Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3234203d3e20313430343730.roa
File: 3130332e34312e3234382e302f32332d3234203d3e20313430343730.roa (raw, json)
Hash identifier: uHtdnN39FsXtGDfBgMHwPn9gq6lahuo4QW1pIC5DWAs=
Subject key identifier: 74:BA:5D:16:E5:19:3E:DC:3C:AC:D6:F1:9C:1D:74:15:17:67:F7:2E
Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial: 4D99B62F7AF1921DDDF0A877B8AA26B5A689BD56
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3234203d3e20313430343730.roa
Signing time: Mon 28 Oct 2024 06:32:04 +0000
ROA not before: Mon 28 Oct 2024 06:27:04 +0000
ROA not after: Mon 27 Oct 2025 06:32:04 +0000
asID: 140470
IP address blocks: 103.41.248.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 15:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:99:b6:2f:7a:f1:92:1d:dd:f0:a8:77:b8:aa:26:b5:a6:89:bd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Validity
Not Before: Oct 28 06:27:04 2024 GMT
Not After : Oct 27 06:32:04 2025 GMT
Subject: CN=74BA5D16E5193EDC3CACD6F19C1D74151767F72E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:37:29:50:f1:5c:b4:11:9b:d4:ed:d6:bb:68:
b6:48:ad:40:65:e8:8e:d2:a7:45:c5:a2:61:73:8d:
2d:47:6d:b1:98:e9:8e:5a:a7:17:93:46:b8:ac:09:
dd:0f:a5:d5:44:d4:71:84:2c:82:b4:2a:b0:b8:66:
83:b6:fb:62:22:db:8c:63:37:4d:b9:d8:1d:6f:21:
d1:15:81:c3:66:23:3c:97:0f:d1:d7:f6:e7:a5:d2:
68:e0:10:dc:58:83:44:1f:5c:ce:b1:42:d7:e6:b4:
bf:90:1c:67:03:58:5e:14:fb:fd:07:19:44:0a:8f:
d0:9e:cb:07:18:05:22:60:c9:84:a2:d0:d0:9c:a6:
c5:22:20:17:58:67:b3:46:9d:01:6e:90:62:bb:80:
0a:21:4f:07:80:0a:b9:6b:dc:21:0c:07:b4:a8:06:
c2:f6:ce:72:62:8a:46:d9:7d:c9:a4:85:7c:29:7b:
e6:8f:f4:db:69:15:d8:23:36:f1:95:3c:09:c6:e8:
68:c7:ae:99:38:d6:f8:39:fd:96:bd:54:ec:6c:bd:
72:d8:39:d1:3d:23:e7:09:f5:09:6f:ed:02:af:aa:
ed:82:50:9b:00:de:0c:49:dc:36:78:7c:6e:b7:d5:
7a:89:d7:6a:23:7d:5a:d5:f1:17:ee:10:ed:12:68:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:5D:16:E5:19:3E:DC:3C:AC:D6:F1:9C:1D:74:15:17:67:F7:2E
X509v3 Authority Key Identifier:
keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32332d3234203d3e20313430343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.248.0/23
Signature Algorithm: sha256WithRSAEncryption
01:e7:4b:68:ae:fb:68:c2:84:80:b0:5e:fd:99:13:d3:76:11:
f5:e5:39:a5:9a:0a:c5:17:d1:82:cd:49:29:84:bc:78:ff:6d:
ab:06:44:5b:c4:ac:53:3a:8c:f9:95:5a:e8:db:82:3d:9a:c8:
c5:c0:4f:b5:9c:28:ab:8a:0b:40:47:68:74:0d:09:9e:42:02:
75:5a:27:63:1c:6a:ec:a2:ef:7a:2e:0e:57:d7:23:f4:0e:6e:
40:7d:c0:b7:44:cf:5d:b4:4e:39:68:72:2d:62:f0:4b:b8:5f:
9e:c5:e4:da:1f:7e:91:50:94:64:59:e3:d2:de:d0:6f:83:64:
61:fe:3e:a6:36:fd:bb:4f:4a:2f:e1:f1:21:2a:1d:1d:91:a9:
43:19:2e:9c:a7:7f:28:d9:ac:ab:43:a9:0a:ae:1b:84:e2:4e:
bc:e3:c1:38:1a:8a:ff:2c:25:37:4a:26:93:df:90:bd:7b:11:
69:7d:68:95:72:2d:ce:f4:15:c2:72:90:b6:76:e9:87:f4:d6:
2d:0e:a7:38:2b:23:4c:e0:c8:09:33:67:d7:25:7b:b3:d3:f6:
55:53:be:f9:41:f7:54:49:ec:46:ad:45:94:94:03:36:ad:60:
87:ce:e9:f1:72:a3:93:02:13:24:78:e9:b8:d6:f6:a2:42:7e:
d6:38:da:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:32:27 2024 by rpki-client on console-fra.rpki-client.org