Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32332e302f32342d3234203d3e203137393935.roa
File: 3130332e3137312e32332e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: 0IRALcxRdvOETt+J5r0iI2RijVwleP1PiWrtJZRfaXA=
Subject key identifier: AD:96:0E:56:11:61:DA:2A:CE:8F:A7:EA:6C:F5:9A:17:A1:04:A4:B4
Certificate issuer: /CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B
Certificate serial: 49B4E5B66AE7C380792F50FF82F760D27F2F3528
Authority key identifier: 18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32332e302f32342d3234203d3e203137393935.roa
Signing time: Fri 09 Jun 2023 09:00:21 +0000
ROA not before: Fri 09 Jun 2023 08:55:21 +0000
ROA not after: Fri 07 Jun 2024 09:00:21 +0000
asID: 17995
IP address blocks: 103.171.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b4:e5:b6:6a:e7:c3:80:79:2f:50:ff:82:f7:60:d2:7f:2f:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B
Validity
Not Before: Jun 9 08:55:21 2023 GMT
Not After : Jun 7 09:00:21 2024 GMT
Subject: CN=AD960E561161DA2ACE8FA7EA6CF59A17A104A4B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:a9:4b:0a:61:6f:12:5a:e1:36:7a:f7:7e:
45:d8:8c:80:36:60:98:75:4e:69:9e:29:6e:00:6e:
b9:b3:79:cd:54:c8:e4:a9:b5:68:a0:51:3f:53:02:
57:57:de:c3:c1:25:43:20:f5:dc:a1:4a:e4:48:ec:
93:fa:22:a1:7a:28:15:dd:60:3e:26:ce:ac:9d:b4:
2a:6f:88:a9:89:6d:56:ef:60:70:ae:a9:b6:16:24:
90:aa:c1:47:1a:ff:7d:54:f1:40:0e:a8:f0:ac:15:
e7:b3:a8:c0:cd:6f:20:2f:74:b9:b2:aa:cf:40:df:
7d:ef:75:87:ca:be:6c:34:48:f1:e9:77:66:41:c2:
39:6a:0c:d1:4d:a8:b1:db:8c:be:d8:ed:65:78:54:
62:f4:cf:c1:27:65:6e:cf:85:a1:66:c5:22:06:06:
a5:f0:a4:8a:ff:ea:79:43:ec:84:fa:57:e9:07:e2:
5c:a4:fa:b3:0f:a9:7b:28:13:12:c1:ef:5b:f3:29:
13:0c:c8:78:1a:4b:91:64:5c:a1:2c:e2:15:d3:74:
db:7e:64:f7:41:22:47:8f:21:2f:62:89:1d:3a:49:
8c:49:7f:f6:70:d6:44:91:26:55:b0:6d:f4:cf:a1:
5d:d1:38:43:3f:67:c2:b9:1a:5b:51:54:b9:4a:b4:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:0E:56:11:61:DA:2A:CE:8F:A7:EA:6C:F5:9A:17:A1:04:A4:B4
X509v3 Authority Key Identifier:
keyid:18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/3130332e3137312e32332e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.171.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d8:e9:93:a5:5b:ef:31:3a:6e:4b:3b:8a:b4:1e:3e:a2:04:
9b:ec:64:ad:b5:16:a6:6b:26:0b:8a:ee:44:ac:23:ba:60:45:
44:99:e2:10:ac:2d:30:72:bc:8f:94:00:be:f7:b2:f2:51:7f:
07:05:4e:5a:85:94:cb:e9:20:92:af:00:7c:41:60:88:e5:c0:
92:83:04:5b:cc:05:5b:e5:6a:f7:f4:cc:d8:45:71:ca:3a:44:
73:5d:68:44:8c:9e:96:34:c3:14:8a:13:dc:68:4a:e4:19:4c:
ed:07:a6:a3:44:de:c8:a7:5f:9f:26:e7:90:d0:94:67:2a:a8:
60:2a:ef:d8:28:af:6b:0a:77:d7:eb:f4:65:fe:d6:a1:14:a3:
fd:55:e8:45:16:74:b1:5c:55:56:c2:18:f5:58:32:80:c1:c9:
34:aa:75:e7:3e:78:77:a7:ef:92:f7:16:06:08:de:c9:76:70:
f4:1a:68:d5:24:92:84:f4:72:f3:e4:74:6d:a1:85:3a:76:3d:
a1:31:ae:b5:ed:e8:ab:59:ce:90:2e:bb:c3:b0:c8:77:7c:9d:
e1:fd:30:e2:9b:da:f1:f9:83:63:64:f4:1d:20:ea:09:0a:95:
ad:f5:99:aa:84:f1:c0:7d:1c:52:60:3a:09:21:19:05:e6:7b:
cd:f5:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org