Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa
File: 3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa (raw, json)
Hash identifier: GTip7VtYx+Fr0iy/7KLUzxhoBtXVbrs0omjgwVV8UBY=
Subject key identifier: D6:0C:1E:ED:3B:68:72:D3:2D:9B:62:A2:6D:3B:F4:1E:1D:B0:4D:E3
Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
Certificate serial: 1367D1063EEDDF71A259792BE2FBEDDD4A802A0B
Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa
Signing time: Wed 24 May 2023 11:00:01 +0000
ROA not before: Wed 24 May 2023 10:55:01 +0000
ROA not after: Wed 22 May 2024 11:00:01 +0000
asID: 149662
IP address blocks: 103.184.178.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 16:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:67:d1:06:3e:ed:df:71:a2:59:79:2b:e2:fb:ed:dd:4a:80:2a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
Validity
Not Before: May 24 10:55:01 2023 GMT
Not After : May 22 11:00:01 2024 GMT
Subject: CN=D60C1EED3B6872D32D9B62A26D3BF41E1DB04DE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:88:ac:b5:b1:b1:fb:cb:fe:59:50:7d:4c:
d6:db:00:65:93:d1:f3:49:bc:fb:e5:06:87:b7:73:
fe:ff:fe:fe:b7:a8:c6:c8:cb:38:55:e7:c3:85:e6:
a9:0b:9f:53:ab:f5:5a:0e:2b:97:6b:42:31:7f:8f:
e8:e9:c4:eb:c9:f0:6c:ed:b1:e3:10:14:65:c2:52:
c7:b9:68:1b:1a:10:8b:27:5a:85:07:a1:80:c8:b1:
dc:57:c2:9b:56:a7:5d:00:47:f3:9c:73:4e:7f:af:
c0:82:2b:25:25:7f:68:ba:d3:b4:e9:bf:6e:04:37:
ee:22:7d:be:c7:57:7c:b4:c7:d0:06:dd:3b:08:d7:
ab:dc:a1:24:11:dd:fa:c7:b3:2b:06:12:a8:32:25:
3c:3e:79:39:03:67:7a:83:55:4a:ec:af:45:1c:2f:
2b:a7:41:ae:c5:c0:30:41:aa:93:0c:00:a6:ac:d7:
37:50:2d:6a:c5:d0:a0:f6:fc:ba:25:a3:a9:07:27:
08:b3:17:5f:78:da:b3:ab:c8:14:bc:38:32:da:13:
56:69:c5:83:e4:eb:88:14:b4:dd:ec:a2:07:71:8e:
1d:2f:1f:8d:42:40:28:07:86:64:2b:62:fc:3e:86:
a2:6b:73:a2:f9:86:8d:da:d0:0a:52:9e:79:e6:72:
3f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0C:1E:ED:3B:68:72:D3:2D:9B:62:A2:6D:3B:F4:1E:1D:B0:4D:E3
X509v3 Authority Key Identifier:
keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137382e302f32332d3234203d3e20313439363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.178.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:c6:fd:86:1c:59:08:cd:a9:5e:76:1c:e5:0e:fa:dd:c7:59:
5a:5d:dd:3a:ec:16:d8:87:13:e3:55:a2:d4:b2:0f:35:a3:86:
37:2e:13:42:66:d7:56:06:a7:77:37:5e:e7:d5:bb:c5:39:a6:
de:e9:1b:27:fe:d0:4b:35:32:77:e5:44:5c:76:ac:2e:db:77:
00:59:7a:26:40:0c:f9:92:b1:6a:83:07:e8:7d:28:60:ee:cb:
8f:2a:2d:4a:52:26:e7:7b:d8:8d:16:e6:f3:b6:e9:4a:a6:00:
cc:f8:b4:0c:34:59:ce:32:4d:ac:84:f0:09:90:c5:35:71:86:
c8:09:83:22:86:db:d2:f3:fd:6d:87:55:22:cc:2a:bf:65:bb:
8e:21:61:cf:29:21:bd:cc:d4:e0:ef:e5:eb:90:bc:3e:b2:06:
31:ef:21:94:10:75:04:a4:c6:73:b6:0e:92:09:b9:85:0d:8a:
2d:a4:f3:3d:b0:82:fc:c0:93:6e:fe:09:04:44:fa:40:f1:64:
a0:e3:36:88:f6:ba:60:23:78:f1:0a:93:5b:55:22:a1:f0:1f:
23:81:59:18:89:d7:a8:e1:e6:dd:20:58:ba:c6:79:90:2f:a6:
12:8e:94:78:27:03:7b:2a:8a:22:f3:9a:b8:41:91:07:ab:31:
f0:d2:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 21:14:23 2024 by rpki-client on console-ams.rpki-client.org