Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32342d3234203d3e20313439333437.roa
File: 3130332e3137392e3231382e302f32342d3234203d3e20313439333437.roa (raw, json)
Hash identifier: bRNr0JIv9p5iZwIH4e+7fTIIX4w9n7iRMUG8ofPH+eU=
Subject key identifier: 8C:6A:2D:8A:9B:A7:DE:D4:08:6E:F5:D2:18:EB:4A:00:CD:00:DA:93
Certificate issuer: /CN=139934661CE07BEBBFA824F7225502B15AE8B653
Certificate serial: 753CC5EEAC3C64259C84C3D1BFD131862AC61F54
Authority key identifier: 13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32342d3234203d3e20313439333437.roa
Signing time: Sat 11 Feb 2023 09:00:00 +0000
ROA not before: Sat 11 Feb 2023 08:55:00 +0000
ROA not after: Sat 10 Feb 2024 09:00:00 +0000
asID: 149347
IP address blocks: 103.179.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:3c:c5:ee:ac:3c:64:25:9c:84:c3:d1:bf:d1:31:86:2a:c6:1f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139934661CE07BEBBFA824F7225502B15AE8B653
Validity
Not Before: Feb 11 08:55:00 2023 GMT
Not After : Feb 10 09:00:00 2024 GMT
Subject: CN=8C6A2D8A9BA7DED4086EF5D218EB4A00CD00DA93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:fd:b0:8a:15:87:1e:d9:b1:f1:5b:a7:67:
ac:cb:97:92:e3:0b:b0:b9:a8:e1:20:75:69:d9:3b:
5d:e6:1d:38:4f:21:6d:7e:78:c7:cb:f0:76:5e:04:
59:4e:78:cd:fa:fe:e2:60:b2:9c:65:ff:54:39:3f:
08:8d:94:a8:4a:bd:78:61:3c:de:7b:c3:6e:f2:fa:
e6:0f:17:94:d3:14:78:cc:c4:30:43:a1:67:0a:f0:
7f:f6:1a:69:bf:a8:a9:af:ce:36:59:05:f0:9b:f9:
f4:7f:e3:02:59:7f:d5:19:14:48:70:ae:08:ef:30:
08:ae:46:81:89:2a:9f:72:a6:60:ce:85:a7:2b:f4:
a4:ac:60:6c:ab:d6:c3:92:51:7a:6e:e7:f4:10:ba:
b4:bf:7f:58:20:52:5b:8f:07:c6:41:c2:7c:11:97:
1f:4f:52:09:04:5c:4a:32:71:02:37:2a:38:19:c5:
9b:b3:e8:54:d3:85:64:75:9b:5d:aa:15:1e:75:17:
62:af:ea:93:0c:3a:df:ac:8c:99:ae:83:84:6a:15:
fb:9f:2f:7b:a7:48:0c:74:15:51:6f:bc:f1:c8:68:
b6:2f:46:43:4a:53:2b:34:34:d1:db:34:06:06:92:
06:52:84:6b:86:06:07:f4:29:3b:7c:34:61:1b:af:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6A:2D:8A:9B:A7:DE:D4:08:6E:F5:D2:18:EB:4A:00:CD:00:DA:93
X509v3 Authority Key Identifier:
keyid:13:99:34:66:1C:E0:7B:EB:BF:A8:24:F7:22:55:02:B1:5A:E8:B6:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/139934661CE07BEBBFA824F7225502B15AE8B653.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/139934661CE07BEBBFA824F7225502B15AE8B653.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ca292b2-4ae4-41df-887a-c172c3e1ae73/0/3130332e3137392e3231382e302f32342d3234203d3e20313439333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d3:96:78:73:53:a4:a4:96:b7:70:62:bc:23:09:c1:e4:de:
e8:27:3f:f2:7c:9f:60:e2:40:aa:95:04:63:03:17:1b:43:51:
ba:c4:6d:93:c4:3f:51:e5:2b:0a:1a:bd:f0:e4:85:a2:0f:ed:
6f:4f:89:4c:31:4a:f6:d1:ce:84:5f:e3:81:d4:31:29:6c:37:
b2:f8:07:c1:a3:17:81:40:3a:5e:4c:f3:e7:83:35:20:67:e6:
22:fb:61:a0:80:8a:9e:c9:f3:51:24:d0:60:67:d5:83:89:f4:
79:6f:ff:d2:3f:c6:6a:4d:b4:ac:04:a4:15:2a:76:15:e6:5c:
4d:4b:4e:cd:f5:6c:12:f1:c6:f4:1c:2a:23:fe:84:90:c7:aa:
ad:bc:b4:c9:f6:d7:15:62:91:6b:58:7b:c5:cb:bf:50:91:77:
b0:a0:c1:ad:92:a5:08:5d:a9:7e:d3:e7:fa:57:64:5a:dc:1f:
f4:1f:b1:13:99:bc:41:e4:dc:11:df:51:7f:d7:b9:47:8b:66:
cb:37:de:e6:d3:01:32:19:68:61:d1:09:c4:d9:29:38:42:c0:
38:38:37:58:e3:b3:b6:6f:70:d8:cd:c4:79:82:7e:f6:f2:6e:
34:5f:99:37:6b:77:44:26:77:bb:72:c9:33:30:eb:b9:95:d9:
d1:45:cf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 03:50:25 2023 by rpki-client on console-ams.rpki-client.org