Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234312e302f32342d3234203d3e203435333035.roa
File: 3130332e3137352e3234312e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier: 5qSA/YgY3tEGz0yEI5xj0YpzsS/sawktk+hlWu1Exdk=
Subject key identifier: D9:66:77:90:78:A8:D9:6C:10:D7:4A:19:DB:74:CD:F5:07:DA:4C:BC
Certificate issuer: /CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Certificate serial: 2EC9D4FEA13BAFC1DF8A56514DC30A594C61C590
Authority key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234312e302f32342d3234203d3e203435333035.roa
Signing time: Tue 31 Oct 2023 03:22:00 +0000
ROA not before: Tue 31 Oct 2023 03:17:00 +0000
ROA not after: Tue 29 Oct 2024 03:22:00 +0000
asID: 45305
IP address blocks: 103.175.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 18:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:c9:d4:fe:a1:3b:af:c1:df:8a:56:51:4d:c3:0a:59:4c:61:c5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B
Validity
Not Before: Oct 31 03:17:00 2023 GMT
Not After : Oct 29 03:22:00 2024 GMT
Subject: CN=D966779078A8D96C10D74A19DB74CDF507DA4CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:af:44:6f:df:30:6f:df:eb:5c:0d:67:e5:
19:51:41:37:58:69:73:1c:8b:d2:89:89:a7:27:b7:
de:d0:ea:fa:40:78:bb:64:95:f9:05:86:6d:8f:3d:
30:e2:4a:78:9c:f9:14:c6:1b:75:69:ee:7e:e3:4f:
61:84:f7:b0:ac:0c:92:94:30:c1:3c:0c:63:c7:70:
de:3d:a8:d9:5a:38:c3:fc:79:17:a1:7d:4a:52:e9:
fb:49:2e:5c:39:4d:b5:99:26:82:f2:5f:1d:70:69:
e7:e7:f5:67:4f:fd:6a:73:ef:cc:a0:65:3b:cf:bd:
e0:96:40:c5:40:7e:67:ae:d5:b8:7a:61:43:de:a1:
80:25:fe:f0:d3:eb:aa:57:78:57:ec:1b:bf:2d:0e:
32:4c:2c:ee:b5:01:56:0b:6b:8d:4b:48:51:46:08:
69:1c:ec:2b:cb:93:60:b2:30:32:68:95:d4:37:81:
db:da:16:fd:c7:53:ab:eb:6a:2f:33:85:62:c9:20:
b1:47:ec:a6:31:10:1b:20:81:d3:a8:60:a9:ad:6d:
78:b0:71:5c:b2:df:fc:3e:fb:1f:c7:59:4c:ec:5b:
a9:86:e1:6e:ae:d8:59:37:44:48:ba:88:a6:db:82:
05:45:65:3c:11:38:d0:52:00:13:3a:59:63:74:44:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:77:90:78:A8:D9:6C:10:D7:4A:19:DB:74:CD:F5:07:DA:4C:BC
X509v3 Authority Key Identifier:
keyid:A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/3130332e3137352e3234312e302f32342d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.175.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b3:73:34:0e:1b:a0:d4:f2:5f:70:16:4e:1d:a8:e2:8b:2b:
e8:a0:84:53:e4:69:7f:95:0d:49:a2:4b:bc:37:fa:26:53:bb:
5e:c1:a4:ef:c4:9c:ba:1e:90:73:ef:8a:da:e9:ce:22:5d:58:
31:f9:e6:ba:14:dd:a2:d7:39:4c:a1:8b:8d:f0:a4:44:63:17:
3d:07:05:30:79:59:41:e0:8d:a3:05:73:08:52:4c:50:9d:4a:
d0:bb:32:42:24:7b:71:a7:da:ac:72:33:93:d7:17:12:af:39:
85:ae:a1:af:7b:30:4d:50:44:38:0e:5b:51:08:96:5c:46:e6:
dd:42:85:32:ab:a3:31:8e:48:fe:79:33:ce:95:03:4b:62:30:
76:86:ec:48:ca:da:fd:7d:3d:48:7f:56:88:26:ca:12:a3:7d:
05:be:0a:bd:8d:6a:b7:0f:57:7d:b1:e4:9b:85:82:4e:87:f5:
89:8c:c1:8a:e2:44:05:a2:1e:9d:c8:a8:2f:c3:90:fa:44:ae:
be:c6:07:d5:ae:d4:a0:43:87:f3:7c:c5:96:86:41:58:e5:3a:
8f:cf:0f:b1:a6:29:f7:01:bf:d7:81:d5:8e:24:4d:56:18:4e:
64:ad:3b:20:1f:3a:7e:85:28:a0:05:2a:05:2f:58:56:74:de:
b6:f8:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org