Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/3130332e3133392e3137352e302f32342d3234203d3e20313430343433.roa
File: 3130332e3133392e3137352e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier: eGhoQvfr9ZL7DP+t+Q+GpLoj0krW+Xj71q9iOM4GIhM=
Subject key identifier: C6:6E:4A:78:FA:04:49:1D:B1:D2:6A:81:65:DF:49:05:57:41:0B:1F
Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F
Certificate serial: 4746BF0C275157203FA1439DF26702E74A826125
Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/3130332e3133392e3137352e302f32342d3234203d3e20313430343433.roa
Signing time: Fri 20 Oct 2023 10:01:06 +0000
ROA not before: Fri 20 Oct 2023 09:56:06 +0000
ROA not after: Fri 18 Oct 2024 10:01:06 +0000
asID: 140443
IP address blocks: 103.139.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:46:bf:0c:27:51:57:20:3f:a1:43:9d:f2:67:02:e7:4a:82:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F
Validity
Not Before: Oct 20 09:56:06 2023 GMT
Not After : Oct 18 10:01:06 2024 GMT
Subject: CN=C66E4A78FA04491DB1D26A8165DF490557410B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:5b:4e:ab:b6:07:d2:21:8a:93:bb:0b:fe:
e7:50:89:b5:17:08:76:b5:72:08:9c:8e:f3:7e:74:
8e:fa:ce:69:b2:b5:91:e1:58:fd:a1:15:f3:26:57:
ce:c5:69:55:d6:19:a3:83:b8:a7:15:92:24:b3:76:
7a:76:cf:67:b4:37:6f:16:11:8c:cc:31:22:bc:4a:
fe:c0:89:92:00:db:f4:1e:b2:28:b9:d1:86:11:9b:
91:90:f2:b1:ed:88:87:75:ed:5b:da:00:f6:64:fd:
67:26:cd:23:ef:c4:3a:15:95:f3:3d:df:5d:23:71:
f2:10:d6:95:d8:24:d8:9b:96:59:12:60:ed:37:12:
4c:df:ef:1b:14:82:21:91:36:93:b6:36:7c:a4:88:
7d:6e:b2:62:50:73:43:8c:f2:ba:71:e5:35:7b:02:
31:5d:d2:b5:38:48:75:e2:c8:6a:dc:2b:7a:ea:de:
fa:9c:9d:f1:e0:07:02:2d:3a:c3:b0:f8:d8:6f:28:
d7:e0:ce:40:c4:36:78:d9:1b:f9:36:43:94:14:8f:
d0:70:ea:7f:69:c4:e1:0f:0e:05:55:77:a4:86:fa:
bb:96:24:45:04:da:bb:45:17:66:84:85:8c:95:c0:
21:cb:2a:a4:6f:04:e9:ce:1d:5f:47:0b:f9:41:22:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6E:4A:78:FA:04:49:1D:B1:D2:6A:81:65:DF:49:05:57:41:0B:1F
X509v3 Authority Key Identifier:
keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/3130332e3133392e3137352e302f32342d3234203d3e20313430343433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.139.175.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:49:43:70:07:c3:ae:10:fe:e4:03:c1:c2:69:51:5e:83:80:
79:c4:59:cb:0d:59:ab:06:92:b8:e0:de:78:5c:18:14:b0:82:
70:8d:7a:64:f5:e4:34:99:ee:cc:cf:43:7c:75:ee:ff:d2:00:
aa:52:82:f9:84:44:54:e4:66:20:21:46:9f:1e:90:e2:d2:32:
99:f2:8f:d2:4d:a1:11:04:60:50:8c:86:01:ad:ff:0d:6a:3f:
09:ee:7a:e5:15:cc:81:de:10:d0:19:00:52:8e:90:9a:c1:1b:
42:0e:d8:55:48:67:68:ba:0e:39:e1:e7:eb:5e:c0:c2:39:2e:
23:c7:ec:51:e1:a4:87:64:08:fb:f2:30:28:83:91:49:bc:a0:
3b:4e:d8:3a:e1:68:5d:05:71:02:e4:9c:0d:e1:7b:0a:0b:2f:
8e:27:22:55:03:9e:17:85:df:1e:bd:b8:d8:20:db:a7:5d:0e:
65:fc:06:52:18:11:ee:97:6d:16:55:0e:25:5c:ba:2b:cf:5d:
51:11:8a:3b:55:89:e9:8e:15:01:f7:7a:1a:90:d1:3e:63:8e:
93:72:13:18:cd:82:da:11:b6:91:6c:85:ff:60:1f:06:39:de:
b1:03:3c:7a:3f:ac:73:1f:11:bb:a7:47:53:1e:29:39:ae:c6:
34:3a:ab:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 18:34:02 2023 by rpki-client on console-ams.rpki-client.org