Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32342d3234203d3e203438343635.roa
File: 3130332e3136392e3134382e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: JmQQ+wQ5PpdjZPooQuWMkkRptLyRLyTvd88cXJyLFI8=
Subject key identifier: 6E:99:B6:8B:BF:6F:EB:3C:86:42:68:11:FF:0F:86:8D:2B:B4:F2:70
Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial: 15A8328D4F3FCAA7D07735D2AD9C0782C277949E
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32342d3234203d3e203438343635.roa
Signing time: Sun 14 Jul 2024 23:56:12 +0000
ROA not before: Sun 14 Jul 2024 23:51:12 +0000
ROA not after: Sun 13 Jul 2025 23:56:12 +0000
asID: 48465
IP address blocks: 103.169.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 08:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a8:32:8d:4f:3f:ca:a7:d0:77:35:d2:ad:9c:07:82:c2:77:94:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
Validity
Not Before: Jul 14 23:51:12 2024 GMT
Not After : Jul 13 23:56:12 2025 GMT
Subject: CN=6E99B68BBF6FEB3C86426811FF0F868D2BB4F270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ed:9c:40:d2:00:a3:0c:79:67:dd:c4:d8:ee:
d4:b0:52:38:d5:6a:5a:d8:4d:45:58:7d:34:3d:db:
a8:20:3b:2f:7b:f0:a5:00:68:bc:a5:5b:6a:32:75:
e4:73:f4:62:63:89:bf:ac:a0:ce:d6:29:90:66:bd:
ab:ef:40:1c:d2:91:ec:1d:2e:97:9f:52:87:52:cd:
4b:a3:36:5a:3a:77:0a:14:f4:08:e3:f3:12:63:08:
f1:b1:4c:25:6c:a8:24:39:6e:e3:c2:12:3f:12:46:
ef:57:ad:fe:41:d2:20:bb:16:12:7b:b6:a8:09:97:
79:ee:ab:51:48:ca:ff:4c:87:bd:39:4c:74:6f:ef:
e8:81:17:82:ae:8b:6d:7f:83:b8:27:88:c1:1a:7d:
4e:ea:b5:04:8f:48:73:b4:c2:a1:7f:5f:cc:b3:e4:
29:c5:2a:ba:c2:40:1a:23:96:da:ac:85:bf:09:74:
ad:cc:9c:59:a5:28:e4:42:e3:d3:93:31:d7:61:09:
44:dc:8f:cf:eb:bb:0c:15:86:c8:44:7b:78:93:ca:
69:c1:6a:97:e8:ae:45:c8:69:14:ea:62:58:93:f8:
26:81:b4:50:99:45:b0:e4:11:d0:d0:4a:98:b4:04:
dd:ea:dc:dc:2d:bc:e2:1b:5e:da:6f:df:40:f6:5e:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:B6:8B:BF:6F:EB:3C:86:42:68:11:FF:0F:86:8D:2B:B4:F2:70
X509v3 Authority Key Identifier:
keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134382e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b8:7f:7d:66:8b:e0:73:82:cf:42:92:8c:4f:f1:ef:48:63:
bd:18:99:f6:4e:79:b5:06:01:44:56:38:39:d5:37:0f:5a:bf:
ba:c5:db:a3:bd:6a:5f:7a:f3:9a:01:f7:f2:eb:e6:6d:db:d6:
4c:96:8e:af:c9:e7:44:9d:4f:07:2c:3c:3c:a6:6d:6c:2b:05:
23:71:40:9b:35:af:2d:22:59:81:11:a4:64:dd:21:75:48:42:
a4:0b:63:f6:0e:c5:93:8d:28:78:83:8e:3c:16:c9:63:98:31:
5b:fb:ca:74:79:ae:71:06:d9:06:80:91:36:e3:c2:f8:dc:e1:
53:b8:23:a4:65:f1:82:8e:65:38:b1:97:be:bb:26:d8:e0:ff:
54:6c:16:32:70:f9:7a:9d:7b:5b:ec:dd:13:e6:6a:b9:70:86:
53:03:93:9e:86:79:5e:25:24:91:a6:09:12:e1:59:20:59:a2:
8c:33:86:8a:d3:e5:88:58:95:37:4b:9f:4e:1c:9d:df:d3:19:
37:e3:d6:2a:50:85:d2:eb:64:0c:d9:7d:f3:16:d4:eb:d8:88:
0b:f4:80:9c:bc:cf:2e:b6:23:d1:bb:b2:c7:76:6a:fa:0f:5e:
d0:46:1a:22:c6:b4:c9:74:1c:e0:2e:d4:38:b8:23:e7:e1:c9:
00:0d:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 09:41:28 2024 by rpki-client on console-fra.rpki-client.org