Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32332d3233203d3e20313339343537.roa
File: 3130332e3135382e3139322e302f32332d3233203d3e20313339343537.roa (raw, json)
Hash identifier: sqs0GiSfwcZ6AcptbqF6a6BDzDSgrRs5L0Cbe6ix3MQ=
Subject key identifier: 23:AF:ED:D7:E6:AC:9B:B2:3F:0A:2A:A0:2B:09:6A:21:10:EC:EB:F2
Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Certificate serial: 06CEC7C418DFD63EB6DD0EA7283EBD1FCF2532CF
Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32332d3233203d3e20313339343537.roa
Signing time: Thu 29 Jun 2023 05:01:52 +0000
ROA not before: Thu 29 Jun 2023 04:56:52 +0000
ROA not after: Thu 27 Jun 2024 05:01:52 +0000
asID: 139457
IP address blocks: 103.158.192.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 06 Jun 2024 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ce:c7:c4:18:df:d6:3e:b6:dd:0e:a7:28:3e:bd:1f:cf:25:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Validity
Not Before: Jun 29 04:56:52 2023 GMT
Not After : Jun 27 05:01:52 2024 GMT
Subject: CN=23AFEDD7E6AC9BB23F0A2AA02B096A2110ECEBF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:de:a1:af:a1:b8:75:4b:98:e4:d5:1d:28:
bc:db:f4:51:35:82:9c:46:89:44:9e:79:74:33:ce:
89:86:3f:fb:e4:3a:ca:43:53:3d:7b:ab:2d:12:3d:
6e:99:3a:17:1b:91:7e:2d:7a:d7:61:3d:1a:5f:a2:
d1:15:51:86:d8:ee:b1:ee:81:39:c7:b3:b7:e1:ac:
b6:23:69:54:34:6c:ce:e6:98:76:fe:69:08:54:5f:
30:8f:a0:a5:76:3a:4d:fa:a5:ad:a7:19:5b:8a:8a:
a9:19:86:56:c2:df:19:42:e4:48:fe:3b:8a:25:7d:
05:b2:a8:a1:59:11:a8:29:89:43:59:c3:09:35:a2:
78:37:9e:a3:d0:15:50:32:25:7a:3f:47:03:6d:36:
44:d7:ba:0a:78:5f:14:a7:88:f9:b3:6f:f5:fe:39:
27:16:5f:89:d5:b6:be:68:b9:c8:75:c0:01:74:b3:
94:52:c9:d3:e5:87:b6:dc:9b:54:ce:cd:58:1e:e2:
4e:e4:ce:ad:f3:dc:17:9c:f1:7b:0e:e7:92:9c:0d:
ed:d2:72:c8:91:30:c6:ea:c6:22:b2:c5:bf:46:62:
3c:12:4b:27:4f:0c:35:98:61:71:28:7f:c9:74:29:
94:b6:8b:6d:a9:7f:0d:36:78:8a:8c:45:ea:c6:89:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:ED:D7:E6:AC:9B:B2:3F:0A:2A:A0:2B:09:6A:21:10:EC:EB:F2
X509v3 Authority Key Identifier:
keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32332d3233203d3e20313339343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.192.0/23
Signature Algorithm: sha256WithRSAEncryption
03:1c:07:3e:e2:6e:d4:19:55:c8:4c:d7:59:7b:7e:68:53:6f:
cc:b9:b7:6a:f6:1b:50:c8:28:c1:c5:da:6f:2c:83:b4:3b:b5:
4e:a8:3e:2d:5a:f3:be:2d:62:e0:50:53:6f:38:dd:7f:b0:b5:
0f:03:f4:71:43:ec:3d:02:67:a0:21:ec:f2:48:fd:6c:fe:7d:
d6:8d:46:ee:c1:ea:bd:dd:34:32:60:cb:7c:fb:6c:09:c0:fd:
3b:6d:b7:21:d0:87:86:ba:54:79:37:f3:73:bc:b8:3b:5a:72:
cd:d1:ee:f7:66:c0:ce:20:4c:0a:88:4d:54:53:6b:cc:40:7f:
ea:76:4c:25:23:a1:15:5d:3d:96:23:cb:25:69:b5:cd:57:10:
a1:2e:de:b2:b6:65:f6:98:da:07:3a:db:cd:b2:8b:8b:6b:db:
f3:47:99:93:fc:d0:0e:aa:02:5d:dd:06:b5:20:08:ca:c2:a2:
79:c6:e6:70:6f:d6:8f:b5:f6:e0:e5:09:5c:0f:eb:d1:45:27:
44:62:74:69:5d:f6:a2:5c:74:b8:45:94:6b:72:b6:bb:c9:7e:
48:65:43:4c:fe:c2:8f:75:0b:3f:4c:67:09:ec:5b:e1:c0:30:
d8:6e:f2:f8:48:17:78:95:f5:5f:7b:65:a5:fe:7b:40:0b:b4:
23:ad:74:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org