Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32342d3234203d3e203137393935.roa
File: 3130332e3137302e3233362e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier: AKEpzjdNj+dOiFN/rfhLcG2Y8rrTxu4Hm3+eeoB3mL4=
Subject key identifier: 24:52:5C:FD:24:8F:7C:62:D0:BB:C6:B2:73:A6:96:87:1A:2F:91:C3
Certificate issuer: /CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Certificate serial: 493E137CA51D3D585A8F677C139C7ABC250ED86A
Authority key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32342d3234203d3e203137393935.roa
Signing time: Thu 08 Jun 2023 07:01:59 +0000
ROA not before: Thu 08 Jun 2023 06:56:59 +0000
ROA not after: Thu 06 Jun 2024 07:01:59 +0000
asID: 17995
IP address blocks: 103.170.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 06:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:3e:13:7c:a5:1d:3d:58:5a:8f:67:7c:13:9c:7a:bc:25:0e:d8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03
Validity
Not Before: Jun 8 06:56:59 2023 GMT
Not After : Jun 6 07:01:59 2024 GMT
Subject: CN=24525CFD248F7C62D0BBC6B273A696871A2F91C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:16:e7:ad:63:dc:44:b0:23:69:e1:ce:28:fe:
0d:f3:e1:d3:16:21:1a:7c:e7:29:ad:8d:7c:26:dd:
d7:68:0d:e7:c4:9e:92:dd:2c:f8:69:61:ce:13:b1:
bc:fb:9d:4d:e6:9a:1f:86:7b:e8:e7:e1:fb:30:73:
24:b2:e8:4c:9d:a2:65:0f:45:6c:45:49:0e:54:cc:
f0:68:80:40:6a:5a:fe:91:06:4d:c0:9e:41:2b:63:
bc:7b:a4:b2:38:11:d2:8c:2c:8d:26:db:ff:1e:45:
92:21:8b:ea:c4:76:80:ad:0d:f5:c9:84:c6:90:b9:
d7:2f:3f:d4:91:8e:0e:4e:8f:10:0f:e3:30:d0:33:
39:4c:bf:e2:66:76:e7:9b:46:54:f8:34:bf:e3:35:
fc:eb:c0:bd:be:9e:8a:fc:16:93:75:08:7d:0e:1b:
6e:83:b9:d2:ec:a1:9a:c8:f4:a8:f6:fc:43:b9:49:
1a:ca:8e:fb:3e:a5:24:29:6a:fc:18:42:df:b3:dd:
50:91:32:1c:5f:be:26:a0:8f:1d:c8:3f:51:55:90:
19:68:cd:af:13:30:a4:21:dc:e6:74:0c:02:15:48:
71:b7:75:28:de:b8:00:d4:a1:81:52:48:74:cc:74:
ff:19:ac:18:76:ed:9a:b4:d6:28:6e:f7:08:72:95:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:52:5C:FD:24:8F:7C:62:D0:BB:C6:B2:73:A6:96:87:1A:2F:91:C3
X509v3 Authority Key Identifier:
keyid:9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32342d3234203d3e203137393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.170.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b3:c0:33:67:b1:5c:a4:07:b9:fb:61:6c:67:18:4b:8c:21:
77:db:a6:51:5e:09:65:7a:9a:a2:bb:d3:35:aa:63:8f:fe:57:
65:77:41:b2:16:02:f3:ac:f8:6a:71:55:ea:2d:00:0a:92:9c:
92:ad:b1:6c:6d:5d:9b:48:f9:5b:79:30:20:4a:43:5b:d4:c0:
d5:f7:9b:f5:8a:b7:fd:a6:d2:89:41:4e:fd:4c:0c:ab:58:e2:
4e:27:9b:67:0b:03:91:0b:c1:41:ed:b8:69:8e:5d:66:77:e2:
0d:b7:09:c7:3f:77:74:42:8c:5e:d4:b7:0d:3d:89:62:b5:9b:
cd:3a:e9:d6:97:24:14:1e:48:9d:35:fe:d2:96:3f:85:5d:eb:
99:e9:6c:44:82:ed:d1:2c:c9:34:ec:93:f1:ec:dd:b3:d1:f0:
d7:ba:11:00:1f:a3:68:69:dc:a8:e6:0c:3b:c6:8a:d8:2f:64:
57:e5:a1:b8:cf:96:f7:a4:02:9a:98:60:23:b1:2d:87:0a:38:
c7:86:c9:28:db:80:e6:04:d2:00:7e:93:ac:15:d1:ab:37:f9:
ea:e3:29:fa:f3:75:1c:73:6d:98:fd:15:b7:4a:93:7b:e6:6b:
d6:26:f6:80:99:28:42:c1:ff:0a:de:b2:60:1e:cd:f2:ad:47:
67:be:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org