Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32342d3234203d3e20313335363336.roa
File: 3130332e3132352e31322e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier: mwNAJSqBmmhjqVTOejEMw3znNs8Jonue8lRCcVIob/0=
Subject key identifier: 04:F1:C5:0B:55:4D:02:C8:C6:72:3D:60:E0:34:17:75:CA:B5:77:31
Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8
Certificate serial: 53419812B97B6AC532BD3AD77C19B5CF5904577B
Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32342d3234203d3e20313335363336.roa
Signing time: Sat 24 Aug 2024 12:00:00 +0000
ROA not before: Sat 24 Aug 2024 11:55:00 +0000
ROA not after: Sat 23 Aug 2025 12:00:00 +0000
asID: 135636
IP address blocks: 103.125.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 02:42:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:41:98:12:b9:7b:6a:c5:32:bd:3a:d7:7c:19:b5:cf:59:04:57:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8
Validity
Not Before: Aug 24 11:55:00 2024 GMT
Not After : Aug 23 12:00:00 2025 GMT
Subject: CN=04F1C50B554D02C8C6723D60E0341775CAB57731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:b8:d3:0d:7c:3d:58:af:e4:ad:06:d7:83:
03:46:89:c3:e8:36:c5:be:39:ea:00:0c:0a:fa:dd:
0b:0f:d5:43:d6:c1:c2:84:6c:29:07:70:58:b8:25:
f2:04:4a:ec:73:a9:aa:bc:b9:85:5a:c3:a4:d8:05:
02:82:21:a8:da:34:ae:14:8b:95:76:db:3d:90:96:
f5:54:c6:6a:ae:33:8d:fa:ab:5a:e6:e1:3e:48:5d:
3d:d1:06:ef:9b:47:27:13:fe:13:e3:1b:3a:95:55:
3c:fa:07:13:f7:15:1b:e2:13:17:4a:f2:29:c7:9e:
82:5f:22:b8:c6:e1:8c:73:b8:57:76:cf:2f:54:7b:
2a:de:39:2b:bb:52:e5:7b:ed:ae:8e:9b:9f:5e:ab:
7f:82:db:61:92:fe:01:75:fe:da:fc:6f:d5:5a:7d:
30:9b:27:cc:53:92:48:c4:78:12:de:2a:f6:27:ca:
e8:6e:67:c8:71:f0:0a:27:70:67:67:6a:20:c9:05:
29:1d:cb:2c:dd:1f:5c:c7:c8:40:46:a5:e8:52:7a:
4f:ef:fc:6b:b0:4f:f6:20:66:23:e8:34:97:de:e6:
af:25:a3:62:6f:14:54:7a:c3:b9:16:c6:5b:78:2b:
3e:c1:1e:e5:cf:f4:b1:a5:c5:bc:d7:da:94:8c:33:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:C5:0B:55:4D:02:C8:C6:72:3D:60:E0:34:17:75:CA:B5:77:31
X509v3 Authority Key Identifier:
keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31322e302f32342d3234203d3e20313335363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:fe:ca:49:d6:31:be:3c:3f:2d:74:d6:aa:5a:7c:77:3a:6f:
10:44:bc:88:b7:21:41:94:1b:5a:52:df:f8:d1:d9:eb:da:92:
3f:d2:95:cc:75:66:b3:c9:c4:fb:5e:fb:9a:4f:1f:cc:fe:d4:
65:4c:96:89:7a:c9:84:41:0f:50:3d:cc:02:3f:84:29:7f:38:
7d:f8:06:70:03:4f:e4:27:b4:75:b0:71:ce:b5:c9:e4:76:bd:
fc:88:13:97:6e:34:f1:79:ad:e2:1b:75:72:e1:eb:ff:68:c1:
c8:13:44:fe:d6:df:bf:7f:33:b3:52:b4:ae:88:bb:27:4f:69:
b6:c7:05:1d:14:ed:05:3e:36:be:f2:b0:6b:e8:9c:c3:cd:12:
6a:b1:ea:50:ea:5a:28:69:58:84:d3:b4:57:cd:56:84:3c:92:
f2:3c:b8:55:ad:95:f4:ac:e4:f7:fc:aa:61:bf:d5:c9:6e:77:
db:b8:3a:3c:95:5f:05:45:41:32:90:b1:fa:77:27:28:ff:36:
9d:f1:24:92:2a:59:9d:50:b3:59:a6:e5:cf:d6:c2:d6:0e:e7:
39:b4:d0:fc:5c:33:90:e3:f4:ea:f2:16:26:53:b7:07:9a:8b:
83:85:9f:63:8e:9f:5e:aa:4c:ff:39:c0:56:bf:ab:68:99:10:
47:03:91:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 04:24:08 2024 by rpki-client on console-fra.rpki-client.org