Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa
File: 3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier: 37IFNx6QFiiQ3UaCRoGQWLmf3ozrB7oY/peD1j0kpCQ=
Subject key identifier: 2F:A9:E1:D7:B2:9E:45:73:BD:35:4C:69:ED:8C:99:06:E9:D3:27:A5
Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Certificate serial: 1FA4CC5FFB37F849012A3AB1850F9413659D7807
Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa
Signing time: Tue 31 Oct 2023 03:21:08 +0000
ROA not before: Tue 31 Oct 2023 03:16:08 +0000
ROA not after: Tue 29 Oct 2024 03:21:08 +0000
asID: 45305
IP address blocks: 103.175.240.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 18:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a4:cc:5f:fb:37:f8:49:01:2a:3a:b1:85:0f:94:13:65:9d:78:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Validity
Not Before: Oct 31 03:16:08 2023 GMT
Not After : Oct 29 03:21:08 2024 GMT
Subject: CN=2FA9E1D7B29E4573BD354C69ED8C9906E9D327A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:46:85:62:17:cc:17:86:e9:9d:14:da:d4:af:
b3:9b:dd:6c:43:e5:c8:64:7c:b1:87:02:87:fb:e3:
73:ce:af:48:12:79:75:27:a6:f8:65:a4:77:5b:51:
04:79:2c:ea:59:08:33:f2:62:55:9e:2d:46:40:f1:
c2:c1:7d:20:a0:a5:ab:fa:96:11:46:fb:5d:3c:96:
27:1c:8f:47:b2:8d:c7:ae:6b:a1:53:90:d8:6d:a4:
95:c4:05:22:1b:25:61:10:3d:1c:83:5a:15:9d:a4:
f4:10:a8:1c:b4:a6:1b:38:98:68:fe:ef:e2:01:eb:
db:fa:e0:15:2b:4b:e4:96:a0:47:e6:ef:0a:f9:2e:
5d:ff:c8:30:24:88:78:0c:88:26:8d:61:71:70:e9:
a6:a3:ff:45:37:bd:d3:af:47:ac:23:96:35:40:6d:
13:8c:78:4f:4f:76:bd:af:60:21:8d:24:db:83:59:
a4:64:8b:e3:36:e7:aa:63:a0:b2:1d:52:15:90:d4:
14:18:82:52:bc:10:59:9f:93:fd:24:b2:bb:73:a2:
67:62:74:18:92:4a:a3:1c:e8:cf:88:a0:1f:e9:26:
32:e2:bc:00:74:ff:a8:6d:3f:d1:d7:58:16:0a:b5:
27:80:76:50:d2:81:c9:b2:b6:61:8a:14:60:d4:95:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A9:E1:D7:B2:9E:45:73:BD:35:4C:69:ED:8C:99:06:E9:D3:27:A5
X509v3 Authority Key Identifier:
keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234302e302f32332d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.240.0/23
Signature Algorithm: sha256WithRSAEncryption
05:39:cf:b6:a0:b2:21:ae:a4:d5:f6:73:08:30:c7:a3:db:2f:
18:46:9e:f2:61:3f:18:80:83:db:5e:03:17:98:74:8f:77:d4:
48:18:ec:e7:9e:e7:4c:5c:dd:61:d1:e1:f8:88:3c:e9:cb:58:
68:ba:ce:39:b8:45:5c:36:ef:d3:98:86:ab:3c:5e:75:0d:17:
d1:5d:39:5b:5b:58:f3:41:d0:b1:f8:5a:33:fb:c0:34:0b:a7:
36:20:bf:8f:b9:1a:e1:f1:28:d2:21:3d:e4:48:49:1d:dd:ba:
ce:b0:f9:dd:4f:b6:5f:8f:46:ae:a5:20:92:13:6e:29:5d:99:
2f:ba:93:85:2a:6a:ad:49:c2:a8:82:38:c4:c2:21:dc:37:22:
d1:65:e1:90:27:68:a4:05:66:81:b6:27:2e:fa:9e:35:9a:bc:
29:45:d1:48:89:bb:a7:e3:55:05:e4:43:8d:90:d9:6e:90:f0:
0e:a4:23:ec:ea:c5:3c:62:5a:78:b5:6e:b4:f0:ae:6c:4b:38:
29:04:f6:d1:29:7a:79:2e:1a:23:d0:26:ec:2e:8f:c8:3d:c2:
7d:fc:d0:fb:db:5e:aa:ad:97:ee:36:18:c8:9e:9f:4a:f4:42:
ae:d9:65:c3:81:22:39:f7:06:83:8e:cc:5d:52:85:cd:d1:54:
af:ff:b4:f0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUH6TMX/s3+EkBKjqxhQ+UE2WdeAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFB
QUJENTkxQjAeFw0yMzEwMzEwMzE2MDhaFw0yNDEwMjkwMzIxMDhaMDMxMTAvBgNV
BAMTKDJGQTlFMUQ3QjI5RTQ1NzNCRDM1NEM2OUVEOEM5OTA2RTlEMzI3QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQRoViF8wXhumdFNrUr7Ob3WxD
5chkfLGHAof743POr0gSeXUnpvhlpHdbUQR5LOpZCDPyYlWeLUZA8cLBfSCgpav6
lhFG+108liccj0eyjceua6FTkNhtpJXEBSIbJWEQPRyDWhWdpPQQqBy0phs4mGj+
7+IB69v64BUrS+SWoEfm7wr5Ll3/yDAkiHgMiCaNYXFw6aaj/0U3vdOvR6wjljVA
bROMeE9Pdr2vYCGNJNuDWaRki+M256pjoLIdUhWQ1BQYglK8EFmfk/0ksrtzomdi
dBiSSqMc6M+IoB/pJjLivAB0/6htP9HXWBYKtSeAdlDSgcmytmGKFGDUlR9JAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUL6nh17KeRXO9NUxp7YyZBunTJ6UwHwYDVR0j
BBgwFoAUqd2ValSWiboKPi/GIpE1Kqq9WRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMC9BOUREOTU2QTU0
OTY4OUJBMEEzRTJGQzYyMjkxMzUyQUFBQkQ1OTFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTlERDk1NkE1NDk2ODlCQTBBM0UyRkM2MjI5MTM1MkFBQUJE
NTkxQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYzFjNDljLWQ0MDQtNDVhMS05
ZTdkLTg2ZjVmODUyZTI3Ni8wLzMxMzAzMzJlMzEzNzM1MmUzMjM0MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6/wMA0GCSqG
SIb3DQEBCwUAA4IBAQAFOc+2oLIhrqTV9nMIMMej2y8YRp7yYT8YgIPbXgMXmHSP
d9RIGOznnudMXN1h0eH4iDzpy1hous45uEVcNu/TmIarPF51DRfRXTlbW1jzQdCx
+Foz+8A0C6c2IL+PuRrh8SjSIT3kSEkd3brOsPndT7Zfj0aupSCSE24pXZkvupOF
KmqtScKogjjEwiHcNyLRZeGQJ2ikBWaBticu+p41mrwpRdFIibun41UF5EONkNlu
kPAOpCPs6sU8Ylp4tW608K5sSzgpBPbRKXp5Lhoj0CbsLo/IPcJ9/ND7216qrZfu
NhjInp9K9EKu2WXDgSI59waDjsxdUoXN0VSv/7Tw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org