Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132332e302f32342d3234203d3e203633353136.roa
File: 3130332e34322e3132332e302f32342d3234203d3e203633353136.roa (raw, json)
Hash identifier: QRSbVEv8H5Tgakk9rfhGUdkdrcnqntaBLdisEkv+yp0=
Subject key identifier: D7:98:E5:19:9B:4F:21:47:A8:0D:61:4D:0D:57:FD:64:7E:28:EA:53
Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial: 2732A734C9304DD4931DFCAD7F8B18F68F129D30
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132332e302f32342d3234203d3e203633353136.roa
Signing time: Thu 07 Sep 2023 04:00:00 +0000
ROA not before: Thu 07 Sep 2023 03:55:00 +0000
ROA not after: Thu 05 Sep 2024 04:00:00 +0000
asID: 63516
IP address blocks: 103.42.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:32:a7:34:c9:30:4d:d4:93:1d:fc:ad:7f:8b:18:f6:8f:12:9d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Validity
Not Before: Sep 7 03:55:00 2023 GMT
Not After : Sep 5 04:00:00 2024 GMT
Subject: CN=D798E5199B4F2147A80D614D0D57FD647E28EA53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:7c:d4:2f:67:06:1c:4b:fd:fb:4b:ea:63:
53:9a:ae:19:be:4e:50:1f:6c:f2:6b:c7:69:28:a1:
05:79:f4:bd:4b:56:dd:ef:cf:34:1a:d5:69:16:44:
44:1f:81:ab:db:c3:21:24:f9:ff:c4:9e:86:49:c6:
49:86:c0:b9:bb:15:eb:05:a9:8d:e2:2b:9b:02:0b:
72:47:e8:e7:65:90:19:53:72:9a:96:3c:09:b1:c1:
e7:34:6b:55:2b:29:57:d5:fd:63:d1:7c:fe:04:29:
5b:8e:8c:e6:bd:10:66:03:a9:0e:76:ad:c9:69:3a:
53:ea:d0:0a:ad:0f:46:39:b0:3c:a7:50:c1:d8:34:
12:b8:90:ea:72:b6:9c:3e:bf:cb:66:d4:b8:c6:2f:
ad:5d:ba:26:af:11:ea:16:55:58:12:ed:72:7e:b5:
47:72:59:54:66:60:cf:96:07:d2:7f:65:9e:35:6b:
1c:ca:52:f6:0d:11:99:13:1d:09:17:cd:00:61:04:
04:c6:4c:09:b0:b5:ae:a4:5f:ef:1c:59:36:6d:21:
70:89:dd:bc:2f:b0:e0:24:f3:4d:8d:6d:7d:a2:07:
41:06:c1:89:78:46:ef:8d:cb:e4:68:b3:06:df:08:
cc:b2:d6:08:7b:53:20:f0:07:39:1e:18:32:e1:2f:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:98:E5:19:9B:4F:21:47:A8:0D:61:4D:0D:57:FD:64:7E:28:EA:53
X509v3 Authority Key Identifier:
keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132332e302f32342d3234203d3e203633353136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:87:f0:1b:40:b0:de:e6:2f:37:1c:03:5f:e2:6b:ec:d8:b8:
f7:85:1a:46:a3:75:83:b2:73:05:ef:e7:0c:6e:ad:63:7e:6b:
9d:1e:ed:22:65:06:90:65:17:59:d9:81:eb:f4:1f:d6:ea:80:
6f:54:8d:79:74:00:5a:d3:c4:bd:7e:98:93:ff:8c:af:4e:a7:
2f:02:80:ba:64:49:ca:00:60:f1:b3:7c:2f:35:08:a8:1c:96:
e0:c3:fc:70:65:8f:62:18:0f:66:1b:97:d0:15:1f:4e:b3:8f:
7a:52:ac:be:e5:59:e4:57:ed:7b:b6:aa:99:46:c5:de:e6:af:
83:bd:2a:bf:06:32:97:b0:e1:83:9f:8c:29:dd:2b:b1:5f:5c:
21:b3:ef:f6:80:1a:d3:e1:fe:30:79:50:ae:7f:03:82:20:47:
c0:7b:dc:2e:98:f2:04:49:f0:70:a0:4f:b9:6a:9b:1e:fa:d6:
41:b5:4e:82:82:89:48:cb:f5:67:54:85:33:ab:9f:76:e2:03:
21:b5:f9:13:ea:1d:e7:88:04:c4:34:75:60:59:cb:ca:11:dd:
f1:bc:26:5a:ce:5c:71:56:4e:20:e6:aa:21:fb:f7:9a:1b:d5:
cb:82:f1:15:14:64:1f:a8:33:4b:10:78:71:c3:a5:73:7d:86:
14:4e:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 08:30:47 2023 by rpki-client on console-ams.rpki-client.org