Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e203438343635.roa
File: 3130332e3137332e3133332e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: VONDB0sjMvNA9R0KzuDTxHk2C5/253xi9WC/ikSH9oo=
Subject key identifier: 95:4E:A5:97:67:D6:DC:69:E6:30:C7:DD:85:0E:E3:2A:57:83:DE:9B
Certificate issuer: /CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
Certificate serial: 07E4E3793B2E60E228F4325B71FF51EC49990032
Authority key identifier: 26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e203438343635.roa
Signing time: Mon 15 Jul 2024 02:58:37 +0000
ROA not before: Mon 15 Jul 2024 02:53:37 +0000
ROA not after: Mon 14 Jul 2025 02:58:37 +0000
asID: 48465
IP address blocks: 103.173.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 05:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:e4:e3:79:3b:2e:60:e2:28:f4:32:5b:71:ff:51:ec:49:99:00:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
Validity
Not Before: Jul 15 02:53:37 2024 GMT
Not After : Jul 14 02:58:37 2025 GMT
Subject: CN=954EA59767D6DC69E630C7DD850EE32A5783DE9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:e2:d1:77:72:a9:ff:35:01:00:56:a6:fd:
74:03:43:84:cb:74:5b:d7:07:a8:5f:0b:e7:d0:01:
b6:0e:e1:f5:2f:f2:61:a6:f5:b9:1f:c1:eb:51:b7:
98:e5:89:71:fe:87:64:37:5d:01:72:fc:51:d9:37:
02:8f:86:ca:9f:d2:d3:b9:3d:2e:6e:e3:02:e2:b9:
19:74:9f:2b:14:28:1e:07:e0:76:c9:2c:dd:e4:6a:
ec:10:0e:ce:49:ae:b3:44:ba:bf:30:8c:b8:13:d2:
f3:77:81:96:3d:24:9a:90:62:4c:aa:6e:b5:2c:ea:
9b:5a:21:50:91:82:e6:d1:51:c1:f2:7a:2c:52:4b:
03:d9:85:a5:4a:8c:e1:2d:ad:48:5f:d7:2e:47:90:
ea:c8:58:ec:21:85:91:74:ab:60:ef:43:69:b5:d8:
a3:b7:26:02:75:1a:0c:0a:f3:e2:e3:c4:10:5a:b7:
ad:95:9f:f8:c9:c1:d7:4b:d7:38:4e:2f:44:3a:c8:
e6:e2:80:e8:00:71:d6:5a:95:86:4f:6e:f3:72:73:
5a:fb:75:b3:90:22:b6:2d:46:f9:dc:50:bb:3d:cb:
7a:83:65:0d:8c:be:e1:3b:68:7f:49:11:ad:b5:74:
d2:47:54:0f:0f:4e:b0:a4:60:4c:ab:a6:21:28:a1:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4E:A5:97:67:D6:DC:69:E6:30:C7:DD:85:0E:E3:2A:57:83:DE:9B
X509v3 Authority Key Identifier:
keyid:26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.133.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:05:d0:6c:18:f0:7c:ec:73:d7:81:b0:e9:1f:4d:e3:3a:b0:
27:51:a1:fa:34:3a:a3:53:f1:46:79:bb:53:0e:7b:84:47:7b:
cd:96:44:ce:e4:e2:27:2f:e6:38:2b:25:fd:52:10:3c:24:7a:
e9:eb:2e:89:ab:43:60:6d:05:5b:4c:ed:14:1b:5a:dc:05:fb:
17:11:70:1d:0c:30:a1:50:9e:98:9a:8a:0e:13:b6:f3:2c:85:
f9:35:e3:b1:0b:73:c7:90:b7:e2:ee:b3:d6:5f:98:6e:4b:06:
4d:a3:0d:9f:19:48:68:98:c6:4e:07:88:90:1f:94:0f:ad:cf:
aa:4a:42:ed:1a:3f:7f:97:84:bf:75:59:a6:14:09:3b:da:49:
88:a6:c8:0a:3d:81:30:97:04:0f:1d:86:90:78:07:45:97:ad:
11:23:67:5b:9e:78:b7:ff:f7:97:a6:db:88:2f:2b:ea:81:0a:
73:a6:1c:64:78:ab:eb:1e:ea:cd:7c:a9:9f:54:43:0a:27:14:
76:cb:8f:56:e0:53:0c:cc:00:4b:5f:17:97:79:7e:04:52:15:
61:e9:2d:ae:6f:72:1c:30:a7:8c:ee:41:bc:58:34:c8:a8:36:
8a:f6:13:58:e5:a3:45:37:20:f6:c6:22:7e:14:66:e0:43:5f:
fe:2d:d6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:56 2025 by rpki-client