Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31332e302f32342d3234203d3e20313531303030.roa
File: 3130332e3138342e31332e302f32342d3234203d3e20313531303030.roa (raw, json)
Hash identifier: S6LAs3qjuPyYGhDWzNkZ+GPGnNNDAkv0QOi2d245G0U=
Subject key identifier: 14:C1:D2:07:54:AC:09:4B:54:DD:A7:EF:FC:A4:9D:4A:FD:40:BF:B1
Certificate issuer: /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC
Certificate serial: 2E07F4FAFB712B88EBA1724020C1114BA3002B58
Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31332e302f32342d3234203d3e20313531303030.roa
Signing time: Wed 10 Jan 2024 04:14:23 +0000
ROA not before: Wed 10 Jan 2024 04:09:23 +0000
ROA not after: Wed 08 Jan 2025 04:14:23 +0000
asID: 151000
IP address blocks: 103.184.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 07:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:07:f4:fa:fb:71:2b:88:eb:a1:72:40:20:c1:11:4b:a3:00:2b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC
Validity
Not Before: Jan 10 04:09:23 2024 GMT
Not After : Jan 8 04:14:23 2025 GMT
Subject: CN=14C1D20754AC094B54DDA7EFFCA49D4AFD40BFB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:16:40:35:f6:89:00:e8:3f:ff:e2:08:03:8f:
72:da:90:c9:e1:e4:c5:43:85:7e:10:bf:ee:e3:83:
cf:6c:e3:6c:b6:a0:61:e5:d9:7d:ff:98:46:b2:81:
4c:c5:4a:4e:df:c6:7a:8f:d3:49:05:44:fa:62:47:
3c:40:47:bf:ce:07:62:0f:f7:e4:46:a4:fe:29:55:
51:cf:ce:4c:15:de:29:dc:7e:70:78:bd:d9:fa:20:
03:89:ad:d0:6d:a3:b2:41:b1:47:e1:52:ff:94:70:
a1:c5:9d:d6:c0:ca:6a:98:07:d0:77:63:a7:49:b8:
67:bc:de:24:db:ee:88:2a:2e:40:36:3c:40:bf:63:
ca:94:ca:fc:07:f2:3a:c4:d3:b8:22:79:8a:00:b6:
5a:1f:28:05:a7:40:d7:ea:7a:fc:f5:61:2f:36:64:
c6:c3:ef:97:28:ca:61:51:45:ff:a2:4b:30:5f:b0:
5b:32:fd:ca:38:89:2a:7e:35:98:04:bc:e9:16:66:
ca:e3:a3:1c:88:f6:11:16:f7:52:5f:27:cd:0c:4d:
3a:43:b9:6e:e5:1a:18:1c:7c:fd:04:6c:a4:6d:31:
e7:00:7e:d7:57:c6:75:1a:a6:b5:cc:b7:0a:b4:dc:
0e:21:08:c4:c3:a1:a0:b6:35:d0:ff:1b:0b:a3:8f:
62:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:D2:07:54:AC:09:4B:54:DD:A7:EF:FC:A4:9D:4A:FD:40:BF:B1
X509v3 Authority Key Identifier:
keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31332e302f32342d3234203d3e20313531303030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.184.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c6:5d:04:0e:c9:89:ce:c0:9e:08:ee:d1:75:b2:47:29:f1:
cf:47:a3:e1:27:fe:9f:f7:d2:d7:e1:b8:2b:ed:65:47:98:3a:
81:52:c7:3b:3e:05:09:b1:7e:18:9f:1c:70:4d:4e:9a:83:f1:
46:14:e5:16:f0:f9:b4:bd:33:bd:60:a6:99:80:82:2c:d7:dc:
53:52:14:59:81:15:10:8a:c2:f7:49:2e:42:24:b1:b1:41:0d:
22:2d:f1:b4:70:be:1c:69:b3:c4:60:62:b3:90:b4:ca:bc:2e:
5e:24:ac:7c:30:02:1e:b5:40:f1:a9:ae:6f:2f:1e:61:37:bb:
8b:02:73:7d:bb:46:7c:e3:6a:20:79:ba:51:96:d4:72:f4:66:
d7:25:3a:04:df:c8:42:08:59:d6:86:64:b6:04:d1:72:8b:c5:
77:c3:94:d6:04:73:e6:ea:8f:1e:a2:97:41:28:95:6d:32:aa:
3c:dd:f2:33:5b:1d:84:f8:65:05:27:f6:32:45:be:13:c9:e9:
5e:aa:d9:a8:0b:c2:58:1b:85:52:b5:4d:ef:c4:53:77:f0:4b:
fb:ee:0a:7e:95:f8:6f:b1:a2:44:5f:b9:06:aa:7e:bd:10:76:
97:5d:8c:48:a8:82:ee:ce:e3:60:b6:e3:87:49:7b:27:b4:5c:
21:e0:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org