Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/3130332e3134372e3235342e302f32332d3234203d3e20313339393736.roa
File: 3130332e3134372e3235342e302f32332d3234203d3e20313339393736.roa (raw, json)
Hash identifier: 0ZI4GRSPvYp2xBKn37WgGc7IF2EMIEFb9Qiz3pXj9tc=
Subject key identifier: 56:D1:7C:3B:64:67:F6:C3:95:A3:AA:4D:78:5C:B0:CB:33:2E:E9:83
Certificate issuer: /CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D
Certificate serial: 208E57D4C0D7B3F514BA10387B8875E067B8415E
Authority key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/3130332e3134372e3235342e302f32332d3234203d3e20313339393736.roa
Signing time: Fri 01 Sep 2023 07:00:48 +0000
ROA not before: Fri 01 Sep 2023 06:55:48 +0000
ROA not after: Fri 30 Aug 2024 07:00:48 +0000
asID: 139976
IP address blocks: 103.147.254.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 23:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8e:57:d4:c0:d7:b3:f5:14:ba:10:38:7b:88:75:e0:67:b8:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D
Validity
Not Before: Sep 1 06:55:48 2023 GMT
Not After : Aug 30 07:00:48 2024 GMT
Subject: CN=56D17C3B6467F6C395A3AA4D785CB0CB332EE983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:ef:46:27:2c:c6:2c:71:7b:4c:1d:f5:87:
15:69:b5:c2:4c:3c:b0:27:1e:ad:d5:22:47:2a:9c:
85:95:ca:b0:9d:2a:c8:d6:12:79:fc:eb:cd:d4:6b:
84:bd:b5:96:bf:c2:88:1d:dd:5c:61:c5:69:40:ae:
9d:5e:b8:23:e8:4b:fd:61:09:00:77:28:89:0d:1b:
84:bb:03:ab:55:21:01:20:7a:14:dc:2e:dd:54:75:
53:9e:7a:78:0a:99:b5:6f:0f:f2:91:29:29:88:dd:
99:fb:ed:8b:11:f7:d3:e3:20:5f:4b:7b:2f:bc:fb:
f9:6d:03:7d:0f:33:a7:18:38:6b:e4:43:bc:d0:3d:
cf:c1:f0:86:ab:75:bc:44:93:34:3e:e4:ab:cd:53:
ec:e2:86:e6:2a:50:26:f2:ba:08:f7:d8:50:2d:e5:
ab:13:4f:d2:74:52:f6:5a:c6:42:87:15:00:03:d8:
70:f4:89:30:59:9e:7d:17:4a:49:7d:60:57:37:6f:
41:72:97:8d:60:ec:1f:de:11:4d:ad:d7:a0:d6:77:
bf:44:03:8d:67:7c:12:57:36:ad:d9:cf:00:a7:7b:
f7:2c:ba:07:02:ef:60:49:b4:b0:b7:a8:3e:87:7f:
e9:6a:a9:b0:e3:b6:0c:44:ad:de:f8:b5:07:75:09:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D1:7C:3B:64:67:F6:C3:95:A3:AA:4D:78:5C:B0:CB:33:2E:E9:83
X509v3 Authority Key Identifier:
keyid:A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/3130332e3134372e3235342e302f32332d3234203d3e20313339393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.254.0/23
Signature Algorithm: sha256WithRSAEncryption
52:ab:0d:aa:11:28:d2:bd:42:df:fc:df:b8:da:7b:c6:f2:4d:
d3:d2:fc:b9:9f:c1:cf:db:ae:68:f9:1d:fd:a2:78:3b:f0:cc:
e3:bc:f6:0b:d3:1b:ee:09:c5:1f:56:ba:0b:6f:a2:df:67:42:
90:79:da:05:11:75:2b:48:0f:99:46:b0:0b:3e:7b:44:ac:00:
dc:66:b2:44:23:87:bc:d0:11:e9:04:bf:85:fd:64:d1:3a:64:
20:a9:85:3e:99:1e:1f:34:14:92:e6:6f:10:81:b6:b7:71:a2:
6e:de:ce:e1:81:a1:43:7b:ac:79:c2:19:74:8a:eb:8b:65:5e:
1c:1e:c2:b7:08:8e:85:fb:f7:06:f4:59:cc:71:f3:d9:4d:51:
7e:bc:6e:fb:ae:1c:93:d9:cc:0c:98:7e:2c:1e:4e:bb:10:98:
41:fa:3c:61:22:26:b7:41:d6:6a:fe:66:a9:fc:68:7c:03:51:
f7:21:2d:72:15:b7:1f:97:5e:82:62:31:f8:c9:3a:85:e9:2c:
43:98:02:2f:cb:a4:00:db:eb:95:98:ce:4f:26:cf:d8:6b:86:
93:a4:51:4f:7f:2c:76:90:28:88:3e:9d:a4:2d:e3:d7:22:f8:
7f:59:ea:02:99:b0:d6:b0:65:a1:ea:16:55:01:5b:24:9c:82:
f8:d5:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org