Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32342d3234203d3e20313339393637.roa
File: 3130332e3234372e32302e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier: 6ylTdUYHRnulu/hGZJwXKY8s64URiNTLvR4cLybSJvs=
Subject key identifier: FA:D6:E9:2A:FC:7B:43:5F:D7:25:DB:BD:99:A3:19:5E:9F:04:50:C3
Certificate issuer: /CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Certificate serial: 3FFEBA4E94FF3E36FC580796602D2420488AF1F7
Authority key identifier: FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32342d3234203d3e20313339393637.roa
Signing time: Thu 01 Dec 2022 19:00:00 +0000
ROA not before: Thu 01 Dec 2022 18:55:00 +0000
ROA not after: Thu 30 Nov 2023 19:00:00 +0000
asID: 139967
IP address blocks: 103.247.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fe:ba:4e:94:ff:3e:36:fc:58:07:96:60:2d:24:20:48:8a:f1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39
Validity
Not Before: Dec 1 18:55:00 2022 GMT
Not After : Nov 30 19:00:00 2023 GMT
Subject: CN=FAD6E92AFC7B435FD725DBBD99A3195E9F0450C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:ee:a3:7a:1c:ff:48:b6:51:f4:d4:ed:9d:
4c:6c:07:23:4c:0b:6a:8f:fc:11:61:cd:3b:17:e8:
35:06:cc:e0:44:ba:33:b1:f6:a8:c5:1f:cb:e3:54:
e1:53:10:a1:9e:84:7d:36:b8:df:2f:7d:c4:24:c4:
cc:8c:aa:2c:ac:02:b6:c8:3b:56:4b:11:fb:6b:25:
96:29:96:6f:67:b0:8c:75:6f:c0:86:41:34:c8:09:
7e:39:a6:5d:aa:2b:d1:90:60:97:fb:8d:48:1e:ca:
8e:07:9d:86:f5:03:e3:1c:48:c6:03:36:d8:dd:aa:
6c:e3:73:6b:01:8b:66:cc:44:7c:85:24:2a:c2:4d:
7e:e1:b7:f9:44:2a:f2:c7:27:f4:7e:b8:37:d6:e3:
77:fd:00:e2:c4:4e:4c:b9:e4:99:c6:e0:ee:33:3e:
b1:d6:92:a6:11:7c:e6:1a:1a:d6:c0:88:c8:a4:e6:
d1:dc:79:8e:62:52:67:cd:4a:f1:ed:df:55:d3:2b:
6d:98:58:1a:e5:fa:3f:44:78:af:86:2f:ca:b9:ce:
87:38:96:24:7b:0c:a5:57:a4:6c:31:d6:ec:21:58:
3a:49:32:b1:76:06:fc:e3:bf:62:ae:5a:27:9a:6a:
ca:05:aa:7b:14:d3:95:d4:f5:6e:2d:fc:72:6e:42:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D6:E9:2A:FC:7B:43:5F:D7:25:DB:BD:99:A3:19:5E:9F:04:50:C3
X509v3 Authority Key Identifier:
keyid:FA:5B:CA:98:4E:EB:AF:FD:CE:D8:41:90:C7:07:56:DB:EB:3B:FF:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5BCA984EEBAFFDCED84190C70756DBEB3BFF39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/3130332e3234372e32302e302f32342d3234203d3e20313339393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:24:1b:23:88:e6:c0:da:f3:21:4b:c1:e3:c5:12:0d:5e:ea:
2d:79:e3:26:98:fb:36:90:82:e5:ba:ee:fb:90:98:20:46:ef:
39:2e:6e:21:81:eb:a2:1c:8a:06:89:e5:55:e5:05:2d:d4:1e:
18:5d:f6:48:1c:c9:d7:97:0a:d2:9d:0f:0f:19:1d:ca:a6:df:
d0:8f:d4:f5:ca:aa:60:9f:61:94:7f:ae:98:a9:3b:da:1c:65:
aa:a5:a3:05:ae:be:d3:1d:18:f1:f9:57:71:c6:16:b1:db:c4:
e6:12:31:0b:64:f4:12:47:de:9a:6b:45:f6:57:de:4a:b3:6f:
18:28:73:fd:7e:38:42:52:e5:89:bf:5e:7b:4d:7b:1c:b5:41:
ac:6f:db:1e:1a:d1:1a:fb:27:7f:cb:90:cc:23:83:60:0f:76:
03:b2:59:17:43:c9:5a:5a:41:da:fb:37:8f:5d:0e:8e:de:12:
3b:20:bd:7a:7c:60:fa:46:f4:ac:da:3d:25:ca:4f:ab:68:8c:
49:e1:f4:cd:fa:9a:4c:d6:c4:5b:37:1e:dc:f2:d2:15:cf:95:
37:fe:e7:6b:64:67:13:c1:30:e7:6b:2f:40:6f:1a:4b:cb:cc:
d4:26:13:1e:7d:64:8e:0b:87:cb:2f:13:c5:07:ec:40:61:d2:
a4:e9:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org