:c6:be:f7:41:c4:0c:74:f5:72:5a:4e:6d:6e:
68:80:b5:79:91:7f:ae:c8:13:d9:56:05:69:e5:82:f8:2c:03:
66:35:f7:32:56:5d:66:2d:e1:df:3a:aa:2c:31:41:24:8d:54:
19:62:2a:18:20:28:0b:84:64:95:92:26:c1:29:07:84:61:5e:
ca:4b:e6:50:a4:5e:a9:7a:b7:39:ae:52:8e:89:02:7a:7d:ef:
3e:6c:ae:6c:fa:f2:cc:01:ea:87:fc:66:b8:af:1b:83:c9:5d:
ab:1a:75:9c:25:01:31:02:61:3d:d6:8e:4a:2d:7d:55:63:92:
ca:a5:bb:5a:5c:25:21:e0:9f:80:39:b7:c1:3e:2a:a7:e7:20:
e7:56:32:31:2a:ef:db:65:0d:a3:8f:61:dc:08:25:83:7b:ea:
fc:fa:a1:a4:06:36:6d:59:c4:c8:0f:e9:a8:30:05:0c:1f:e8:
74:84:7a:63:cc:93:24:36:cd:18:60:10:cb:5b:10:8b:fe:81:
46:07:1e:89:b6:b2:15:9c:3c:28:1a:ee:eb:7f:e6:46:f2:58:
a3:76:8c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 08:30:47 2023 by rpki-client on console-ams.rpki-client.org