Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3234203d3e20313439393433.roa
File: 3130332e3139312e3235342e302f32332d3234203d3e20313439393433.roa (raw, json)
Hash identifier: o1W+PLJ2+grNvk/Hwhsz2njt6PZUPmTCVgPGLh4EJCA=
Subject key identifier: 2C:A7:75:7B:27:9C:BB:E6:8D:4F:BA:AE:06:F3:72:27:96:34:B2:9A
Certificate issuer: /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial: 4712E6203C728161BDCA53FF3C2A6C9D6771AE60
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3234203d3e20313439393433.roa
Signing time: Tue 05 Sep 2023 07:00:53 +0000
ROA not before: Tue 05 Sep 2023 06:55:53 +0000
ROA not after: Tue 03 Sep 2024 07:00:53 +0000
asID: 149943
IP address blocks: 103.191.254.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 01:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:12:e6:20:3c:72:81:61:bd:ca:53:ff:3c:2a:6c:9d:67:71:ae:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Validity
Not Before: Sep 5 06:55:53 2023 GMT
Not After : Sep 3 07:00:53 2024 GMT
Subject: CN=2CA7757B279CBBE68D4FBAAE06F372279634B29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:5e:ef:0a:2a:90:2b:63:1f:eb:c7:cb:f3:
4c:f8:36:59:ab:8c:64:f6:76:c1:69:4c:ae:44:e8:
69:6b:98:55:79:ad:27:06:3f:11:f6:52:25:39:40:
50:a7:84:40:ed:fd:fc:c1:58:9c:bd:c2:e4:05:db:
99:77:c5:7a:c9:0a:0f:c0:40:f1:79:2a:42:f5:f4:
38:00:c5:a7:e7:4f:a1:5f:2a:ac:56:92:a8:c0:76:
fd:6b:f0:77:9a:9c:2b:a4:74:98:b4:a1:af:5e:0f:
39:0f:8d:f1:da:3c:d3:14:4e:21:99:ec:52:26:49:
69:11:50:d2:88:42:fd:61:9c:72:8c:5d:18:91:cf:
80:6f:0f:2f:07:27:6f:6f:fb:8e:30:43:78:bd:f7:
64:97:93:b0:2f:90:55:39:0a:06:81:f5:97:2f:02:
03:be:21:63:f5:d2:3e:dd:8d:7d:83:a5:ef:8d:08:
d8:94:1f:18:0b:2b:5e:16:d0:9d:f9:88:56:22:22:
59:c0:ec:7f:7b:a4:b2:84:34:5d:8a:40:95:6d:f3:
13:cd:75:8c:9f:19:8e:74:92:67:b4:b6:29:37:0f:
dd:ff:e7:1d:53:3c:4a:72:10:b0:7a:b3:07:d6:a6:
9e:86:2b:8b:52:c0:4c:45:c1:2c:96:94:7a:b6:df:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:75:7B:27:9C:BB:E6:8D:4F:BA:AE:06:F3:72:27:96:34:B2:9A
X509v3 Authority Key Identifier:
keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3234203d3e20313439393433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.254.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:3d:9c:ab:23:6f:83:6d:4f:7d:27:e0:30:ad:6c:58:71:ab:
a1:34:e8:7e:5b:cf:e4:e1:63:d1:35:47:52:ab:64:68:93:84:
ff:82:e2:01:7a:99:4d:1e:a5:6a:80:1e:77:49:51:9f:38:c7:
6c:60:b2:ac:29:3e:90:bc:df:35:36:f6:72:4a:ec:79:83:80:
08:18:98:16:7a:0a:12:87:67:94:6b:23:ef:6c:db:4f:64:e2:
e7:08:c7:00:44:07:80:8d:aa:d3:47:74:73:72:17:00:3c:ae:
11:bb:51:4b:1a:57:ba:aa:bc:11:17:7d:be:f0:3a:e2:d7:1a:
58:d9:6e:63:a9:f8:ec:30:c1:22:5f:22:07:fd:6e:6f:d4:f9:
58:aa:5b:96:1f:68:19:8d:b8:7c:bf:06:75:22:9c:86:03:ec:
e1:98:d8:c2:67:56:c6:72:01:be:2c:8a:1c:58:fd:76:58:f9:
c3:6a:19:61:dc:38:8a:f5:63:e9:87:85:c5:f7:9a:5c:3f:5c:
cd:fe:9f:67:5e:7f:1b:33:4b:bf:7f:7f:59:cd:df:e0:ff:e6:
53:df:19:6b:d6:35:09:04:05:c8:58:53:25:6d:64:38:cb:f4:
7a:b6:3e:2a:a7:3b:88:fa:8e:fc:60:86:34:1d:5b:b5:6f:ca:
87:15:5a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org