Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313430343730.roa
File: 3130332e34312e3234382e302f32342d3234203d3e20313430343730.roa (raw, json)
Hash identifier: G9za+i5ivmJHJm9u2ru5tmG4NMstXChwalwpOc0xchU=
Subject key identifier: D0:97:4E:DF:16:B8:44:A4:25:79:16:16:79:03:C2:5C:F9:18:E1:01
Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Certificate serial: 5F7BD17847EF9B8BBEF1F478AC0CE6887A773A78
Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313430343730.roa
Signing time: Mon 28 Oct 2024 06:32:58 +0000
ROA not before: Mon 28 Oct 2024 06:27:58 +0000
ROA not after: Mon 27 Oct 2025 06:32:58 +0000
asID: 140470
IP address blocks: 103.41.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 15:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7b:d1:78:47:ef:9b:8b:be:f1:f4:78:ac:0c:e6:88:7a:77:3a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA
Validity
Not Before: Oct 28 06:27:58 2024 GMT
Not After : Oct 27 06:32:58 2025 GMT
Subject: CN=D0974EDF16B844A4257916167903C25CF918E101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:fd:b0:db:4d:95:e0:ce:23:9a:53:21:ce:
2d:51:7f:89:88:83:9a:80:46:7c:48:7e:2e:39:52:
e9:a5:39:97:40:5f:dc:95:de:4b:62:8e:b2:84:f1:
2a:a8:a1:ac:2f:18:7c:50:5d:68:e5:d3:1a:42:29:
ca:26:00:d6:e0:97:1d:fd:55:5b:5c:17:d9:a5:93:
f7:7d:b0:3b:a8:c3:a2:03:02:3e:b1:d0:15:e4:a5:
d5:12:a8:7a:b6:41:60:ae:f4:d0:d7:ba:45:c7:ed:
c0:64:0e:d2:9b:e9:99:2e:d6:3f:61:40:fd:a5:3a:
97:50:1e:21:70:36:df:1d:48:83:42:f7:e0:4c:fe:
af:39:28:c2:a6:75:e3:1a:f1:59:f7:0f:b7:bf:70:
31:61:76:aa:26:6e:68:50:18:3b:cf:80:49:d9:65:
cf:bb:71:9f:c5:bf:12:6d:e1:e1:59:b3:1b:36:4e:
0a:4d:47:0f:60:3d:ba:ea:7d:f1:b3:0b:84:8e:91:
af:ea:b8:46:85:50:39:00:10:06:64:fa:a7:d3:fd:
06:f6:5e:01:db:9b:3d:82:0b:4f:85:de:95:09:e5:
4c:b4:41:ca:ff:57:6a:8e:9c:ad:18:48:80:60:94:
da:48:66:45:22:5f:52:0c:81:32:7f:f1:7d:45:2b:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:4E:DF:16:B8:44:A4:25:79:16:16:79:03:C2:5C:F9:18:E1:01
X509v3 Authority Key Identifier:
keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234382e302f32342d3234203d3e20313430343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:70:18:53:29:d9:97:8c:44:bd:eb:96:3c:77:51:a1:85:36:
14:11:81:3f:cf:85:47:63:df:f8:5e:01:56:60:39:90:fd:d1:
dc:b3:07:15:af:71:74:db:31:46:9b:91:22:23:43:5b:8c:89:
26:b7:31:08:8a:06:b8:85:ad:3f:52:4f:49:da:46:18:da:88:
ee:45:82:37:7e:7b:15:ee:80:0c:bc:ae:9f:d7:5b:53:99:c9:
14:84:01:2a:88:8d:bd:b3:d8:6f:89:7f:a9:21:9c:86:ff:63:
cb:08:1b:41:87:08:c2:c3:a2:f4:9a:12:29:1d:06:ef:c4:85:
c1:2b:61:97:2f:52:a1:12:b5:af:90:4f:36:c2:e6:3b:85:d7:
b0:51:67:50:0c:89:59:aa:5a:83:42:eb:af:47:95:08:e5:d2:
67:1c:65:fa:fd:75:03:29:cf:b2:f8:07:ef:0f:b8:9e:45:8e:
d5:86:9a:58:1f:0a:8c:30:01:e1:47:b1:99:95:5f:94:d9:0e:
ab:88:78:24:67:89:45:64:56:cf:b3:2f:2e:68:1d:24:d9:7e:
00:6c:f4:2b:fe:d1:7f:de:a6:c7:0c:66:1a:e3:2b:0e:7c:76:
9b:2c:76:9f:f5:bd:e7:63:30:73:dd:ca:17:9f:71:d6:c6:af:
cb:1b:80:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:43:32 2024 by rpki-client on console-ams.rpki-client.org