Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/3130332e31332e3133382e302f32332d3234203d3e20313530323135.roa
File: 3130332e31332e3133382e302f32332d3234203d3e20313530323135.roa (raw, json)
Hash identifier: MghG5g7oz1CjYSXABwFvKE0+UpShfnQw1dYPawc1kuk=
Subject key identifier: FB:F5:3D:12:CB:3F:4E:09:24:FF:38:54:0B:F7:61:4A:BB:CF:65:44
Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B
Certificate serial: 5C4853941171F7FBA495C753A28597AE26BD405B
Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/3130332e31332e3133382e302f32332d3234203d3e20313530323135.roa
Signing time: Sat 03 Aug 2024 07:22:54 +0000
ROA not before: Sat 03 Aug 2024 07:17:54 +0000
ROA not after: Sat 02 Aug 2025 07:22:54 +0000
asID: 150215
IP address blocks: 103.13.138.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 10:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:48:53:94:11:71:f7:fb:a4:95:c7:53:a2:85:97:ae:26:bd:40:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B
Validity
Not Before: Aug 3 07:17:54 2024 GMT
Not After : Aug 2 07:22:54 2025 GMT
Subject: CN=FBF53D12CB3F4E0924FF38540BF7614ABBCF6544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:42:b4:52:16:da:07:9c:d2:e9:07:24:af:
8c:eb:45:db:ce:0a:90:dc:63:e3:04:f8:c8:3a:4b:
31:44:38:01:b4:bd:be:2e:96:8e:d3:38:7d:3f:cf:
27:d2:2b:aa:51:95:77:da:41:0a:bf:c0:2c:93:6a:
62:15:dd:3c:5c:ad:13:92:06:b3:85:48:1a:c3:3e:
70:e7:29:22:a8:03:d2:f7:6c:59:6c:e6:3d:2d:cb:
5e:6f:50:d1:e7:d0:7f:96:f6:0f:52:eb:e5:fc:fe:
48:ff:54:21:ef:e7:34:d0:fc:f3:e3:06:89:e4:59:
5a:59:c7:22:a8:a9:72:a2:c3:d6:fd:f9:d7:80:00:
93:d5:64:d2:0a:0b:db:38:88:63:25:25:b7:2e:64:
8b:6f:9a:de:e4:47:b3:26:bb:1b:41:3f:5e:92:aa:
17:94:c8:98:5b:2d:35:40:30:a3:04:18:a8:13:41:
9a:ec:40:a6:32:13:2a:29:5c:4d:1c:f8:1f:ef:8c:
cc:75:37:8b:6d:64:fd:07:52:dc:4b:c0:52:b5:c8:
cd:6a:0b:1a:22:8f:70:c5:b2:00:f7:e5:fc:e8:66:
95:b8:fc:d2:88:b5:80:c8:78:5e:56:8f:60:21:9d:
2e:df:21:8c:b8:4c:f8:bc:5d:a0:48:68:a3:46:e6:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:3D:12:CB:3F:4E:09:24:FF:38:54:0B:F7:61:4A:BB:CF:65:44
X509v3 Authority Key Identifier:
keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/3130332e31332e3133382e302f32332d3234203d3e20313530323135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.13.138.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:be:ee:15:b6:65:02:42:13:1f:a2:97:3d:13:ab:cf:48:82:
f3:9c:b6:8e:26:75:57:90:04:76:85:de:d9:60:ed:ea:89:d3:
a5:f3:ba:dd:6c:b0:95:a8:a6:f2:fc:1c:0c:94:b7:b2:45:f2:
8b:e9:bf:b1:b2:d0:6a:8d:5b:d3:7e:b4:36:d7:e3:b6:50:c6:
2e:0c:82:7f:72:05:ee:0b:c1:fa:be:99:20:cf:84:26:92:f2:
6b:cf:e8:45:17:af:17:08:a3:72:4b:45:b4:fd:f7:b5:9b:c6:
9c:45:f9:8f:4f:88:35:23:05:72:e1:c3:53:2d:d7:00:96:b5:
99:92:48:06:f0:99:d1:c9:f4:22:e0:06:37:f5:45:30:c4:db:
f7:d8:db:0c:cb:0f:6e:6a:9c:ed:5c:61:fb:95:ec:60:d9:83:
de:76:92:d5:a5:9f:f7:67:2a:64:0e:b0:a8:a3:9b:c4:f0:06:
26:68:0b:08:14:75:30:67:bc:c4:31:7d:5d:b8:77:31:91:25:
44:29:72:5f:b0:12:62:cd:4e:7d:af:ae:72:9c:68:c8:54:7f:
58:f5:d1:94:3b:ff:7d:20:14:85:be:0d:51:b2:3e:e2:d3:cd:
2f:88:06:8c:5c:0c:a4:b4:60:58:43:4c:32:eb:40:98:e3:f5:
92:a9:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 13:12:28 2024 by rpki-client on console-ams.rpki-client.org