Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32322d3234203d3e203234353139.roa
File: 3130332e34322e3131362e302f32322d3234203d3e203234353139.roa (raw, json)
Hash identifier: c+gu4Nu4KZXqv8b2rxEFPaZp97gr+BazSq+C6Phz3uM=
Subject key identifier: 29:A0:26:9F:1B:63:30:A4:17:7D:9D:04:83:37:E5:79:DF:AE:97:30
Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial: 6FA1F92B7AC901078B0BFBC1F698FF6609B2C059
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32322d3234203d3e203234353139.roa
Signing time: Sun 10 Dec 2023 08:00:01 +0000
ROA not before: Sun 10 Dec 2023 07:55:01 +0000
ROA not after: Sun 08 Dec 2024 08:00:01 +0000
asID: 24519
IP address blocks: 103.42.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 16:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a1:f9:2b:7a:c9:01:07:8b:0b:fb:c1:f6:98:ff:66:09:b2:c0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Validity
Not Before: Dec 10 07:55:01 2023 GMT
Not After : Dec 8 08:00:01 2024 GMT
Subject: CN=29A0269F1B6330A4177D9D048337E579DFAE9730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:fc:db:b9:59:4c:80:8b:56:64:af:47:31:
7d:43:14:ad:d4:dc:71:b1:79:f7:d8:a8:df:cb:55:
07:d1:fa:97:89:7e:e2:ab:ba:31:d9:9b:91:e8:28:
59:70:21:f1:28:b9:dd:25:09:70:41:43:4b:07:f1:
e3:6d:0e:9f:59:32:fe:21:60:b8:49:a2:bb:00:ad:
54:c6:12:f9:0c:e6:6e:b2:12:e2:9b:16:e1:89:14:
67:78:63:be:4a:12:74:04:f6:80:c8:49:00:21:1a:
3b:75:eb:63:ae:1d:7c:bb:1f:b4:b7:f6:5e:9d:44:
38:7f:45:82:39:d7:54:31:3f:d7:e1:5d:b6:3d:97:
af:f2:35:d4:15:d1:6b:79:d9:64:b8:1a:b6:63:a7:
f4:0b:13:32:ad:94:fd:ee:1e:88:47:30:5c:01:3b:
c0:fe:f4:c2:be:98:dd:4d:0e:c0:0b:b8:d9:cb:a5:
18:34:1b:82:9f:f6:73:ec:da:8e:a2:d4:90:52:77:
0b:5e:16:81:f8:e7:93:30:6e:e8:d7:5e:b6:df:02:
21:63:27:9e:32:69:5c:fa:8e:a1:b2:cf:b8:46:d8:
93:b9:a2:6f:b3:b7:d3:fb:65:55:0b:6c:5d:3c:ab:
e8:e4:0e:1b:72:e9:5d:ed:c2:16:31:a7:48:a7:2d:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:26:9F:1B:63:30:A4:17:7D:9D:04:83:37:E5:79:DF:AE:97:30
X509v3 Authority Key Identifier:
keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32322d3234203d3e203234353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.116.0/22
Signature Algorithm: sha256WithRSAEncryption
03:6b:e5:51:a0:80:cb:46:73:00:35:ec:00:1e:d9:66:08:11:
7b:0d:85:ed:4d:1f:f3:a0:2b:52:7d:3e:df:53:7c:51:3e:21:
3a:ed:67:6d:a9:10:b6:f5:cb:9b:fb:29:ba:ec:d7:e2:5d:bc:
b1:7f:1d:f9:be:84:3a:fa:05:4e:53:05:bc:76:1d:2f:81:53:
19:56:51:8e:c4:5a:30:0f:1c:1c:19:39:76:47:64:95:d8:b4:
94:78:da:9f:b4:53:87:63:c3:f6:24:b3:f0:f9:e2:88:75:30:
ef:68:a1:59:1e:40:23:23:57:b2:fc:0d:de:7a:23:68:3a:05:
5f:3e:31:ee:35:fc:07:a6:b3:c2:5b:69:96:1e:ce:21:bf:19:
23:e3:1e:39:c2:80:c8:4f:fa:8a:84:32:71:65:73:91:5a:f6:
a5:2d:a8:21:a2:34:64:4b:93:1e:49:d1:e6:fc:30:a7:bc:1d:
81:e8:3a:e1:e3:46:2f:74:ed:26:9c:bc:26:1c:c0:10:fa:a8:
4f:8b:53:78:40:64:dc:fa:7e:43:f6:52:5c:89:af:c0:6c:11:
b4:49:92:45:0d:18:d5:c0:0b:67:12:23:77:1c:50:dd:f3:75:
15:ad:28:ef:ee:af:d1:7a:7a:a8:53:ab:8a:9c:be:cb:40:c2:
aa:86:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org