Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3131302e302f32342d3234203d3e20313431313236.roa
File: 3130332e32352e3131302e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier: +WqERTf4bB15DR7fFfdaZyECxXflf9nTCI5rlk6/FQg=
Subject key identifier: 1C:2C:17:D1:DB:A5:8A:48:99:40:B8:C7:3B:0D:F9:46:1D:AE:AC:71
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 44DEA6237646A23F6AF617FE31F1DBDEE66AF2FA
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3131302e302f32342d3234203d3e20313431313236.roa
Signing time: Fri 17 Mar 2023 04:23:19 +0000
ROA not before: Fri 17 Mar 2023 04:18:19 +0000
ROA not after: Fri 15 Mar 2024 04:23:19 +0000
asID: 141126
IP address blocks: 103.25.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:de:a6:23:76:46:a2:3f:6a:f6:17:fe:31:f1:db:de:e6:6a:f2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 17 04:18:19 2023 GMT
Not After : Mar 15 04:23:19 2024 GMT
Subject: CN=1C2C17D1DBA58A489940B8C73B0DF9461DAEAC71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:68:7a:76:6f:59:6b:6a:65:01:5b:9e:38:
ca:6d:f6:3e:a4:c5:6b:3c:c3:04:97:fe:75:c8:b0:
bf:58:ca:c8:df:5c:78:4a:51:7a:84:37:01:0a:07:
97:cc:9e:b4:dd:7d:5b:60:3f:53:80:28:7f:76:f8:
0e:ca:b5:7d:24:8b:81:43:41:fe:7e:90:a6:0d:14:
da:af:3c:d2:19:dc:f4:3d:67:42:fa:a0:1e:86:e8:
e3:d0:7c:60:b4:82:fe:96:a8:85:c2:f5:2a:6f:18:
1e:1f:b5:5e:16:fe:01:74:13:16:51:48:d7:a6:f3:
b2:f6:aa:6c:66:b5:78:cf:d8:44:20:e4:22:45:8b:
3d:d8:df:2e:7c:5a:94:b6:62:9f:c0:8c:c6:30:92:
dc:76:ac:9b:8e:83:8f:93:c2:ab:bc:b2:0a:cc:cb:
57:dd:7f:75:bd:56:3f:05:19:36:8a:68:5d:30:ad:
ce:17:b3:f6:fd:7a:b6:d6:a8:f2:ed:16:fa:50:f7:
34:8d:a2:4f:9c:58:32:f6:f2:6c:1f:ec:72:d4:56:
35:02:29:3e:4e:9e:bb:c8:f4:c0:d6:8c:09:79:dd:
80:41:cb:ee:03:66:13:a3:19:a6:aa:fe:e7:25:9c:
79:01:19:26:18:1e:dd:74:5b:c0:cd:e4:f4:43:58:
5b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2C:17:D1:DB:A5:8A:48:99:40:B8:C7:3B:0D:F9:46:1D:AE:AC:71
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3131302e302f32342d3234203d3e20313431313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.110.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d0:5f:68:25:1e:c9:90:d4:a5:09:5c:72:c1:17:74:72:ab:
0d:74:48:38:99:4a:a0:0f:66:68:46:7a:53:67:c7:38:1a:b8:
6d:0f:fb:2e:4c:2e:72:ea:73:80:26:99:76:07:c4:b4:40:4e:
d0:6e:67:f7:27:38:29:8a:84:69:5f:4c:3a:2a:c2:81:bd:bd:
d4:ad:2e:94:d2:b6:20:c6:4f:5d:8b:47:31:3a:30:8d:3e:d8:
1e:0f:42:c8:ee:f1:25:f0:bd:55:69:c8:3f:7f:98:06:85:a1:
b4:c2:ef:08:2b:a0:40:8b:b0:04:64:21:66:34:72:38:71:b3:
21:b3:0e:5c:c4:9e:49:1d:3c:5e:90:00:4c:46:c2:48:e8:8e:
9d:b4:93:c8:92:fb:8a:c1:46:18:74:6c:d4:5b:46:63:6c:7d:
2d:23:23:72:5d:88:91:6f:86:2d:11:68:9d:67:fc:61:d0:3e:
dd:81:af:d7:3c:26:3b:31:d2:ef:3b:e2:e4:e7:6e:07:b0:df:
50:c2:0c:d5:db:c5:38:52:bb:cf:ae:8c:e8:eb:85:de:3f:29:
f1:0e:94:02:86:8f:2a:94:9f:25:6e:bd:00:87:d3:86:2f:fe:
58:ab:12:72:7c:ab:e2:37:a1:73:29:46:f7:57:4a:dc:f2:bc:
e1:ac:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 12:01:57 2023 by rpki-client on console-ams.rpki-client.org