Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3130332e3234332e31302e302f32342d3234203d3e203536323334.roa
File: 3130332e3234332e31302e302f32342d3234203d3e203536323334.roa (raw, json)
Hash identifier: PlIyGhdHrOyDOc3cxjACXUOMZ9//HFnBz857ixugDQE=
Subject key identifier: AC:21:D5:DF:49:FA:FB:1B:96:8D:E6:DF:BC:DD:0A:CD:A4:E2:F9:DE
Certificate issuer: /CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B
Certificate serial: 7069413BDF20604200B63927D10491FD921A513F
Authority key identifier: A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3130332e3234332e31302e302f32342d3234203d3e203536323334.roa
Signing time: Sat 13 Jan 2024 05:40:48 +0000
ROA not before: Sat 13 Jan 2024 05:35:48 +0000
ROA not after: Sat 11 Jan 2025 05:40:48 +0000
asID: 56234
IP address blocks: 103.243.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 22:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:69:41:3b:df:20:60:42:00:b6:39:27:d1:04:91:fd:92:1a:51:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D46A066DBAE3776A15E9AB09A6CD3C8216615B
Validity
Not Before: Jan 13 05:35:48 2024 GMT
Not After : Jan 11 05:40:48 2025 GMT
Subject: CN=AC21D5DF49FAFB1B968DE6DFBCDD0ACDA4E2F9DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:b9:01:c7:19:15:62:43:49:c9:86:20:ef:
8b:56:5a:6f:8d:16:a6:13:97:ba:3c:1f:61:ee:14:
49:11:3b:cd:7b:2c:5c:00:57:29:c3:9b:7e:51:1a:
cc:55:75:b3:15:b1:34:71:1b:ca:ad:a3:23:4a:81:
ce:ad:59:8b:33:f5:20:ff:da:1f:aa:c5:16:81:1a:
b4:f1:27:18:a3:c7:dc:8d:59:7b:65:48:b3:87:aa:
f2:9e:fd:cf:9a:ee:c8:8d:36:4b:49:bb:d6:df:f6:
34:97:b6:52:42:f8:1b:cb:11:36:9e:f5:f9:1a:e4:
b7:0d:47:47:19:51:e5:a1:a4:06:91:11:98:4e:13:
47:23:60:44:41:58:80:30:11:ec:67:9a:74:e4:0f:
b1:dd:22:fa:2a:cc:ed:5e:28:5f:1c:71:1d:9e:d8:
ea:69:70:82:d6:33:4f:56:c7:10:cf:40:81:a8:2a:
4b:d3:1c:2a:7d:a7:33:56:bd:b2:6a:d4:96:9f:ea:
70:c1:a8:88:39:64:93:0f:d3:28:bf:92:ba:f6:42:
62:d1:24:a0:c6:d6:9a:d2:df:3e:f6:56:69:eb:f8:
e1:f4:48:a6:14:af:30:ea:9c:26:63:57:f8:36:2b:
1b:36:11:eb:d1:25:69:92:b8:e3:a5:52:2b:49:85:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:D5:DF:49:FA:FB:1B:96:8D:E6:DF:BC:DD:0A:CD:A4:E2:F9:DE
X509v3 Authority Key Identifier:
keyid:A9:D4:6A:06:6D:BA:E3:77:6A:15:E9:AB:09:A6:CD:3C:82:16:61:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9D46A066DBAE3776A15E9AB09A6CD3C8216615B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3130332e3234332e31302e302f32342d3234203d3e203536323334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.243.10.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f0:3f:3a:31:89:28:56:bb:98:30:a4:5f:69:7a:1d:50:bd:
5c:98:f4:0e:3f:5f:16:35:aa:bb:e0:95:40:f1:90:72:17:f4:
b8:e1:76:92:b5:10:0c:51:30:6e:e1:df:95:92:4b:14:58:c1:
d1:04:8c:a8:c1:69:a1:05:52:af:71:39:ee:dd:4a:0a:2e:7d:
24:40:34:6d:3f:d6:58:61:94:0b:46:2b:f0:3b:2c:1d:ef:d8:
34:2a:6c:5c:a9:c5:d4:31:cb:5a:3d:46:47:6d:a3:2c:d3:78:
2f:ea:00:f4:22:90:94:54:df:d6:43:bc:6f:23:b8:1b:75:07:
81:3f:53:55:cf:51:4b:dd:d0:ed:1f:ec:d7:46:a0:cc:28:ce:
24:bb:10:17:d2:35:16:1c:1a:30:ca:0b:8f:0a:66:1a:11:b9:
dd:d1:0a:99:92:d0:da:23:9f:96:a1:ae:74:85:89:82:67:b5:
28:a9:3f:53:d8:7e:ad:82:c4:20:b6:68:78:84:4b:ec:e6:db:
ef:94:bd:c6:ec:2b:36:20:43:4a:cf:80:6f:59:70:42:9d:a4:
b4:db:be:96:28:90:b4:16:a3:97:58:63:b4:df:28:aa:28:ce:
96:4b:c4:c8:6b:e1:14:7e:8d:21:4c:c7:8c:0a:72:35:8e:02:
1c:b4:a5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 01:42:28 2024 by rpki-client on console-ams.rpki-client.org