Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS19905.roa
File: AS19905.roa (raw, json)
Hash identifier: KKJF0xVbd2gtezrgMCfCqgoF9ykcVKgENZDN34KKK8U=
Subject key identifier: DD:3B:13:7A:4E:29:72:3B:8B:E6:CB:A9:85:75:06:B8:C4:6C:60:45
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 5C3F9E76CEA50CF48A92D54AFE64F14A744806A5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS19905.roa
Signing time: Tue 26 Mar 2024 02:30:17 +0000
ROA not before: Tue 26 Mar 2024 02:25:17 +0000
ROA not after: Tue 25 Mar 2025 02:30:17 +0000
asID: 19905
IP address blocks: 103.67.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 05:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:3f:9e:76:ce:a5:0c:f4:8a:92:d5:4a:fe:64:f1:4a:74:48:06:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 26 02:25:17 2024 GMT
Not After : Mar 25 02:30:17 2025 GMT
Subject: CN=DD3B137A4E29723B8BE6CBA9857506B8C46C6045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:21:bd:75:c2:9d:8d:f1:cc:42:5a:c7:ec:
92:05:90:03:0d:16:8c:76:a2:1b:4e:9f:3a:05:aa:
ac:86:34:82:b8:86:d1:62:e4:94:f4:de:aa:86:e7:
96:7f:97:e8:08:5b:3d:5d:2d:f2:c3:34:86:3c:3a:
be:ce:3a:9b:71:14:d7:47:0d:5d:d7:87:53:d4:db:
d6:f2:73:e0:00:3b:08:e2:2d:a8:9f:06:35:26:aa:
71:51:56:29:7b:7e:00:d2:a8:11:e3:d1:c0:e5:46:
f9:58:44:7a:65:79:4b:34:89:50:9f:8b:31:54:6d:
86:88:b3:e1:20:9e:a1:e8:27:8e:e1:6e:b0:a5:de:
7f:b4:8f:fc:58:13:90:37:4a:d1:93:ce:ae:c6:e3:
32:4a:81:d4:ab:bb:f0:4e:e2:f7:50:38:79:47:f9:
73:55:b6:0a:9d:c0:f7:39:b1:a8:d3:97:7c:bb:8d:
c6:d5:d4:eb:7e:19:c3:b4:82:53:50:8c:4c:94:6e:
1a:d9:84:48:a9:d6:ba:59:eb:0e:ed:ee:41:1d:ad:
be:61:4f:b9:1d:1a:6f:d7:6d:9b:29:fb:d1:65:1c:
91:ee:ca:fa:7b:0f:a9:10:02:7f:0d:58:56:42:41:
3e:f2:88:d3:d3:a3:6d:6c:93:47:6d:3a:38:c8:a1:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:13:7A:4E:29:72:3B:8B:E6:CB:A9:85:75:06:B8:C4:6C:60:45
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS19905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.67.176.0/24
Signature Algorithm: sha256WithRSAEncryption
79:22:a1:fc:94:c4:56:d4:b2:a7:8a:db:a5:15:ee:3c:b6:7f:
e7:36:24:d7:f4:2d:e2:aa:b2:c5:1b:86:f7:c8:36:4f:ff:5b:
ce:a9:e9:58:2b:42:8c:31:3f:af:23:f1:55:46:7f:7d:42:b3:
dc:bb:bf:77:c4:46:f6:41:48:77:c1:f1:31:88:e2:d3:6d:20:
5b:14:1c:c6:67:08:bb:3b:1f:0a:2e:a6:f6:12:1e:4d:f6:a6:
c9:8e:b5:d5:82:40:2e:59:48:34:53:15:ee:6e:20:75:51:e3:
31:32:6e:fa:ce:08:14:90:33:e0:cc:fd:fd:57:42:8f:8c:dd:
20:d8:53:62:e9:2a:aa:0e:a3:3a:ac:9f:17:c9:35:dd:b5:96:
ee:e7:56:6e:86:47:ff:47:ff:24:9e:98:b0:3f:31:06:d3:7f:
cc:61:70:e5:58:89:3c:62:ad:75:7b:70:41:ac:e9:20:3c:13:
42:63:82:55:6d:1a:50:f4:78:4e:cd:a8:22:2d:f1:df:5f:37:
1c:4f:c1:9c:7a:59:b1:e0:7b:e8:da:35:fb:68:29:b1:3f:7e:
44:4f:99:58:f5:b5:06:db:b8:c2:d1:ac:97:82:e6:ca:c7:9f:
53:0a:02:f3:3b:c3:2a:3c:22:0f:b6:92:b2:22:57:95:ff:f2:
84:6c:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org