Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33332e302f32342d3234203d3e20313338383131.roa
File: 3130332e3133372e33332e302f32342d3234203d3e20313338383131.roa (raw, json)
Hash identifier: +UmWGbaEwLXQykqon5yy64ZD1xo2PXKRptY8dHEwQP0=
Subject key identifier: 3E:9B:EF:EE:DF:BD:00:8A:BB:40:B8:8A:AA:1A:48:BD:F6:2D:FF:99
Certificate issuer: /CN=7ED240749DF73AB541823D94017C578425D757A6
Certificate serial: 04FB30096346A1392EC981F0ED929830D00C33CA
Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33332e302f32342d3234203d3e20313338383131.roa
Signing time: Wed 22 May 2024 02:52:31 +0000
ROA not before: Wed 22 May 2024 02:47:31 +0000
ROA not after: Wed 21 May 2025 02:52:31 +0000
asID: 138811
IP address blocks: 103.137.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 23:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:fb:30:09:63:46:a1:39:2e:c9:81:f0:ed:92:98:30:d0:0c:33:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6
Validity
Not Before: May 22 02:47:31 2024 GMT
Not After : May 21 02:52:31 2025 GMT
Subject: CN=3E9BEFEEDFBD008ABB40B88AAA1A48BDF62DFF99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:55:72:3b:a3:1d:a3:8b:9c:6c:d4:33:81:
6e:20:d9:49:22:63:ba:f6:df:13:15:f6:96:98:b2:
5b:a8:a4:b2:33:d2:5c:4d:1d:52:b6:d8:84:76:89:
c8:6a:76:11:aa:bc:a2:01:1b:42:a0:0c:e2:4f:af:
c9:29:98:b0:26:44:f1:a1:41:e9:eb:67:f6:a9:e9:
49:a9:61:d5:d2:24:70:70:26:0a:ae:f8:53:2e:e0:
21:0d:74:00:d8:9c:f2:2f:32:3b:16:f2:2a:bd:7a:
4d:eb:ce:a2:8d:84:f4:ce:18:e4:6f:8e:26:80:5f:
a4:76:28:1b:2e:1b:98:c7:7f:5a:fb:85:6e:c3:64:
ba:92:80:47:b7:d2:80:fb:0f:5b:3f:36:57:fd:e3:
7a:b6:99:8a:60:9a:98:6a:73:70:cc:69:bc:c3:7f:
2f:7c:71:dc:ce:bb:d0:2f:be:54:f9:3a:6e:28:6d:
be:6f:27:c2:17:f9:22:03:4f:34:23:43:4f:c3:8a:
0e:6d:d0:5e:f4:b0:81:96:c9:10:40:ff:35:df:d4:
d1:be:e8:7f:5e:e8:fb:1f:97:2a:6b:cb:18:2a:31:
61:79:9c:33:4b:79:a0:ef:db:75:39:98:e0:00:cf:
9d:54:5a:6c:1a:ee:d9:66:13:ae:f8:ee:5a:9d:c6:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9B:EF:EE:DF:BD:00:8A:BB:40:B8:8A:AA:1A:48:BD:F6:2D:FF:99
X509v3 Authority Key Identifier:
keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33332e302f32342d3234203d3e20313338383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.137.33.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cc:1c:8b:55:3b:04:16:32:fa:11:73:40:dc:35:72:48:5b:
60:05:af:57:89:ea:76:48:74:bb:7d:c3:d3:fb:c8:cc:48:0b:
5c:bb:31:61:7c:3b:27:dc:be:27:9f:9a:0d:73:a7:a9:db:bc:
e6:21:c5:d8:b8:33:97:8b:ac:bd:3d:02:76:d9:27:37:aa:b1:
00:f1:ba:da:fa:a3:fc:3a:f4:a9:ad:fd:5c:af:bc:f9:cc:dd:
0d:74:e3:5e:f9:60:f3:50:67:5d:2e:3b:79:f9:18:63:0d:2e:
30:87:32:25:4b:41:55:3e:c5:52:c4:2f:f9:3d:08:82:2f:1b:
31:fe:d7:aa:c6:55:2a:e4:54:fc:a0:14:a9:fa:37:6a:71:15:
cc:c5:f5:65:1c:c7:82:e7:08:c4:9b:5f:25:20:cf:b2:bc:74:
04:e3:fa:c7:fe:c4:0c:40:eb:ad:da:33:09:e4:d6:b1:2f:bb:
0b:02:9a:11:79:ff:04:7e:4e:d3:a6:d3:18:01:65:a4:06:42:
4e:2f:62:8e:18:45:96:e9:7f:ea:08:71:1d:e6:d3:bd:a5:4c:
1b:f6:f2:6d:ad:55:92:47:6b:49:bc:0d:93:cc:6f:89:63:7a:
b7:a9:b6:bb:5b:96:98:07:bb:8f:a1:f4:87:01:9b:dd:a2:c0:
9e:e5:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org