Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa
File: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (raw, json)
Hash identifier: ADePAXAIFArIqXjdNCcyDL8nBcXHCIt7CmOFIYCNjD4=
Subject key identifier: A4:1B:F3:07:54:C4:E0:5D:E6:F2:A9:D0:CC:05:F8:CA:35:93:C1:75
Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5
Certificate serial: 3C09703A4640407E455FF5034273ABC9770A101D
Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa
Signing time: Wed 12 Jun 2024 02:33:48 +0000
ROA not before: Wed 12 Jun 2024 02:28:48 +0000
ROA not after: Wed 11 Jun 2025 02:33:48 +0000
asID: 149976
IP address blocks: 103.157.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 12 Jun 2024 15:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:09:70:3a:46:40:40:7e:45:5f:f5:03:42:73:ab:c9:77:0a:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5
Validity
Not Before: Jun 12 02:28:48 2024 GMT
Not After : Jun 11 02:33:48 2025 GMT
Subject: CN=A41BF30754C4E05DE6F2A9D0CC05F8CA3593C175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:dd:a6:5b:ec:a7:26:38:17:92:4a:40:99:
15:d6:30:83:90:00:73:ba:fd:e3:37:40:e4:0a:68:
17:88:c3:2b:6f:2f:fc:ba:fb:97:09:fe:6e:2f:d9:
9f:c7:54:7e:f2:d1:c2:28:f5:18:12:73:d8:f9:71:
92:f1:f7:c8:d0:b7:04:0a:32:e5:16:fb:ef:c6:8a:
23:35:16:24:82:b2:c4:63:6a:2e:5b:55:2e:a6:d3:
16:21:7b:a6:bf:07:70:e5:24:a9:8e:e2:7f:de:db:
48:37:e0:24:5d:13:e7:70:c1:69:7a:a9:ec:7f:a7:
34:32:8d:0f:50:54:55:73:e2:da:94:37:6d:73:1a:
85:06:d7:ce:83:ac:95:82:0d:b1:17:bc:c5:c0:fb:
37:e7:f5:bd:cf:03:c0:94:2f:54:d8:29:5c:37:7a:
4e:02:68:2d:2a:65:b0:49:b0:16:b7:81:c8:8d:6f:
10:b1:20:2f:37:2f:be:d3:ab:d2:d4:6f:cb:52:20:
01:5c:ee:ef:3a:3d:aa:ee:1e:62:b5:c7:b8:8c:27:
4a:97:f0:ea:84:32:70:3b:47:fe:1b:27:bd:af:67:
ff:db:97:6e:ff:e2:f0:e6:0d:c1:ea:f2:68:4b:e7:
e0:a0:96:01:57:72:7b:86:cf:a9:f5:17:ad:8d:dc:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1B:F3:07:54:C4:E0:5D:E6:F2:A9:D0:CC:05:F8:CA:35:93:C1:75
X509v3 Authority Key Identifier:
keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.157.62.0/23
Signature Algorithm: sha256WithRSAEncryption
82:72:53:ae:f2:8e:21:01:c3:48:77:3c:3d:b1:1d:6c:ae:81:
48:01:07:ec:6b:8c:2d:d1:c8:bd:f6:b0:1a:76:a0:11:5d:a6:
e8:f6:b8:b8:26:ef:f7:92:c0:58:20:a4:60:25:5d:93:80:48:
ca:81:ac:a6:81:e4:3d:7f:0f:05:49:0b:09:02:4e:cf:c8:02:
e1:90:3d:50:03:ef:d7:19:fe:61:26:58:bc:51:a1:b6:62:bf:
b8:f0:8f:37:a8:74:8a:f1:58:80:44:ef:75:7b:d8:3b:9f:bf:
fb:27:2f:07:48:5c:fd:8d:8d:3e:2a:a2:eb:b4:99:d7:3e:d7:
fc:e1:06:4d:87:ac:ec:22:0f:6c:5f:3b:35:bd:7e:1c:98:29:
8c:03:cd:b8:00:97:33:50:e0:45:39:7c:b9:6d:da:60:2d:27:
1b:ca:6d:a3:63:14:1a:6c:66:28:26:76:40:08:a0:c7:53:36:
4d:ca:f1:38:54:ca:f3:fe:f7:e8:41:3b:70:a1:0f:62:e6:97:
27:10:54:87:10:6e:f3:bb:57:1b:fb:a3:79:d6:71:91:71:bd:
bd:56:19:56:78:56:43:e9:52:38:63:d3:2f:32:db:d8:49:1c:
58:27:46:62:ef:df:5f:ce:db:36:73:09:38:54:ec:f2:5d:b6:
87:80:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:05:57 2024 by rpki-client on console-fra.rpki-client.org