Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32322e302f32342d3234203d3e203137393935.roa
File: 3130332e3137312e32322e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: z/UnwQoqPt34LlrQxHJS3u+aq4vWWMLKgG+E7iMwErI=
Subject key identifier: 72:4D:BB:33:8D:DB:F7:C5:4F:77:FC:FD:55:B0:92:A2:85:A8:84:90
Certificate issuer: /CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B
Certificate serial: 63C199BD78962E9844DDA4D4BB2F795F4BC32408
Authority key identifier: 18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32322e302f32342d3234203d3e203137393935.roa
Signing time: Fri 09 Jun 2023 09:00:22 +0000
ROA not before: Fri 09 Jun 2023 08:55:22 +0000
ROA not after: Fri 07 Jun 2024 09:00:22 +0000
asID: 17995
IP address blocks: 103.171.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c1:99:bd:78:96:2e:98:44:dd:a4:d4:bb:2f:79:5f:4b:c3:24:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B
Validity
Not Before: Jun 9 08:55:22 2023 GMT
Not After : Jun 7 09:00:22 2024 GMT
Subject: CN=724DBB338DDBF7C54F77FCFD55B092A285A88490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:53:e4:d4:dc:89:80:49:bf:a3:7b:43:a8:
58:a4:c6:b4:df:c6:bf:82:6f:f7:dd:56:73:e0:52:
2e:7e:41:ca:d9:67:fa:81:a6:52:90:42:0d:c3:aa:
99:ba:ab:23:f1:05:56:6a:dc:52:68:cb:70:f3:e6:
76:f7:c6:72:8e:22:c6:91:fb:ef:85:83:7a:7b:19:
53:2b:fa:c8:33:2b:9f:68:32:67:a0:d2:74:93:40:
fe:40:3c:99:da:e6:34:c9:0c:fa:be:cd:9f:d4:a5:
af:2c:66:f6:38:32:45:be:a7:b0:a8:72:ab:8c:ca:
45:eb:2e:76:86:c2:e4:45:73:0c:36:2f:98:7e:d2:
ba:37:e3:d8:c1:da:8d:74:de:13:ca:c9:a8:0a:4e:
02:7c:32:8b:85:52:d5:83:44:ee:7c:c5:d4:d1:5a:
b5:0c:16:79:2e:71:61:81:76:58:de:1e:2a:14:c9:
ed:58:b5:8b:cc:38:aa:48:8f:a8:61:0a:6c:8d:07:
44:8c:38:bc:61:0d:1c:fd:2b:c6:39:a7:ca:fa:33:
7b:f8:1a:25:a2:b7:f6:b4:ba:47:80:f2:7f:36:7e:
86:bd:77:e3:08:17:af:9e:81:0d:80:58:29:95:84:
25:64:1a:7a:67:3f:9c:3a:bb:49:58:36:aa:71:51:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:BB:33:8D:DB:F7:C5:4F:77:FC:FD:55:B0:92:A2:85:A8:84:90
X509v3 Authority Key Identifier:
keyid:18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32322e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5d:1a:f0:6c:5c:45:f9:67:d1:b3:44:90:e5:99:82:82:f2:
2f:d5:9e:8e:1f:f1:8f:d5:05:b1:64:c5:9c:1d:ad:91:99:0f:
50:d1:d8:22:8d:ff:04:e7:1d:2b:3f:a8:34:0a:e2:c9:ca:e6:
3d:f7:66:a5:0e:30:3c:e1:3a:64:08:07:bb:05:4e:29:ca:ff:
a5:1d:80:b8:3b:a8:ce:58:62:d9:21:b5:c7:f1:88:8e:6d:05:
8a:ab:c8:9c:fb:94:a5:57:77:9e:55:eb:09:71:3c:b3:96:81:
ba:54:1f:1a:90:86:11:78:61:85:56:48:d6:66:1b:01:65:c3:
99:25:8b:6d:c1:da:be:1d:b1:e3:5f:2f:79:d1:ae:4b:41:a8:
76:d4:1c:09:65:e2:43:1c:c2:a9:37:33:ed:25:e0:3a:35:7a:
7a:5d:23:cf:73:7a:c8:22:15:68:92:d7:cb:80:5f:07:3b:dc:
9f:9e:97:34:94:42:c3:17:a2:38:0e:ec:91:e5:f5:1b:c7:50:
a4:07:36:74:e7:33:1c:eb:fa:f9:28:7d:ff:c7:51:1e:23:5f:
45:56:cd:b8:01:47:cd:a5:2a:0b:26:61:52:56:42:5e:eb:86:
df:fe:00:87:35:11:e7:92:af:ba:ac:4e:21:02:1f:b2:b0:ff:
bd:9b:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org