Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3131312e302f32342d3234203d3e20313339393439.roa
File: 3130332e32352e3131312e302f32342d3234203d3e20313339393439.roa (raw, json)
Hash identifier: 4KmxvFbxTKb3ad19594nF54AUIAe6tYqGiTybNZ63sk=
Subject key identifier: C5:51:A3:D5:45:5E:D8:68:1F:2D:47:CF:B3:36:5C:23:B7:92:CE:13
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 1A20CE30A05874F82073D8176FA9C7673FA3463B
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3131312e302f32342d3234203d3e20313339393439.roa
Signing time: Wed 15 Mar 2023 11:09:09 +0000
ROA not before: Wed 15 Mar 2023 11:04:09 +0000
ROA not after: Wed 13 Mar 2024 11:09:09 +0000
asID: 139949
IP address blocks: 103.25.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:20:ce:30:a0:58:74:f8:20:73:d8:17:6f:a9:c7:67:3f:a3:46:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 15 11:04:09 2023 GMT
Not After : Mar 13 11:09:09 2024 GMT
Subject: CN=C551A3D5455ED8681F2D47CFB3365C23B792CE13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:4b:b4:d2:0b:a4:92:0b:69:6f:0b:33:92:
3e:7d:84:d8:14:de:6c:58:83:23:2f:ff:21:c6:7c:
76:89:e2:40:39:03:c2:0b:89:e9:0d:19:6d:6f:f9:
d2:d8:8f:71:77:15:b5:63:6a:cc:53:a2:50:d7:a4:
89:12:e0:67:9d:14:ba:42:40:dd:53:e7:d6:eb:70:
4a:cd:42:4e:d9:89:c6:bf:cd:24:7e:fb:2d:17:80:
84:3e:ef:78:4c:51:3f:31:59:8d:f4:bf:1d:a1:4c:
0e:d9:1d:69:40:23:8a:53:95:88:ac:43:38:df:cb:
02:31:58:9d:d9:6c:3e:98:81:ed:95:a7:87:a1:05:
41:38:d4:34:18:1d:9b:17:32:2e:0d:42:e4:d7:8a:
e3:d0:5a:be:3a:a8:da:3c:01:db:15:35:9f:ea:e4:
54:1a:f3:c1:d5:e1:41:7c:07:14:05:64:45:25:fd:
55:e3:fd:6f:81:a1:e5:2d:38:7e:55:f7:3d:6a:42:
06:1a:3a:6d:07:57:0b:5e:10:4a:62:8d:b3:fd:41:
34:81:b6:a6:6c:0d:b4:81:44:db:8d:37:27:aa:33:
c2:55:38:6b:c6:fa:b7:58:62:7a:3d:1a:92:25:34:
9e:8b:5c:b0:58:aa:67:15:19:09:a9:f6:2f:bf:96:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:51:A3:D5:45:5E:D8:68:1F:2D:47:CF:B3:36:5C:23:B7:92:CE:13
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3131312e302f32342d3234203d3e20313339393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e7:af:05:8e:1c:0b:63:92:09:23:41:eb:99:1e:1b:6b:5b:
ed:1f:0b:6a:44:23:f8:7e:ed:cd:98:55:bb:be:c0:46:d6:27:
6e:3e:a2:92:ac:1c:e0:29:07:56:82:0a:c5:f6:bc:30:0b:05:
7c:5b:78:46:c9:2b:e7:55:f3:3b:64:48:f4:22:12:eb:21:de:
48:5b:43:d0:9e:1d:06:41:7c:d8:86:c8:b2:09:d0:c1:ee:f3:
70:9a:69:b1:81:40:ea:a4:0c:a5:ed:07:39:12:80:6d:b1:ed:
5a:fb:45:29:5e:ff:5e:ca:6f:59:19:8c:ac:a5:9a:b0:8e:ac:
20:a2:35:fe:94:7c:90:a9:4a:f9:b5:02:e7:28:6e:ad:72:d7:
8a:89:84:74:d8:34:f9:c3:00:6a:f4:f3:10:20:3c:6b:5b:11:
e0:72:98:b1:36:80:46:58:a2:91:b7:80:76:88:f2:23:67:64:
c8:98:97:80:e6:5f:40:a2:1d:9a:25:bf:c3:23:e9:c0:1f:15:
be:0d:0c:f2:ad:44:c8:c6:55:aa:ec:0f:ba:cf:b4:73:a9:b8:
13:fd:51:76:34:96:5b:23:e0:41:b0:d8:6e:e0:7b:5b:77:0b:
d9:1a:c4:66:80:d3:eb:48:90:8d:27:5c:1e:da:ad:5a:ac:6f:
61:71:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 12:01:57 2023 by rpki-client on console-ams.rpki-client.org