Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e203338353237.roa
File: 3130332e32352e3130382e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier: Bv8+N1YZfCOW9Mp7ZexXKugvyjYari83w80CY0qHyeM=
Subject key identifier: 9A:EA:2A:E3:93:0C:EC:C4:B2:FE:1F:2D:8D:AB:E7:FD:5A:BA:88:B6
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 7D27C2FAD12DCCABA452AF1A9367369CA234CC3B
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e203338353237.roa
Signing time: Fri 16 Feb 2024 05:00:02 +0000
ROA not before: Fri 16 Feb 2024 04:55:02 +0000
ROA not after: Fri 14 Feb 2025 05:00:02 +0000
asID: 38527
IP address blocks: 103.25.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jul 2024 07:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:27:c2:fa:d1:2d:cc:ab:a4:52:af:1a:93:67:36:9c:a2:34:cc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Feb 16 04:55:02 2024 GMT
Not After : Feb 14 05:00:02 2025 GMT
Subject: CN=9AEA2AE3930CECC4B2FE1F2D8DABE7FD5ABA88B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:b7:1a:61:59:0a:ec:e9:ac:80:17:b8:09:
9d:18:f0:d2:d3:ee:e4:47:74:62:33:b7:d9:88:3d:
29:80:68:85:a2:13:05:f4:8a:b7:44:e4:44:de:fa:
95:10:37:8b:a0:4a:d2:6f:b8:a6:1c:03:5e:58:d1:
df:c7:3c:e0:00:6f:fe:ff:3f:1d:c3:40:cc:c2:98:
95:d4:dd:cc:96:e0:27:ae:90:79:0b:66:12:31:f6:
14:66:17:a3:32:e8:d7:cc:95:0f:d1:59:9c:05:83:
c8:e7:62:f7:dd:93:d3:7f:1a:56:01:0a:06:c9:4b:
28:b7:d6:d2:5a:ab:25:1a:3a:3f:82:7d:13:c5:cb:
b1:0d:e1:66:93:c2:51:db:34:45:f3:c2:70:8a:35:
3f:db:45:2a:eb:2f:72:28:7c:89:79:06:d1:70:7d:
94:ea:7c:44:8c:c2:b0:ee:3a:51:08:41:9e:9a:02:
fb:de:ca:32:fd:9d:f9:15:3e:8e:24:37:48:60:12:
98:e9:7d:6e:c7:15:98:64:d7:a4:ee:a0:4b:4f:13:
cb:4a:28:10:1e:5e:f1:76:1c:8c:aa:36:02:e6:9e:
3a:1f:0f:1f:40:64:8d:ea:1f:c0:01:01:4f:67:94:
a7:d5:09:f0:50:d7:af:f3:9e:b7:aa:20:18:8d:20:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:2A:E3:93:0C:EC:C4:B2:FE:1F:2D:8D:AB:E7:FD:5A:BA:88:B6
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e203338353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:cd:ba:02:11:ca:dc:5c:f8:ef:cd:1f:d2:64:45:5d:24:6b:
18:ef:a1:1c:54:9f:66:f0:29:e3:7d:36:31:a1:6c:57:4a:0b:
c6:0e:61:c9:e9:c5:33:4a:c2:f5:74:1b:8f:34:f2:09:e1:ab:
ee:73:20:4f:d4:27:50:2e:44:91:3c:eb:4e:28:8c:7e:3c:d4:
d8:e0:27:aa:fe:1c:7d:5b:5f:4b:d9:14:32:e8:c0:04:05:82:
e1:30:25:62:ac:ff:6d:e9:3c:01:6f:3a:49:e4:50:99:50:e2:
e0:ff:b5:ea:57:45:cf:b8:10:20:94:74:60:f7:25:f1:eb:c5:
7d:31:e2:76:1b:41:6f:5a:46:86:26:9e:2e:20:52:4d:94:26:
8f:48:19:6d:69:29:10:18:5a:96:4b:73:7e:da:44:c7:ed:35:
b5:1c:c5:4d:56:92:9f:60:67:7b:6a:e6:0f:6b:5c:cc:8e:09:
53:98:9b:3e:6c:44:cc:92:a6:63:7d:53:9e:25:1a:58:9b:67:
f6:c4:ea:63:e8:3a:78:7b:d3:97:84:8b:bb:29:2a:59:62:64:
11:d2:5b:30:0a:47:7d:14:25:c6:71:06:6c:43:fd:44:10:ec:
68:68:61:e6:9c:81:fa:b9:30:37:c4:84:f8:22:1b:64:fe:cf:
85:1f:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 08:46:00 2024 by rpki-client on console-fra.rpki-client.org