Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32342d3234203d3e203137343530.roa
File: 3130332e382e39362e302f32342d3234203d3e203137343530.roa (raw, json)
Hash identifier: QLzp5Wd1BZLgLbgQHn+OxgDI120ErZ0LlurSO2ydg7g=
Subject key identifier: 6B:C9:49:81:FE:8E:70:14:E4:EF:19:42:81:00:75:72:BF:7A:1C:BE
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 22C299BB535C9A56947F53CE7E54037D4FD95E56
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32342d3234203d3e203137343530.roa
Signing time: Fri 08 Sep 2023 08:38:54 +0000
ROA not before: Fri 08 Sep 2023 08:33:54 +0000
ROA not after: Fri 06 Sep 2024 08:38:54 +0000
asID: 17450
IP address blocks: 103.8.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 07:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c2:99:bb:53:5c:9a:56:94:7f:53:ce:7e:54:03:7d:4f:d9:5e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Sep 8 08:33:54 2023 GMT
Not After : Sep 6 08:38:54 2024 GMT
Subject: CN=6BC94981FE8E7014E4EF194281007572BF7A1CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:93:e7:25:d0:1f:f2:5f:71:1d:2e:e3:0b:
85:75:1b:e9:ee:ef:ea:8f:05:f9:3f:70:7b:e6:9c:
02:a7:9e:84:a0:84:c5:20:c1:8a:ef:a7:8d:cb:f9:
50:54:5f:b4:67:61:b5:ab:b5:52:a2:4f:13:d4:ad:
4b:fc:6e:74:8f:89:34:65:8b:b0:4f:0a:a2:59:68:
20:63:b5:33:de:a5:39:0f:07:52:2c:11:36:18:90:
5a:6b:5e:14:82:8c:ce:7c:c9:4c:38:a9:48:ff:77:
34:d8:4f:ba:b3:7e:16:83:d3:49:3b:4e:b6:c2:07:
0f:d0:b1:55:7e:13:93:f3:67:00:d3:8f:f7:bf:07:
a1:2b:d3:ca:76:07:0d:16:4f:64:23:39:29:c9:97:
1d:03:5f:27:62:1d:96:29:fc:1c:ff:d5:4a:0f:c5:
f1:e3:99:c4:a7:91:46:1d:14:2d:2e:42:76:3f:83:
c7:2f:5b:a3:af:ba:31:50:8f:d5:18:3f:b2:8e:74:
42:80:1e:bb:62:d4:26:69:b4:48:c3:d8:bb:2a:09:
8b:1c:bc:d6:76:e1:65:b9:f9:e1:82:d3:9d:78:a9:
5a:46:ed:be:bd:7c:a2:13:f6:89:e0:43:bc:ce:e6:
6a:19:4d:97:de:58:59:2f:48:70:c5:e9:d9:00:47:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C9:49:81:FE:8E:70:14:E4:EF:19:42:81:00:75:72:BF:7A:1C:BE
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39362e302f32342d3234203d3e203137343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.96.0/24
Signature Algorithm: sha256WithRSAEncryption
98:bf:c3:de:bc:a8:fc:6e:92:7c:4d:39:ea:ec:37:89:f5:9e:
1e:c7:c1:94:15:2a:1d:99:19:0d:bd:25:69:e1:74:85:89:39:
08:b6:23:c5:8d:2b:7f:a1:af:17:8d:bc:e4:0e:7a:55:60:5d:
84:ad:b7:d5:2f:2f:e8:0c:cb:cd:33:6c:42:b0:45:77:62:71:
20:6d:b2:74:09:9c:17:5f:3a:46:a8:3e:a7:49:95:a0:07:fe:
ee:cf:59:33:64:27:4f:f0:17:f8:08:e2:b1:07:7f:43:b4:87:
fe:51:ea:5e:74:f7:8b:c0:27:f3:dd:85:24:03:43:79:24:c0:
b7:50:21:c5:22:d7:4b:78:d4:3b:a7:91:48:4d:a3:db:a8:fb:
2c:fa:46:d0:e2:5d:b9:3e:a8:3f:87:a7:ea:7a:60:0d:d1:fe:
da:43:04:03:92:63:cc:11:4b:c7:8a:b2:ba:bc:d4:7c:52:50:
c9:cc:71:a4:4d:e2:48:34:a4:82:28:c3:e0:b4:f3:90:42:53:
2c:bf:ae:8c:86:cf:bb:ed:df:bf:37:49:d4:d2:2a:d2:b2:3c:
bd:ce:34:5c:12:74:8b:ab:18:90:6c:92:e4:74:a1:c9:ef:95:
89:3f:1f:a4:59:fc:3d:a9:8e:99:8f:cb:de:ea:81:d6:2b:8d:
e0:ea:34:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org