Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa
File: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (raw, json)
Hash identifier: mWVxGDy27rVc4SnvfN5bRlB4OH4zidIkLNUwX4utdnk=
Subject key identifier: 9D:DA:0D:7B:44:7B:F3:19:25:97:DE:7F:80:70:E4:B4:35:BD:8A:E9
Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA
Certificate serial: 0A2D7B1BA236D41F06970556403D6716340B57AB
Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa
Signing time: Tue 21 May 2024 04:27:49 +0000
ROA not before: Tue 21 May 2024 04:22:49 +0000
ROA not after: Tue 20 May 2025 04:27:49 +0000
asID: 151575
IP address blocks: 103.99.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 16:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2d:7b:1b:a2:36:d4:1f:06:97:05:56:40:3d:67:16:34:0b:57:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA
Validity
Not Before: May 21 04:22:49 2024 GMT
Not After : May 20 04:27:49 2025 GMT
Subject: CN=9DDA0D7B447BF3192597DE7F8070E4B435BD8AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f0:32:b6:9f:99:e2:b2:44:72:67:30:f4:bc:
de:67:3d:c3:c6:5f:e4:7d:6e:cc:2f:34:40:31:97:
22:26:c0:d8:e3:e3:58:b1:4e:b3:2a:95:40:47:09:
17:73:fd:e6:cb:6e:0a:e3:86:06:77:8c:31:cb:f1:
27:77:3b:74:d9:f1:13:7e:4f:f8:e6:ae:be:be:5d:
64:0c:ef:35:56:4f:aa:b9:b7:06:1d:98:fe:9f:05:
87:67:83:b1:7c:38:f8:bf:17:48:22:7a:07:64:de:
da:bb:d9:a3:9a:9e:ad:7f:0a:54:1c:ad:63:73:6e:
dd:5b:f4:58:42:20:e8:72:5f:4f:a2:10:b3:40:ee:
95:1f:5c:44:fe:a7:7b:dc:7b:36:09:e8:cb:ed:6c:
bd:29:81:b0:8a:60:7f:c0:f8:b2:62:e5:48:35:96:
38:82:bc:7d:49:03:6b:5f:12:9f:b3:af:88:8e:3e:
1d:3f:8b:ca:a5:09:1d:91:29:b2:f8:55:80:d6:89:
f3:d6:01:f4:7d:2a:72:8e:b2:a1:77:44:45:61:41:
20:1a:f6:29:34:d0:d3:9b:ad:25:3a:20:1f:4b:bc:
26:b3:8b:15:ce:ae:91:0d:48:71:79:9f:43:5a:a1:
20:a6:2c:40:20:06:fe:bc:61:94:5d:0e:ac:be:c2:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DA:0D:7B:44:7B:F3:19:25:97:DE:7F:80:70:E4:B4:35:BD:8A:E9
X509v3 Authority Key Identifier:
keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.99.136.0/24
Signature Algorithm: sha256WithRSAEncryption
67:68:89:01:46:86:84:8a:e8:4b:af:64:d6:c7:63:bd:31:a3:
83:4e:03:5a:f8:b0:c1:88:13:b8:b6:68:35:92:97:43:ed:36:
41:c3:f3:54:75:4f:6e:a2:e5:35:ad:48:73:79:21:70:ef:fa:
35:f9:fb:aa:dc:59:10:d5:e1:b9:1a:bb:b8:9b:df:a0:07:4d:
72:75:9d:1c:60:e0:a6:e6:09:09:84:da:bb:bf:54:ed:5c:2e:
c5:f8:ca:5f:01:a7:84:8a:3b:75:be:fe:01:64:91:43:60:aa:
2b:39:e5:37:b0:c8:53:41:12:18:5a:8b:b3:eb:60:c4:e7:80:
fe:db:94:9b:60:3e:cf:0c:b3:04:1b:41:52:d2:9f:e1:6b:d9:
73:87:fa:f5:c7:d4:ff:4c:37:9f:21:39:b1:be:8c:cf:a0:b5:
05:37:df:a6:2a:37:d1:2d:0a:3c:f8:34:a4:88:61:8e:dc:8a:
a1:6d:c4:f8:68:02:00:3b:b2:0e:d6:fc:bb:fe:03:c6:bc:7d:
93:44:52:e1:58:8e:5a:05:a7:38:49:4c:c9:5a:18:d5:c3:54:
15:f1:d7:0d:7c:d0:b6:bd:16:0e:5a:47:25:9c:38:d2:76:65:
03:24:f0:cb:ab:f1:97:d7:40:3c:3c:0a:9f:62:1d:2b:ab:c5:
9b:98:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:04:09 2025 by rpki-client