Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431383932.roa
File: 3130332e34322e3131362e302f32342d3234203d3e20313431383932.roa (raw, json)
Hash identifier: 3a2hNDPZjk8j7TbPEPUmIsa9vuyBcLxBIAp0NPWRCec=
Subject key identifier: C5:BC:27:F9:BF:23:55:85:94:ED:59:DE:2E:08:5F:B3:63:AB:23:25
Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial: 24967F8D9880BA84778261D79B82FC76A2603D31
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431383932.roa
Signing time: Sun 24 Dec 2023 04:44:23 +0000
ROA not before: Sun 24 Dec 2023 04:39:23 +0000
ROA not after: Sun 22 Dec 2024 04:44:23 +0000
asID: 141892
IP address blocks: 103.42.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 16:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:96:7f:8d:98:80:ba:84:77:82:61:d7:9b:82:fc:76:a2:60:3d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Validity
Not Before: Dec 24 04:39:23 2023 GMT
Not After : Dec 22 04:44:23 2024 GMT
Subject: CN=C5BC27F9BF23558594ED59DE2E085FB363AB2325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:b6:cc:ef:13:5c:60:2d:6d:1a:e7:75:43:
f0:64:97:93:a7:95:d8:60:01:70:14:1f:7b:c4:aa:
d0:b7:a5:f8:80:11:91:fc:b6:c8:0a:43:f7:7e:96:
32:aa:40:01:75:83:67:aa:67:59:18:81:b5:aa:c7:
2a:7f:b2:41:de:83:63:6d:a8:cf:85:9d:08:40:8b:
98:b6:bb:7d:e7:cb:9a:e1:fc:56:de:33:ca:cb:2d:
28:a5:c7:bf:de:d5:44:3f:de:c2:aa:58:4c:27:82:
c2:75:4c:d2:75:9d:6f:7b:c7:82:db:14:4a:f7:1b:
82:ba:d2:1f:d2:d9:78:07:69:30:e6:23:9b:c9:4b:
e7:e9:23:14:63:97:a9:d3:cd:c7:89:8f:82:c0:83:
1b:c5:61:18:cf:6e:72:d1:0a:62:ff:f6:d8:3b:f0:
27:87:9e:63:90:77:4d:12:3b:92:45:3c:83:09:a1:
da:5d:0a:3c:e1:3a:38:14:7d:72:a9:32:de:19:bb:
d2:12:bc:57:95:d2:a7:50:86:91:e3:50:52:ef:83:
55:d7:7e:53:79:27:2f:03:65:66:d6:fc:de:e0:c9:
97:ee:ee:29:07:cb:ff:22:cd:4b:ee:81:4d:7c:ba:
cc:dd:b5:86:68:7d:af:bb:0b:52:6e:e3:cc:61:eb:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BC:27:F9:BF:23:55:85:94:ED:59:DE:2E:08:5F:B3:63:AB:23:25
X509v3 Authority Key Identifier:
keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.116.0/24
Signature Algorithm: sha256WithRSAEncryption
84:16:3d:8a:e8:5f:28:6a:b1:43:33:7a:6b:c1:b1:bd:d7:74:
a1:2d:bf:ec:d1:d6:ce:4d:1e:aa:fa:1e:21:85:9f:92:dd:35:
34:f6:04:ca:72:3a:f7:a8:de:0b:da:a8:2b:6f:3a:7f:5e:18:
73:df:0c:88:65:0c:56:5c:fa:ff:4b:71:47:3d:cb:63:a7:16:
ce:de:3f:ac:ec:05:cd:dc:14:4e:45:49:8f:07:78:a9:11:bb:
2e:7e:96:f3:40:c9:51:a3:89:e8:e8:9e:60:cd:1a:68:8c:09:
92:d6:6a:4f:8b:85:e5:29:f0:7e:45:d1:25:22:1c:be:98:b5:
09:e5:83:20:4b:44:eb:dd:89:69:42:10:80:c8:d9:42:f7:69:
fb:33:b5:93:86:19:be:2e:e5:be:6f:e1:cb:5d:41:aa:7b:62:
7f:87:6f:0b:ef:e5:38:d9:f6:79:e2:d4:9d:21:1e:28:ef:07:
8c:6a:9a:91:5e:b8:9a:bc:5d:2c:33:a1:28:39:55:e8:1d:12:
d8:ba:ca:f0:b1:aa:33:d1:5e:0b:3a:22:fa:44:02:e3:a6:1b:
13:41:c6:db:ba:fd:18:66:cc:80:da:a0:1b:1a:a3:13:d9:4a:
88:1f:6c:5a:65:24:8e:a2:de:ce:b7:81:14:27:17:b2:3e:d3:
2d:16:d0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org