Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132322e302f32332d3234203d3e20313430343537.roa
File: 3130332e3138392e3132322e302f32332d3234203d3e20313430343537.roa (raw, json)
Hash identifier: w6f/qMOrRSc92jcwVzFpzkr14ZbjzRhu1YICdWk0/jA=
Subject key identifier: 07:25:9F:D6:B8:FE:B7:36:0C:9C:F5:51:5A:98:41:00:54:E6:99:3C
Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728
Certificate serial: 36DB74A62BAF3E882D93343ECDBEC494D2B16C9E
Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132322e302f32332d3234203d3e20313430343537.roa
Signing time: Wed 03 Jan 2024 11:43:59 +0000
ROA not before: Wed 03 Jan 2024 11:38:59 +0000
ROA not after: Wed 01 Jan 2025 11:43:59 +0000
asID: 140457
IP address blocks: 103.189.122.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 06:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:db:74:a6:2b:af:3e:88:2d:93:34:3e:cd:be:c4:94:d2:b1:6c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728
Validity
Not Before: Jan 3 11:38:59 2024 GMT
Not After : Jan 1 11:43:59 2025 GMT
Subject: CN=07259FD6B8FEB7360C9CF5515A98410054E6993C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:16:50:66:ef:72:7e:c6:e9:6e:92:38:bf:
8a:1b:3e:2d:e8:e6:96:1f:d0:81:98:d7:6d:dd:0e:
8b:f4:49:40:45:da:b3:a9:cd:6e:e5:06:19:bc:52:
9e:7e:dc:a7:2b:05:61:bf:b9:72:62:df:d3:81:02:
c3:d5:67:f1:b1:3e:bb:15:ce:cd:c2:c4:03:6d:0a:
a8:6f:ff:7d:fc:35:f0:ce:ab:19:a9:9d:93:54:2d:
66:ce:c9:80:42:a5:65:34:77:39:bf:70:7d:37:d2:
bd:be:2b:fd:08:12:cb:f4:b1:f4:86:df:59:d1:d2:
77:67:71:94:8a:80:a0:62:b3:cd:d1:2b:82:5d:25:
8e:dd:89:f4:3e:94:9a:84:b4:7c:c5:4c:a9:e5:ac:
bd:de:32:11:55:08:83:6e:1e:4c:c4:4f:18:41:0e:
36:fd:7c:ed:c0:98:0b:ce:3c:e4:d8:a2:58:5c:8c:
e9:e0:a4:fd:84:56:07:18:b2:67:aa:42:1b:38:d4:
20:61:2e:15:1c:b0:db:1a:cc:00:24:41:ed:3e:5d:
d9:31:5e:4d:c9:93:86:77:c4:d8:d4:84:77:79:95:
90:b4:ad:dd:5c:4b:79:df:36:78:98:17:bf:93:b2:
31:a0:1e:bf:0f:1c:ef:00:58:6d:43:9e:f5:bd:06:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:25:9F:D6:B8:FE:B7:36:0C:9C:F5:51:5A:98:41:00:54:E6:99:3C
X509v3 Authority Key Identifier:
keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132322e302f32332d3234203d3e20313430343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.122.0/23
Signature Algorithm: sha256WithRSAEncryption
73:7f:2c:b5:3c:9b:44:97:fe:32:93:3e:f1:6e:61:5c:87:84:
79:2e:ea:d1:b4:d7:1a:36:6e:5f:56:3f:3d:1a:52:73:ab:89:
93:de:13:47:c4:98:fc:b3:fa:8d:97:bc:83:82:e7:0e:af:49:
b2:46:6c:2d:2b:e8:71:34:67:56:d4:e4:7f:3f:a0:73:40:6a:
aa:16:5e:dd:7a:0b:9d:36:c0:a2:75:3e:96:11:81:47:01:d8:
41:eb:c7:fc:1b:0b:6c:8f:8d:67:a4:3e:5c:85:c4:f0:2f:11:
39:f3:e8:83:df:ea:11:e0:66:e5:65:03:42:1b:df:c6:6d:75:
04:15:c9:10:21:e6:1a:35:7d:7f:84:dc:09:36:cb:0e:43:d6:
b2:69:08:f9:5f:18:ba:91:16:cd:4d:27:e8:d9:ea:9a:47:62:
d8:cd:4d:ac:23:f3:a7:f2:dd:5c:1d:cb:db:0f:be:fe:a3:10:
d7:32:3b:5b:b2:90:c1:10:b2:e8:98:2d:ae:6d:12:37:72:0d:
6d:e7:8a:83:d6:38:af:0e:55:73:5e:94:a3:35:82:cb:8b:98:
df:17:2f:ad:37:01:cb:9c:d2:cc:8c:e0:4a:00:e2:f9:27:82:
87:23:79:e3:1b:91:eb:78:f0:20:69:71:3d:b4:53:0d:04:8e:
b3:24:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 29 11:11:23 2024 by rpki-client on console-ams.rpki-client.org