Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32342d3234203d3e20313339343537.roa
File: 3130332e3135382e3139322e302f32342d3234203d3e20313339343537.roa (raw, json)
Hash identifier: wrMoWEWsjJulAQfxQDH3CFXkeciobSaAyCNQOzIXUoU=
Subject key identifier: 06:F6:41:39:EC:AF:A0:09:00:D0:83:D7:0F:EC:56:2E:40:8A:4C:9A
Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Certificate serial: 1D5F4540F6A7B30AB65CB3EA24E32D6ED284D098
Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32342d3234203d3e20313339343537.roa
Signing time: Sat 07 Jan 2023 04:01:38 +0000
ROA not before: Sat 07 Jan 2023 03:56:38 +0000
ROA not after: Sat 06 Jan 2024 04:01:38 +0000
asID: 139457
IP address blocks: 103.158.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5f:45:40:f6:a7:b3:0a:b6:5c:b3:ea:24:e3:2d:6e:d2:84:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Validity
Not Before: Jan 7 03:56:38 2023 GMT
Not After : Jan 6 04:01:38 2024 GMT
Subject: CN=06F64139ECAFA00900D083D70FEC562E408A4C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4e:0c:05:9c:8e:bf:1a:15:89:fc:a3:59:7f:
ec:7c:a2:bf:69:00:81:1b:86:60:6d:28:be:c3:96:
2c:58:ab:26:11:ad:5b:f1:ab:57:48:e0:34:a2:f9:
f8:b5:06:3b:38:a3:ab:eb:c9:18:b9:83:41:56:71:
d8:c3:14:68:b4:78:86:e7:37:4e:9a:31:75:ee:fe:
a8:f7:aa:65:96:f7:ba:db:4f:7d:15:67:5b:cd:ea:
9d:b4:70:ed:1a:b5:52:b8:5b:b8:6b:d1:f1:46:c4:
ff:17:6c:85:9c:d6:63:6e:f1:75:ca:41:f0:a4:4b:
e0:60:01:26:a4:49:5d:c3:3a:3c:b9:7c:bb:62:0c:
99:b9:a6:ad:c8:b0:60:5a:32:0b:6d:f3:a0:71:dd:
ac:9f:f4:48:a4:d5:33:61:24:31:df:4f:a1:9d:60:
e3:7a:df:04:7a:7d:fb:e9:65:d3:00:46:e6:4d:92:
17:fe:b5:17:c8:60:fc:b5:54:7f:ee:b6:94:a3:bd:
be:7b:a7:95:72:c1:5c:4d:52:2f:80:96:c2:c7:ca:
01:0e:39:c3:a2:1a:15:40:00:bc:b3:06:a8:42:aa:
5c:30:58:f9:cf:40:e4:15:b8:e0:0b:2f:56:37:8d:
a6:13:ff:62:f5:52:8e:cc:5a:8b:a2:c1:07:9b:1d:
1c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:41:39:EC:AF:A0:09:00:D0:83:D7:0F:EC:56:2E:40:8A:4C:9A
X509v3 Authority Key Identifier:
keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32342d3234203d3e20313339343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.192.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f0:7d:e0:37:bb:8b:00:15:3e:ac:84:31:43:8c:33:18:71:
ce:fb:d5:25:da:56:0d:43:d1:0a:5b:24:71:83:f7:36:ec:58:
2b:85:ee:0d:04:98:d1:d0:0c:2b:eb:62:7a:85:2e:28:5e:0e:
28:4a:e8:90:88:10:06:2d:e7:40:ad:d9:79:95:f2:0d:66:3b:
0d:61:11:fb:e1:9e:8c:c1:4e:eb:06:ea:74:7b:fd:5d:ea:f6:
b3:88:db:8f:78:bc:65:b3:4f:f3:01:15:96:f6:35:d2:3e:74:
03:66:2a:2d:7c:25:a8:dc:22:20:a2:d6:89:57:bf:9d:f4:45:
a0:ce:47:5f:67:f6:ba:bd:9a:44:79:82:b5:57:92:b7:3b:d4:
8a:89:9c:94:63:86:24:23:0d:e8:b2:84:18:b0:d6:37:03:9f:
d9:ef:74:e1:c6:47:72:47:ad:03:93:11:32:c9:d9:53:bc:93:
e5:f8:4e:a2:99:5b:e5:49:2f:cc:ee:9e:a9:cc:4d:27:e4:b4:
b0:2c:65:66:69:6a:af:b6:d8:f2:c5:ba:71:b9:a9:20:23:7a:
f8:85:74:ef:11:ab:64:66:96:98:b4:9d:67:8f:a2:43:99:65:
af:f5:88:97:f8:68:c2:e3:9d:2e:49:ac:2f:b4:1b:a0:20:9d:
5c:ca:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org