Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32332d3234203d3e20313439393133.roa
File: 3130332e3139312e35342e302f32332d3234203d3e20313439393133.roa (raw, json)
Hash identifier: CoZlx/KjWcNMbZRpQlTy2BgK4yzDLDubsdUzIzMMHnc=
Subject key identifier: 4C:EE:0D:40:32:DB:A8:D9:08:DF:D1:87:4B:C8:2C:F7:50:22:44:19
Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33
Certificate serial: 122711600BC8BDDF98D598F997520D84E44C7CF2
Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32332d3234203d3e20313439393133.roa
Signing time: Tue 29 Aug 2023 11:00:00 +0000
ROA not before: Tue 29 Aug 2023 10:55:00 +0000
ROA not after: Tue 27 Aug 2024 11:00:00 +0000
asID: 149913
IP address blocks: 103.191.54.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:27:11:60:0b:c8:bd:df:98:d5:98:f9:97:52:0d:84:e4:4c:7c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33
Validity
Not Before: Aug 29 10:55:00 2023 GMT
Not After : Aug 27 11:00:00 2024 GMT
Subject: CN=4CEE0D4032DBA8D908DFD1874BC82CF750224419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:98:19:5c:37:08:91:cf:d2:55:56:b0:b9:07:
80:b0:31:5e:59:c4:02:d9:49:a9:10:a6:4d:aa:df:
a3:06:6b:60:30:95:dc:02:06:ac:cc:5f:6d:8f:f6:
5c:59:de:ac:25:c0:ab:0e:ea:e4:91:ec:21:2a:4b:
fb:c5:13:51:3d:fd:90:44:b9:9d:13:76:3c:05:e2:
b7:12:9b:7d:20:2f:68:8e:29:e2:fd:10:e5:41:d6:
f5:92:3c:fc:16:3c:32:2b:24:ca:24:96:70:31:73:
07:c6:78:34:f9:7e:cb:bb:cb:4a:37:68:68:84:00:
58:d2:f0:be:df:84:31:1b:9f:95:89:07:36:0f:90:
06:4c:9f:5c:32:9e:ad:b3:ea:1d:a3:0c:68:0a:89:
ca:f3:d4:b2:ee:06:92:46:a2:ed:7e:4c:d7:67:dc:
e2:57:a7:7a:b8:d2:51:1e:c2:b0:8d:ee:d0:43:19:
ba:1c:b4:93:85:76:1a:bc:60:c8:0a:97:d7:88:4c:
13:92:d4:94:42:70:e4:b9:b8:aa:e9:15:d9:29:24:
92:85:a7:0d:9b:40:48:98:32:74:a3:dd:be:77:8a:
37:98:da:11:26:9b:1b:c0:34:80:c6:35:75:75:1a:
37:76:df:f4:0e:61:f0:e5:9b:34:03:f8:29:48:1b:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EE:0D:40:32:DB:A8:D9:08:DF:D1:87:4B:C8:2C:F7:50:22:44:19
X509v3 Authority Key Identifier:
keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/3130332e3139312e35342e302f32332d3234203d3e20313439393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.54.0/23
Signature Algorithm: sha256WithRSAEncryption
09:cc:22:f6:b9:5c:2e:ac:73:f9:7f:0a:ea:00:01:27:e6:73:
eb:74:1f:65:be:96:00:45:9c:c8:82:aa:0b:c1:89:1b:d3:9d:
02:a9:8a:8d:74:ca:0e:1b:1f:51:97:3c:e1:8a:da:2b:bf:1e:
46:4a:a6:cd:32:11:a9:fb:08:d4:10:38:2b:1b:1b:85:4e:fe:
01:a2:70:26:11:60:61:76:96:10:bb:18:71:c1:32:75:ae:b4:
32:dc:13:22:c6:fa:60:3a:a4:65:e5:64:3b:40:b7:b2:a4:6d:
2d:cb:39:4c:2d:ff:43:80:99:b4:28:a3:f4:f3:1a:3a:59:b5:
e2:b0:71:22:c9:05:1e:d9:a9:2e:d3:6e:1f:20:21:db:d4:88:
ab:9d:ba:db:a8:75:38:c2:f2:07:93:cb:2d:52:dd:a0:d1:65:
64:84:25:31:eb:a7:50:0d:93:fd:bc:b5:71:20:ab:8b:ea:85:
99:ba:d5:04:82:3a:f6:fc:95:40:f0:5e:89:51:fd:87:39:06:
18:19:ac:c7:d2:f9:e9:5b:f4:e0:79:3c:fe:cb:96:a4:28:85:
34:d2:43:3f:ad:89:b3:f0:ce:7a:68:b4:1b:e9:e5:9f:d5:4e:
bc:0e:64:db:8d:ab:13:d8:4e:f3:f9:6e:3f:7a:13:33:4d:2b:
ed:5e:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 03:38:19 2023 by rpki-client on console-ams.rpki-client.org