Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39392e302f32342d3234203d3e203137343530.roa
File: 3130332e382e39392e302f32342d3234203d3e203137343530.roa (raw, json)
Hash identifier: G48YCNFjXdD/LiDuhpLjKoHZlgJ8PDA4J0VLvOs4IkM=
Subject key identifier: 52:1B:CE:61:47:50:69:64:33:17:E2:48:2E:27:0A:A0:A4:91:3E:A1
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 2575A6C15E08E80B9B2D7CF0BB7D923FCD4ECF82
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39392e302f32342d3234203d3e203137343530.roa
Signing time: Wed 11 Oct 2023 04:46:56 +0000
ROA not before: Wed 11 Oct 2023 04:41:56 +0000
ROA not after: Wed 09 Oct 2024 04:46:56 +0000
asID: 17450
IP address blocks: 103.8.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 07:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:75:a6:c1:5e:08:e8:0b:9b:2d:7c:f0:bb:7d:92:3f:cd:4e:cf:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Oct 11 04:41:56 2023 GMT
Not After : Oct 9 04:46:56 2024 GMT
Subject: CN=521BCE61475069643317E2482E270AA0A4913EA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:1c:cd:1d:4f:29:a9:8d:f4:b1:0e:28:1d:
83:80:e9:70:94:61:03:9d:05:00:4c:66:fc:23:c2:
f2:b1:27:fe:c7:ce:4a:7d:96:6d:72:98:8e:6b:c4:
f6:ed:a0:7f:43:42:8a:a6:70:31:41:7d:e2:1b:e2:
93:ff:81:b5:18:a4:66:e9:c6:73:52:1c:40:be:89:
aa:cb:78:f2:7f:37:ec:ff:5d:de:ba:18:d3:b4:74:
de:39:41:cb:e7:15:ba:7e:36:99:5d:e9:a3:ba:ad:
56:78:62:b1:aa:71:06:6a:33:f0:08:f6:12:27:1b:
7b:84:af:bc:34:3f:fd:2b:2b:26:06:99:cb:6f:90:
e9:5e:a8:06:f0:9f:8d:71:8f:1b:14:2f:13:f4:85:
ec:5f:b3:80:33:1b:6c:c3:3f:59:fe:5a:7c:6f:44:
9b:e9:4d:53:39:61:78:32:3a:59:32:d4:95:46:a0:
82:c9:e7:d7:34:cb:52:7e:5d:c5:ce:b1:35:81:3b:
b2:d6:91:53:0f:25:c4:50:86:bd:88:33:49:12:cc:
6a:c2:b6:2c:19:12:3e:27:62:47:9a:02:be:0e:f9:
14:5e:42:4b:ae:34:49:13:02:48:d7:a4:1c:e1:24:
a1:f8:7c:be:b4:02:3c:53:e5:6f:85:f1:3f:23:70:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1B:CE:61:47:50:69:64:33:17:E2:48:2E:27:0A:A0:A4:91:3E:A1
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39392e302f32342d3234203d3e203137343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c8:1f:88:40:68:9d:8e:21:b9:d6:d2:d8:6a:a2:6c:c8:a9:
7f:1c:6d:59:47:0e:32:7d:3a:fe:2e:fc:72:b0:d4:2d:72:97:
40:2f:f6:89:57:f6:11:1c:5c:34:72:c5:45:ba:35:29:7a:c7:
4c:18:ea:44:f7:d7:f2:24:62:b1:71:8c:f3:b3:37:92:ef:a2:
d5:5a:6a:fb:27:f4:8c:2d:de:41:52:97:f7:bf:db:b8:96:fc:
be:4a:d0:1a:f5:c6:ab:32:f8:40:35:d3:4b:11:90:e7:42:50:
c0:4e:bc:41:be:8c:d0:dd:07:fd:4f:70:2b:8c:18:af:d2:f8:
4d:92:85:86:d3:05:a8:eb:b3:b6:9b:f6:4c:7f:4e:2c:ec:99:
3a:13:40:3b:01:34:32:17:ad:02:75:49:d7:f8:61:25:fe:80:
df:30:f8:16:25:9e:13:06:06:70:9d:e3:50:2c:76:7b:69:a5:
06:9d:5c:0e:4c:13:de:55:af:fc:a3:77:a7:03:9e:b6:a1:eb:
f5:46:2a:cd:ab:e1:52:47:43:2e:5a:f2:85:8e:01:ef:a0:d3:
9b:bd:bf:e5:29:29:45:9e:9f:1c:21:44:e7:8b:a4:2e:75:96:
f4:d8:73:d6:80:3d:60:42:b4:cb:2c:11:cd:60:5f:78:9b:22:
3c:e9:bf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org