Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3130332e3135352e3138362e302f32332d3234203d3e2030.roa
File: 3130332e3135352e3138362e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: I9PuzPaZcyDh7q/PLtbsZxSP6MY62P8VQFBqlEDQfqU=
Subject key identifier: 94:56:63:C8:8A:D4:13:61:49:23:61:4B:F5:8C:70:AD:A0:67:9B:AE
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 03C79160E02D0FE7DDEA507894ACD5C070702170
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3130332e3135352e3138362e302f32332d3234203d3e2030.roa
Signing time: Wed 26 Apr 2023 07:00:00 +0000
ROA not before: Wed 26 Apr 2023 06:55:00 +0000
ROA not after: Wed 24 Apr 2024 07:00:00 +0000
asID: 0
IP address blocks: 103.155.186.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:c7:91:60:e0:2d:0f:e7:dd:ea:50:78:94:ac:d5:c0:70:70:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: Apr 26 06:55:00 2023 GMT
Not After : Apr 24 07:00:00 2024 GMT
Subject: CN=945663C88AD413614923614BF58C70ADA0679BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:f1:19:61:92:d9:57:fb:e2:6f:c5:1b:d2:
45:b0:f2:3f:22:4f:64:34:ad:f0:4a:a9:00:18:0f:
41:d2:aa:bd:48:89:63:5a:eb:db:a8:f8:3d:e0:fe:
77:28:b1:f0:06:ec:2f:92:7f:63:8b:68:7c:fb:75:
13:27:40:51:e7:a0:97:4e:4e:fd:f8:ca:42:08:41:
32:48:49:ae:0b:f6:96:31:e0:b8:eb:d9:90:6a:a3:
ff:36:e5:ee:62:1d:22:cc:a0:e6:6e:4c:0f:ee:a6:
41:c9:3b:c8:eb:a3:28:8f:f8:03:28:cd:79:63:88:
70:0e:5e:35:50:82:44:1e:98:f1:fd:71:9f:e1:84:
b7:c0:7d:2a:fc:7e:d7:f8:dd:f9:cd:e0:55:8e:d5:
2c:b8:bc:00:7a:40:e6:0e:d5:ed:b7:67:d7:e2:bd:
32:27:05:1c:86:74:79:c7:b3:5c:fb:28:4c:c4:f9:
ba:7d:e3:e1:54:b5:57:ad:a0:ce:91:20:58:00:bf:
7f:fc:49:cb:66:10:5e:f5:d4:29:79:1f:0a:57:f2:
c0:cb:9c:57:75:2e:64:b9:da:8e:30:f7:e6:2c:5a:
c5:79:3a:27:75:7d:65:c6:f1:e4:e8:0e:08:e6:ba:
bd:81:2b:c7:80:93:e5:72:d1:c5:7b:1c:1a:a8:d4:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:63:C8:8A:D4:13:61:49:23:61:4B:F5:8C:70:AD:A0:67:9B:AE
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3130332e3135352e3138362e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.186.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:3e:6e:c5:63:5d:1f:2d:8c:71:5e:40:d9:a7:66:95:21:56:
9f:f2:3a:cb:dd:fb:dc:9a:e9:c5:32:6d:02:3c:47:96:da:b1:
61:2a:ab:f4:0d:56:d3:5b:3f:f6:3b:3b:2a:a4:51:d5:02:5f:
12:8c:1d:59:ba:70:50:b9:9d:62:ec:7e:44:a7:30:df:a3:79:
43:42:ce:7a:ab:f9:27:a4:b4:91:2f:23:bd:1f:6a:10:d7:b2:
a6:a6:54:a8:1b:f1:17:4a:9f:37:77:f5:a1:a6:77:66:37:61:
4e:0b:04:8f:96:ff:84:93:81:0c:2a:05:2e:da:96:7a:ce:b7:
9a:08:7b:d3:8a:30:9d:e6:b3:94:a4:96:33:99:56:d0:4a:3a:
8b:f1:2b:a4:12:74:e3:78:7e:98:36:46:ba:3f:7b:ea:66:3b:
01:90:fc:0f:2a:71:7b:55:25:00:e5:93:0d:5e:f3:7c:d8:2a:
25:e3:bd:43:41:72:02:fe:fb:ea:4d:f4:be:2e:4d:29:71:ed:
ce:23:a4:35:26:ab:4e:f9:0a:7f:cc:0d:12:b6:59:e6:b1:5c:
f9:89:c8:6c:ba:59:f0:0d:dd:cc:38:1a:5c:9e:a4:49:c9:37:
49:94:6d:c5:b8:ba:42:eb:3c:82:8f:9f:82:a5:04:ef:36:8f:
df:e8:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 10:55:26 2023 by rpki-client on console-fra.rpki-client.org