Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/3130332e36362e38362e302f32342d3234203d3e20313432333736.roa
File: 3130332e36362e38362e302f32342d3234203d3e20313432333736.roa (raw, json)
Hash identifier: KKPTuSpYgVo/kzJWn7VfUpdSYcl4ECbsrTRPb9D58yw=
Subject key identifier: 98:2A:4A:38:B1:7A:C4:23:27:A5:81:6A:4D:1E:F0:53:BB:AF:FF:77
Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B
Certificate serial: 0FACC6F4A65628B55DE988EEB2AEF763278B34DC
Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/3130332e36362e38362e302f32342d3234203d3e20313432333736.roa
Signing time: Mon 21 Aug 2023 06:00:01 +0000
ROA not before: Mon 21 Aug 2023 05:55:01 +0000
ROA not after: Mon 19 Aug 2024 06:00:01 +0000
asID: 142376
IP address blocks: 103.66.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 09:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ac:c6:f4:a6:56:28:b5:5d:e9:88:ee:b2:ae:f7:63:27:8b:34:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B
Validity
Not Before: Aug 21 05:55:01 2023 GMT
Not After : Aug 19 06:00:01 2024 GMT
Subject: CN=982A4A38B17AC42327A5816A4D1EF053BBAFFF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:fa:45:5f:4c:a5:d8:6d:2b:3c:7e:73:21:
2e:6c:19:7e:e8:40:17:3c:5e:3a:e3:2c:ce:6a:1e:
ba:11:92:b3:1c:a2:2d:bc:0e:e9:0d:09:69:49:ef:
38:3f:29:28:88:8e:94:43:c0:5b:d9:7d:77:a2:1f:
4e:82:1a:d0:d8:44:93:c1:7d:38:a4:f0:e1:79:44:
17:a6:38:69:4e:75:6e:57:70:10:fd:74:2c:b8:0a:
34:00:d2:37:7a:9d:7c:48:69:aa:1d:b6:2a:d1:d3:
10:b4:2e:f6:94:1a:62:e2:ae:ab:a3:e5:55:e9:80:
cb:0b:fa:34:7a:34:89:c5:20:32:0e:66:9a:3b:36:
7d:aa:d2:25:d0:06:c1:ae:b0:49:03:62:77:93:85:
f5:a9:85:5d:5e:2d:15:5d:3b:3c:d6:b9:8d:5f:f7:
4b:64:b5:4d:d6:ea:f0:c1:52:2c:a4:f4:9c:d0:fa:
2f:e6:c8:dc:9d:52:15:fb:de:9a:0d:aa:b4:ce:2a:
0b:70:62:d6:66:c9:07:5e:9f:4c:d7:b2:a1:5d:08:
6e:57:77:82:03:ad:b8:cd:6e:8b:8f:df:0b:38:7f:
fb:21:18:18:03:19:dc:7a:c3:fa:19:01:8c:f5:f7:
4c:cf:6e:9f:dc:ff:58:fb:00:b9:7c:44:06:64:44:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:4A:38:B1:7A:C4:23:27:A5:81:6A:4D:1E:F0:53:BB:AF:FF:77
X509v3 Authority Key Identifier:
keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/3130332e36362e38362e302f32342d3234203d3e20313432333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.66.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:98:ca:26:26:0f:bd:aa:ef:88:fa:f6:83:83:f8:90:85:d0:
ad:05:3b:e5:50:3d:48:ff:54:a7:de:b0:aa:e6:22:de:d0:66:
71:01:cd:dc:87:7d:fc:ea:68:72:c2:2e:58:b7:c6:b7:05:32:
6e:34:12:4f:8b:a6:73:0b:28:60:5b:1b:76:01:80:ae:1b:b3:
f8:dc:1f:20:7d:d0:c5:f1:a8:3d:7b:36:30:91:bc:0d:de:2d:
5e:d4:24:7d:fe:d9:8a:78:f0:81:6e:a4:3d:7f:9c:5b:8d:a3:
82:56:16:f5:75:14:23:09:13:c4:5d:23:2e:46:5f:b0:da:b5:
46:54:89:c7:c7:c8:25:bc:1f:3f:54:5f:1d:4c:ee:1a:5e:50:
5a:47:8e:57:71:7c:20:bf:6f:96:7a:37:ae:50:a0:a6:6c:d6:
20:84:fe:3b:04:46:3c:f3:f6:3f:cf:cd:ab:b5:a5:9e:2c:11:
d2:13:e6:97:e5:13:99:35:fd:2d:b5:c1:30:58:8d:a9:56:ba:
d4:bb:b1:40:69:1f:82:0d:07:0a:a3:3d:32:e9:a3:9e:d0:83:
36:f8:60:9c:e9:79:c9:e0:7e:f8:b0:2a:e8:f4:09:6f:2b:7d:
12:35:8e:8c:69:b1:46:ab:47:bd:02:92:2c:b3:13:90:cc:a4:
d1:4e:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org