Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234302e302f32342d3234203d3e203435333035.roa
File: 3130332e3137352e3234302e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier: FrXdP7tmHQnIcH+K+fd8VFtW4h4s8WDI2wgzN0ZMDWA=
Subject key identifier: 28:B0:3F:22:97:75:16:F4:37:42:B8:79:01:F3:76:E1:88:97:EB:B7
Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Certificate serial: 2090E07AF68B5829B06558EB4138D6D2408F1982
Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234302e302f32342d3234203d3e203435333035.roa
Signing time: Tue 31 Oct 2023 03:21:29 +0000
ROA not before: Tue 31 Oct 2023 03:16:29 +0000
ROA not after: Tue 29 Oct 2024 03:21:29 +0000
asID: 45305
IP address blocks: 103.175.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 18:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:90:e0:7a:f6:8b:58:29:b0:65:58:eb:41:38:d6:d2:40:8f:19:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Validity
Not Before: Oct 31 03:16:29 2023 GMT
Not After : Oct 29 03:21:29 2024 GMT
Subject: CN=28B03F22977516F43742B87901F376E18897EBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:9e:12:b8:66:df:92:c2:f8:ed:de:e7:c7:
7b:76:0a:d7:99:82:8b:a6:c6:f3:21:6d:0a:2c:a6:
e2:4d:c8:4f:b5:e3:84:6e:e4:e2:44:8c:bd:ed:e4:
4e:ce:23:a0:c4:32:54:28:92:b0:59:2d:29:09:cd:
d4:03:09:63:33:94:08:c0:fc:66:31:7c:92:37:46:
90:ed:09:d7:bc:25:07:f5:d4:50:5c:5c:4b:55:40:
14:43:69:bc:2a:2b:0c:b7:16:41:a3:d0:39:cd:17:
44:fa:e5:fc:0f:1a:db:de:e7:58:e9:e8:e2:15:c0:
61:4e:d0:e4:ad:c4:cc:30:48:14:22:87:7b:97:27:
f3:d6:10:24:ea:14:33:06:d9:26:f9:b5:c7:4f:27:
2b:1a:fd:03:ed:6a:61:38:ef:74:d8:61:c2:0e:c0:
13:9b:9d:a4:22:63:77:cf:85:6c:8d:7c:5f:49:c6:
f6:6f:58:91:94:59:9a:48:fa:34:b3:6e:7e:5f:1d:
7c:65:43:fe:98:90:69:10:2c:db:55:93:e5:c4:47:
60:65:91:8a:91:95:cd:05:18:6a:d0:63:1b:c9:aa:
b7:73:d0:a9:53:49:d3:52:7c:85:f1:94:29:6b:59:
55:bf:d2:46:31:68:9c:19:2a:e2:f9:f3:8f:c1:ed:
09:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B0:3F:22:97:75:16:F4:37:42:B8:79:01:F3:76:E1:88:97:EB:B7
X509v3 Authority Key Identifier:
keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234302e302f32342d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.240.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6f:18:45:99:06:a8:4e:2c:6b:bf:d6:3e:ca:3d:31:f5:b8:
7f:f0:ec:5b:af:b1:e0:b0:06:7a:f0:0b:3b:9d:d5:e0:bb:2e:
1d:fb:88:f0:1c:45:e9:18:c4:1f:2c:af:8d:b5:d1:33:4a:60:
0a:6c:40:a8:b3:7a:ce:ed:4d:42:0c:be:7d:d0:0b:66:b2:e2:
c2:73:01:ef:bb:81:ac:e4:df:b7:6d:0c:f9:38:d5:b2:a6:8c:
7c:b5:03:68:44:1a:f0:12:69:9a:99:6b:dd:ee:65:71:48:dc:
f7:1e:90:1b:ea:33:48:01:50:f2:9b:37:be:e2:ae:5c:55:62:
70:1d:ee:6c:a8:38:c1:5e:4d:b1:b9:6a:a6:35:03:8a:7c:68:
69:19:f1:03:2f:71:ed:53:1b:ec:77:87:9b:8f:a6:2f:05:84:
5c:20:a7:ae:d3:6e:d5:6c:7e:1f:93:62:0a:27:db:b4:97:d7:
3d:bf:7c:3e:63:41:6b:17:ad:92:e3:c2:da:9b:9b:f0:d2:83:
fa:80:e1:8e:f4:d1:71:8e:50:b3:69:5f:c6:81:fa:28:da:78:
25:e3:56:22:c3:ac:d2:b6:29:b5:12:4e:e8:ef:65:7e:fa:30:
ad:6d:9c:9e:1a:08:07:43:c6:b1:3f:b6:b9:31:4c:3c:4c:a8:
b2:af:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org