Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3130332e3137392e36372e302f32342d3234203d3e20313531303030.roa
File: 3130332e3137392e36372e302f32342d3234203d3e20313531303030.roa (raw, json)
Hash identifier: ElRw4ozeFVEoe0bRrDpXebZPRLVdYzas5ZzDZuZ745A=
Subject key identifier: E2:0D:00:D9:F0:53:94:93:BB:17:83:83:0D:12:FD:85:33:7A:40:7C
Certificate issuer: /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270
Certificate serial: 2BE4D314C0D62B98CA56D6049EA5C6DFFB211421
Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3130332e3137392e36372e302f32342d3234203d3e20313531303030.roa
Signing time: Wed 03 Jan 2024 09:47:01 +0000
ROA not before: Wed 03 Jan 2024 09:42:01 +0000
ROA not after: Wed 01 Jan 2025 09:47:01 +0000
asID: 151000
IP address blocks: 103.179.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 09:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e4:d3:14:c0:d6:2b:98:ca:56:d6:04:9e:a5:c6:df:fb:21:14:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270
Validity
Not Before: Jan 3 09:42:01 2024 GMT
Not After : Jan 1 09:47:01 2025 GMT
Subject: CN=E20D00D9F0539493BB1783830D12FD85337A407C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:7e:9a:a7:d2:26:c4:8d:b9:cf:f1:ae:0d:
f0:0c:34:b7:c1:da:f2:0a:98:b2:a4:99:60:fd:a6:
54:d6:48:a5:2e:3e:dd:1c:84:1e:17:b9:e6:14:d9:
61:b8:ea:fd:4d:af:79:1f:cc:a2:a9:41:0b:0c:26:
52:3c:08:ac:4d:36:10:5f:c0:96:3b:2a:47:99:90:
b5:e2:17:67:ea:01:7c:4e:61:38:43:73:38:14:fc:
6d:05:4c:ba:9e:6b:88:e9:22:22:e8:8c:6f:01:26:
cc:25:f6:0e:3f:f2:92:ca:cc:22:01:c3:c6:e8:bc:
f2:9d:8c:71:42:31:54:82:0b:c7:a9:21:02:73:f3:
f4:33:26:2a:af:d8:72:a4:b6:1d:42:f8:f2:e7:35:
1a:1c:37:96:64:23:e1:93:7d:78:f0:9f:56:98:e2:
72:ff:ba:f5:44:85:f0:fe:bc:b6:c6:3a:d4:f7:6f:
09:80:ba:c3:bd:c9:c0:cf:79:c1:ba:c2:19:be:81:
5c:f0:a3:ef:3f:70:f4:ed:0d:ab:02:a7:af:75:70:
23:e5:33:7c:c3:85:c1:c9:7b:3f:7c:16:fd:7b:6f:
d0:61:fa:0e:58:c9:04:ec:73:de:77:51:33:33:a6:
59:79:19:ff:5a:95:5e:f5:a4:c0:03:13:4d:37:f8:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0D:00:D9:F0:53:94:93:BB:17:83:83:0D:12:FD:85:33:7A:40:7C
X509v3 Authority Key Identifier:
keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/3130332e3137392e36372e302f32342d3234203d3e20313531303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.179.67.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6a:a9:91:57:a3:c9:bd:ad:a0:ca:67:30:d2:7d:c3:0b:b9:
65:65:7b:de:7d:e4:8c:3f:9c:2b:14:7e:80:50:e6:c3:65:38:
32:9f:49:fe:38:50:ed:62:50:15:8f:e7:06:0b:ea:0c:eb:15:
2d:dc:41:71:49:66:8b:61:1b:27:58:0c:50:8c:8f:23:33:57:
48:62:b0:17:eb:ba:39:a2:9a:2d:57:33:be:3d:89:be:4f:e9:
80:ce:02:85:0a:5b:d4:dd:85:cc:e3:e2:b3:46:0b:27:6d:1b:
07:a7:4f:88:2b:58:c1:0c:e4:ec:76:11:f6:ee:00:76:2d:65:
4c:5a:28:cf:ca:f1:87:4c:e2:52:a2:ef:34:ac:da:3f:4f:f6:
ac:ab:4c:f7:67:1c:33:68:4e:1c:16:84:d7:a5:fa:53:66:7b:
7a:08:fb:4f:8c:c7:42:99:af:f5:ea:a5:12:2d:1c:5f:87:73:
bb:74:0c:ca:e5:01:40:dd:1d:df:da:db:d1:ed:64:af:31:c2:
82:5a:0e:9b:9e:07:b7:3a:2e:d3:13:d3:99:6c:10:cd:45:ec:
7e:81:88:30:ba:b9:99:6f:21:30:4b:b1:40:47:79:3c:fa:e1:
cc:ff:ae:ab:e0:33:99:a2:b9:86:ad:8a:07:d5:60:96:56:75:
f8:c1:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org