Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa
File: 3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: rXz1YAGD7o6m9TPB5tFJ9yUYlcmRW/Uhg2nGTv8QnHQ=
Subject key identifier: 08:69:BC:5D:24:78:6D:1E:77:2A:F4:DE:2A:DD:AA:BC:25:0F:81:C4
Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Certificate serial: 14BADC10426F993365050D551E4D3F80523A7B05
Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa
Signing time: Wed 19 Oct 2022 05:00:01 +0000
ROA not before: Wed 19 Oct 2022 04:55:01 +0000
ROA not after: Wed 18 Oct 2023 05:00:01 +0000
asID: 23679
IP address blocks: 103.238.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ba:dc:10:42:6f:99:33:65:05:0d:55:1e:4d:3f:80:52:3a:7b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Validity
Not Before: Oct 19 04:55:01 2022 GMT
Not After : Oct 18 05:00:01 2023 GMT
Subject: CN=0869BC5D24786D1E772AF4DE2ADDAABC250F81C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:01:78:e2:a2:2e:15:46:7b:69:10:14:00:
aa:b1:8f:d3:c1:0d:1f:3c:31:04:01:e6:f3:c3:9c:
96:7e:2b:51:c5:9b:6d:c4:34:4c:6e:2e:b3:3a:1e:
ab:c2:a9:be:fe:48:03:09:d6:bc:ce:56:04:04:fd:
59:af:ca:c0:a6:fe:67:f4:57:09:3f:94:60:7d:70:
c9:9d:0e:27:b7:6f:15:25:b4:7e:e4:be:86:45:09:
cb:6a:34:b5:7d:0a:08:a1:55:df:56:1c:13:c1:3d:
c6:9e:d6:01:ce:4a:3e:78:c8:d0:f4:05:1a:f4:46:
72:6d:a3:f0:0a:e0:17:ca:0b:74:69:a2:97:90:40:
26:bc:74:cc:b5:45:16:92:24:01:54:ee:56:cb:6d:
3b:b1:7f:99:e9:06:d6:60:4d:31:65:9d:54:f9:d2:
30:0d:e3:7e:2c:fb:2e:90:90:e7:d7:06:cc:ff:17:
18:e7:1c:61:f0:e0:da:6c:1e:20:f9:b1:a2:31:75:
25:ff:7a:64:7d:f8:84:b6:62:97:4d:93:99:4c:ba:
91:af:76:d2:14:51:3c:80:2e:5a:b6:2e:de:13:a6:
34:18:f5:99:5f:eb:ed:f2:75:bb:89:69:af:b2:09:
34:c2:53:6c:6f:61:8c:b2:42:0e:6e:5e:f8:74:09:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:69:BC:5D:24:78:6D:1E:77:2A:F4:DE:2A:DD:AA:BC:25:0F:81:C4
X509v3 Authority Key Identifier:
keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230322e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.202.0/24
Signature Algorithm: sha256WithRSAEncryption
64:98:44:ed:92:fa:db:fd:dd:ac:c5:e8:9c:f4:87:2c:68:45:
e4:59:ff:f9:c1:c0:9d:e9:f6:4c:fe:12:4e:66:1c:ea:08:0b:
14:06:b4:79:ef:98:55:4b:25:e5:a3:61:f6:82:4a:57:f2:d8:
a2:a3:98:ef:f1:c8:91:26:d1:81:01:b1:fb:b7:a3:6f:cf:50:
74:7d:67:69:f6:1b:34:21:c9:07:85:83:0c:45:0a:37:de:4f:
9f:d2:29:c7:cc:2a:5f:b2:e2:71:0d:5e:65:2e:ba:9a:1a:2d:
35:7f:85:0e:cb:5f:32:84:c6:d1:27:75:bc:bc:48:dd:59:ed:
16:34:bd:e4:16:14:98:85:b1:f3:42:83:92:29:c7:3b:cd:98:
98:c7:cc:4d:69:07:44:2e:4f:78:e1:47:90:34:a7:c1:7f:0d:
9c:4e:aa:02:de:f3:d2:30:67:40:ca:63:c7:a5:c0:fd:4c:7c:
c3:1d:45:a2:0c:0f:18:b5:75:a8:04:3c:0a:0a:0e:d2:c1:de:
e0:6c:2c:70:21:f5:cb:e7:50:4b:dc:19:2c:45:19:83:26:24:
69:6f:25:37:71:22:92:99:cb:63:58:f3:98:38:b1:84:32:89:
92:eb:92:5c:76:1f:9b:f5:45:5b:16:66:89:41:b9:f5:d8:f1:
62:05:bf:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org