Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137392e302f32342d3234203d3e20313439363632.roa
File: 3130332e3138342e3137392e302f32342d3234203d3e20313439363632.roa (raw, json)
Hash identifier: nZ2Owb1BkwbGvIKmAsRJpZYgYx7CrbwnCbaPnmpW1JA=
Subject key identifier: CB:AE:FD:80:33:A7:B2:3A:71:4F:47:37:CB:C3:D3:47:00:91:F7:EC
Certificate issuer: /CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
Certificate serial: 5057C21A37EDF754A5BEA95A756B807D1F90B778
Authority key identifier: 11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137392e302f32342d3234203d3e20313439363632.roa
Signing time: Tue 20 Feb 2024 01:04:44 +0000
ROA not before: Tue 20 Feb 2024 00:59:44 +0000
ROA not after: Tue 18 Feb 2025 01:04:44 +0000
asID: 149662
IP address blocks: 103.184.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 06:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:57:c2:1a:37:ed:f7:54:a5:be:a9:5a:75:6b:80:7d:1f:90:b7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11B369E1CF41EB03E35A2711FF1FE0F687242467
Validity
Not Before: Feb 20 00:59:44 2024 GMT
Not After : Feb 18 01:04:44 2025 GMT
Subject: CN=CBAEFD8033A7B23A714F4737CBC3D3470091F7EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:0c:17:12:ff:19:9d:32:38:35:79:78:55:
7f:72:d8:35:18:37:e2:f8:eb:d4:6e:12:b5:68:ed:
c9:f1:5a:39:f1:f0:b3:b7:fe:75:d6:ac:ef:11:44:
7b:3d:e0:f5:75:15:04:f9:23:8d:95:c9:f7:b8:7d:
f0:8e:e4:aa:50:e3:18:16:c7:3b:f9:13:3f:35:1e:
4f:2d:92:e5:37:4e:73:9c:7c:7c:0b:04:6f:f6:b7:
b1:2d:81:ca:1a:a9:50:3c:e1:55:0b:3d:53:c2:84:
b9:6f:a1:ac:77:75:82:c1:5b:2d:fa:2e:10:f8:5a:
f4:f7:81:5b:13:de:2b:55:9a:d3:2b:2d:92:32:2c:
99:1c:a1:90:75:3d:0e:73:6e:8d:ca:b2:06:fb:8e:
3f:77:cc:d5:f4:2d:97:e3:3d:5a:4c:d4:32:08:62:
73:d2:a6:97:65:0e:4d:c1:a7:db:18:b3:d0:42:4a:
07:d0:97:21:57:66:c5:1e:fc:e4:a4:89:ca:ca:f1:
61:0f:dc:3f:e1:eb:e7:8f:f7:9d:18:7e:d7:47:2e:
ec:94:f4:41:9b:af:da:4d:1a:20:02:1a:ca:d0:20:
a1:8a:09:43:71:76:79:db:42:e1:6b:02:48:12:54:
55:62:48:df:50:88:f9:d4:78:99:a9:a9:16:e5:fc:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AE:FD:80:33:A7:B2:3A:71:4F:47:37:CB:C3:D3:47:00:91:F7:EC
X509v3 Authority Key Identifier:
keyid:11:B3:69:E1:CF:41:EB:03:E3:5A:27:11:FF:1F:E0:F6:87:24:24:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/11B369E1CF41EB03E35A2711FF1FE0F687242467.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11B369E1CF41EB03E35A2711FF1FE0F687242467.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e0962f7-67ea-470e-a524-7ae1e40fd5b7/0/3130332e3138342e3137392e302f32342d3234203d3e20313439363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.179.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:1b:44:1d:91:3f:42:81:23:e2:84:28:a1:3b:22:90:2a:9c:
fc:ca:65:a4:43:14:a1:52:2c:40:ef:54:01:65:ff:22:4e:b8:
ba:e6:6e:c6:83:d4:74:c3:5a:9f:b7:28:92:cf:8e:91:76:06:
61:7e:46:54:2e:f7:1e:1a:db:1a:e8:45:c6:ff:a6:57:68:7d:
0b:71:f4:19:38:d3:81:a7:da:13:6d:e1:9a:d2:9b:79:e4:17:
52:c6:46:46:0d:ee:dc:7f:97:7f:8f:71:2c:1e:30:38:f5:06:
87:98:80:aa:ad:d4:51:a7:f2:b7:58:a1:fd:6d:7f:71:8c:b7:
d3:1d:f2:60:f7:75:b1:43:12:55:2f:52:24:c7:b1:89:ef:93:
b3:c2:09:81:42:1e:c6:f8:61:49:83:f0:a7:c4:f8:d2:10:60:
dc:f0:44:5d:f8:60:e5:e9:b4:d5:be:c4:50:8b:b2:77:f3:74:
f8:e8:25:cf:e1:25:98:66:38:e8:e3:98:bf:c2:60:df:17:59:
c5:69:dd:b4:dd:2b:c9:2d:42:75:a2:c2:7c:95:9c:db:d6:90:
32:5b:fb:01:32:fc:a1:7b:68:bb:b3:6b:44:fb:74:42:13:28:
57:fe:c2:d0:48:24:27:c5:6f:97:25:97:67:81:3e:9d:37:12:
26:67:65:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 09:36:45 2024 by rpki-client on console-ams.rpki-client.org