Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134392e302f32342d3234203d3e203333363137.roa
File: 3130332e3136392e3134392e302f32342d3234203d3e203333363137.roa (raw, json)
Hash identifier: P4ij7ZE9oVCgIV/VBcyaxMVxyJ7f5mbdWKwWiGxxcUE=
Subject key identifier: CD:37:CE:AC:92:4F:5A:A2:97:0B:AA:77:04:A2:B8:FD:2E:63:A7:FA
Certificate issuer: /CN=C24FD85D1F493383773D253EBB38BED908305E45
Certificate serial: 7FE43B069728A45372E70C71B59714C46B1EF43A
Authority key identifier: C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134392e302f32342d3234203d3e203333363137.roa
Signing time: Sun 08 Sep 2024 11:49:24 +0000
ROA not before: Sun 08 Sep 2024 11:44:24 +0000
ROA not after: Sun 07 Sep 2025 11:49:24 +0000
asID: 33617
IP address blocks: 103.169.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 08:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:e4:3b:06:97:28:a4:53:72:e7:0c:71:b5:97:14:c4:6b:1e:f4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C24FD85D1F493383773D253EBB38BED908305E45
Validity
Not Before: Sep 8 11:44:24 2024 GMT
Not After : Sep 7 11:49:24 2025 GMT
Subject: CN=CD37CEAC924F5AA2970BAA7704A2B8FD2E63A7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:19:a8:9b:2d:87:07:dc:68:97:65:6a:53:
f3:70:86:af:cb:98:b7:0e:eb:0b:a7:34:d9:58:79:
5f:5d:81:bf:e4:4f:de:f5:57:ca:08:c1:c1:f1:7e:
4b:bd:99:02:2a:6d:ac:47:52:62:04:fb:18:43:7c:
b3:df:da:b5:ea:0d:df:30:7b:5f:ae:e7:cd:8c:08:
13:2b:2f:53:07:9d:56:d6:ad:5f:01:49:c0:56:3f:
16:cf:55:19:39:03:d4:88:e7:d8:12:47:cb:79:ae:
e9:10:1f:3e:f2:89:a6:c0:1a:40:0f:7d:74:73:60:
21:e2:1c:2d:7e:76:a7:2f:c3:4e:ea:e3:ed:4c:ce:
08:d7:b7:a4:4a:f9:49:8e:a2:4d:7a:c2:53:e4:1e:
22:e4:b9:7f:2f:02:95:24:9e:5a:5c:da:0a:f9:10:
d6:71:b0:25:d8:e6:cf:c2:ca:06:b5:50:71:10:fb:
10:e3:cb:40:43:46:88:61:d1:82:b7:e8:8d:7e:99:
5e:bd:52:79:ef:a1:83:bd:85:f4:3f:b7:a1:c9:5f:
a0:99:b2:6e:b2:b1:fd:66:f9:e0:ef:3f:d6:03:1b:
04:65:e4:af:37:be:cd:36:87:4f:0e:4f:0b:ad:47:
5d:58:fa:8f:5c:40:89:19:e5:de:84:17:78:aa:c2:
db:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:CE:AC:92:4F:5A:A2:97:0B:AA:77:04:A2:B8:FD:2E:63:A7:FA
X509v3 Authority Key Identifier:
keyid:C2:4F:D8:5D:1F:49:33:83:77:3D:25:3E:BB:38:BE:D9:08:30:5E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/C24FD85D1F493383773D253EBB38BED908305E45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C24FD85D1F493383773D253EBB38BED908305E45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1192021e-3904-4115-af5e-3edb713baa14/0/3130332e3136392e3134392e302f32342d3234203d3e203333363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.149.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:32:1f:b6:d9:b4:e0:78:fe:30:64:ef:c6:0f:dc:38:b7:eb:
1c:82:48:fb:a9:be:6f:83:71:b2:45:cc:02:c2:38:d5:55:c4:
1a:16:b7:6e:d3:c8:14:0b:48:0d:8f:9c:a7:19:34:ca:bf:fb:
19:70:3a:00:57:5b:dd:a1:c2:69:22:e3:a9:4b:61:21:cf:cd:
9e:50:4f:7d:ef:6a:ca:41:ea:1c:3a:79:49:ce:3e:ff:07:b5:
1a:29:ef:23:e0:d5:3a:06:b5:46:f2:0b:6e:84:d3:ed:f1:e8:
80:2e:9d:ff:9c:73:17:f9:a7:fa:34:32:70:54:73:d1:35:54:
b1:a3:36:2e:2c:25:39:0d:b8:9c:71:d3:4e:2e:37:6f:15:25:
db:81:a1:ed:de:37:e7:c3:bf:27:e0:8b:a5:b1:3d:f0:90:5b:
50:19:9e:a9:7a:21:ba:f4:fd:3e:be:0e:a8:f9:25:28:2a:f4:
16:0d:07:b0:32:ca:8f:bd:7e:57:45:6d:14:a9:d0:43:45:8f:
45:88:60:f8:02:70:03:00:18:6b:c0:78:9f:4e:48:20:43:3d:
9e:e6:7b:8a:b4:36:4d:dc:b2:f4:1d:5a:13:a6:ca:34:81:52:
b2:56:d7:28:e0:8f:b1:9d:32:49:58:ff:75:a7:d9:21:47:84:
24:b6:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 09:19:45 2024 by rpki-client on console-ams.rpki-client.org