Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313336383234.roa
File: 3130332e3132352e31352e302f32342d3234203d3e20313336383234.roa (raw, json)
Hash identifier: FWJO67iAVF7LxzA16yRDhj17K9oLjt/aZdH8lp28LuQ=
Subject key identifier: 4D:C0:B0:52:87:6A:71:D1:FE:D4:13:C8:89:46:2E:7B:0A:81:15:28
Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8
Certificate serial: 711A9C732224B4219BA9AE3CEFF7431BD4B5B683
Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313336383234.roa
Signing time: Tue 21 Nov 2023 18:00:00 +0000
ROA not before: Tue 21 Nov 2023 17:55:00 +0000
ROA not after: Tue 19 Nov 2024 18:00:00 +0000
asID: 136824
IP address blocks: 103.125.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 03:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1a:9c:73:22:24:b4:21:9b:a9:ae:3c:ef:f7:43:1b:d4:b5:b6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8
Validity
Not Before: Nov 21 17:55:00 2023 GMT
Not After : Nov 19 18:00:00 2024 GMT
Subject: CN=4DC0B052876A71D1FED413C889462E7B0A811528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:32:d4:8a:19:46:7f:24:9d:3a:c4:21:1d:
53:db:be:28:30:2f:da:79:fa:f0:f4:93:57:17:bf:
e3:21:13:c1:33:4d:fc:68:be:13:4e:dd:ad:06:cb:
dc:f1:84:33:4c:ad:cd:eb:9f:cf:e1:9d:91:c8:78:
42:9a:82:5f:3e:b3:59:98:de:8f:99:7f:3a:f5:cf:
6f:3f:52:09:80:24:1e:d5:68:31:97:d8:ab:00:dc:
32:3d:f1:da:f8:58:58:4d:a6:44:6d:28:25:de:f5:
c9:bf:c1:fd:4b:ab:d6:58:1a:1d:01:bb:f8:9c:97:
73:8b:35:bb:a3:bb:41:95:6e:26:6a:f9:cb:3d:5a:
86:7c:d4:ac:2a:e7:5e:a9:25:51:da:3d:98:c6:45:
36:79:c7:30:bd:50:f4:15:74:eb:c1:e9:e9:1d:51:
e4:c9:45:c1:02:33:e7:98:fb:42:71:c4:bf:36:a0:
6a:4a:e1:cb:c9:db:c2:4f:c2:33:ee:56:2b:7c:0b:
29:59:d6:db:d7:4c:c5:e2:45:7c:3d:b0:ba:9b:7a:
ea:48:17:99:63:04:8f:2c:97:77:de:64:6b:c3:ea:
6b:64:fe:63:02:37:f9:01:5b:7b:cb:ba:45:af:75:
e7:c0:cb:4a:98:a3:85:fb:d5:f1:c2:bc:02:e3:89:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C0:B0:52:87:6A:71:D1:FE:D4:13:C8:89:46:2E:7B:0A:81:15:28
X509v3 Authority Key Identifier:
keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31352e302f32342d3234203d3e20313336383234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.15.0/24
Signature Algorithm: sha256WithRSAEncryption
40:81:33:ee:b9:1f:81:1a:d9:ec:3d:43:68:80:07:0a:7f:27:
1b:67:0a:cd:c0:e6:ea:e6:29:59:d7:1d:a7:88:ea:97:9f:0c:
a1:22:df:bd:8a:07:98:0e:ec:d9:d8:55:40:cf:31:07:e2:c3:
8f:34:e1:e6:2c:ae:9c:4e:c5:06:a0:f2:95:79:46:d6:19:7e:
49:59:1e:b6:18:6a:fa:e4:b8:d1:55:4d:ff:97:27:6f:66:90:
c0:a4:88:57:d5:e7:cc:7f:ce:31:c9:90:e9:dd:78:e2:df:02:
11:50:b4:8e:3e:8d:3f:56:39:7f:a7:8f:c7:94:43:e1:d6:30:
91:6c:a5:82:c8:3d:6f:2c:1f:8b:71:69:9d:2c:0d:15:f6:61:
64:11:63:2e:1a:7b:5f:08:56:de:3c:ec:9e:8c:d2:d2:8f:02:
d8:ee:d9:5f:d4:0e:c2:b9:41:43:c5:98:a5:14:e4:be:36:34:
a6:f3:c0:c9:bf:af:ca:17:94:c0:4d:07:21:6d:ee:5d:83:b6:
1b:7b:ef:c4:7e:cc:85:9b:59:53:aa:71:ad:4b:ac:f3:f4:90:
57:09:59:f7:d3:1f:66:5b:8c:6e:07:1b:6a:28:c9:e6:0d:80:
a1:e4:24:44:10:8d:7e:1b:26:dc:17:39:99:88:3d:d7:3f:68:
5a:f0:4d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 03:30:46 2024 by rpki-client on console-ams.rpki-client.org