Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230312e302f32342d3234203d3e20313338383138.roa
File: 3130332e3233382e3230312e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier: TegeNORX5XDQTbbuhHy0+CLSw9KmBTm3RdRTU7SThRM=
Subject key identifier: 2F:4F:12:5B:A7:DF:48:5D:2D:B1:F1:F3:54:E4:FB:36:94:71:E1:0F
Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Certificate serial: 5859118D71A0D31AD8FF1FA0EB1B052250041514
Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230312e302f32342d3234203d3e20313338383138.roa
Signing time: Mon 17 Oct 2022 03:00:01 +0000
ROA not before: Mon 17 Oct 2022 02:55:01 +0000
ROA not after: Mon 16 Oct 2023 03:00:01 +0000
asID: 138818
IP address blocks: 103.238.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:59:11:8d:71:a0:d3:1a:d8:ff:1f:a0:eb:1b:05:22:50:04:15:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Validity
Not Before: Oct 17 02:55:01 2022 GMT
Not After : Oct 16 03:00:01 2023 GMT
Subject: CN=2F4F125BA7DF485D2DB1F1F354E4FB369471E10F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:17:89:9a:1e:13:51:f3:7f:f6:e0:0f:3a:
95:19:d8:ce:42:8a:b1:ac:66:c1:81:a8:83:c3:08:
9c:8d:dd:4f:57:00:25:ad:ec:60:f0:c9:f2:c8:19:
be:f2:6a:b4:d6:91:c0:05:0c:93:62:a5:89:53:08:
3c:11:d4:79:fa:93:38:e7:93:1f:49:41:ee:35:5d:
4f:c6:91:b9:2a:e7:f8:33:47:eb:6d:91:53:eb:28:
a1:d1:81:4f:51:04:df:08:4c:d4:b1:18:d8:a6:d5:
ab:87:08:0f:34:ea:39:51:93:2d:dd:b9:10:7e:ea:
e7:ac:06:e7:e5:5e:83:d5:00:df:a1:27:78:68:75:
f9:53:97:04:36:fe:e5:7b:49:0c:42:ad:85:49:5b:
ce:7b:1b:31:32:f8:52:bc:23:15:ff:0a:db:a0:a2:
a1:c0:3b:3d:a6:9d:01:13:ea:f3:f3:99:4a:a0:c7:
7a:62:dd:09:25:63:cb:60:dd:f5:36:1b:30:03:d7:
37:c3:63:96:37:17:0b:03:33:94:66:00:43:e2:d1:
9d:3f:c0:b0:ee:38:c5:02:19:1b:cd:20:86:5b:bf:
4f:f1:5e:73:9b:af:8a:d4:dc:62:0b:76:c8:be:61:
b4:a0:b9:dc:7d:68:10:1b:4c:78:ed:58:84:ca:2b:
c7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:12:5B:A7:DF:48:5D:2D:B1:F1:F3:54:E4:FB:36:94:71:E1:0F
X509v3 Authority Key Identifier:
keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230312e302f32342d3234203d3e20313338383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.201.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8b:fe:0e:6b:1a:1a:1b:f8:4f:db:c9:77:02:c1:3e:bb:62:
d9:03:6a:51:fa:fe:41:54:ab:86:36:d2:96:b3:3a:df:53:89:
ba:0d:54:a8:7f:cb:3e:c0:4e:a1:80:76:c3:14:2d:1a:f1:77:
b9:fc:7f:ca:00:0a:ea:6e:c3:27:37:ae:66:d2:dd:d1:42:a7:
53:bd:4d:7d:60:38:2e:49:6c:78:67:0c:3f:1e:95:00:43:d5:
9b:b6:f9:61:1e:46:76:17:1a:09:67:19:b8:f8:3d:3f:f3:fc:
80:df:f3:2e:ed:05:7f:5e:f8:c1:36:44:e3:4e:16:d4:a5:ad:
91:f5:cf:10:b1:55:78:9b:65:69:2e:fa:aa:d6:cf:83:48:ad:
5a:cc:5e:65:f0:e3:3e:17:bd:34:19:01:3e:71:9c:f5:5e:25:
f9:fb:22:e1:70:0b:b7:4f:b0:c5:8a:e9:be:2a:f4:ac:ea:15:
db:3b:4a:40:2b:f6:97:16:8f:ea:42:d5:c5:b9:d1:60:79:44:
9c:d7:4b:8a:b5:47:73:c6:cb:8f:33:59:f1:38:12:37:92:78:
be:97:b6:d2:d6:95:12:be:8e:da:50:26:83:42:7d:76:a8:8f:
17:8f:0c:c5:54:f3:85:61:12:36:80:99:9d:3c:9e:44:b0:1e:
1c:fb:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org