Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32332d3233203d3e203633343937.roa
File: 3130332e39302e32362e302f32332d3233203d3e203633343937.roa (raw, json)
Hash identifier: R+NClLEasT5Bq8be99gANvA7TnsZXhPNpS/h+hqbZLY=
Subject key identifier: F1:F6:B3:EB:2A:E5:65:95:9D:21:77:FF:CC:17:A1:68:BF:23:A3:8B
Certificate issuer: /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial: 61F5A7189396F695EDA9E361AAC06AB038EBB41C
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32332d3233203d3e203633343937.roa
Signing time: Mon 31 Jul 2023 00:08:11 +0000
ROA not before: Mon 31 Jul 2023 00:03:11 +0000
ROA not after: Mon 29 Jul 2024 00:08:11 +0000
asID: 63497
IP address blocks: 103.90.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 15:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f5:a7:18:93:96:f6:95:ed:a9:e3:61:aa:c0:6a:b0:38:eb:b4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Validity
Not Before: Jul 31 00:03:11 2023 GMT
Not After : Jul 29 00:08:11 2024 GMT
Subject: CN=F1F6B3EB2AE565959D2177FFCC17A168BF23A38B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:f8:26:ff:b6:a9:68:4e:ad:70:a2:f2:c1:
2c:bb:b6:75:2a:ca:b1:89:88:5b:3a:31:ca:04:11:
07:1f:0a:00:d9:86:68:84:a3:7f:43:e2:dc:28:68:
5c:ef:e2:d6:cf:53:e1:0c:81:fa:e8:3e:d1:d8:5b:
ed:7a:ce:1b:bc:4d:34:24:19:dc:28:f4:79:ac:f9:
ec:cc:fe:8b:bf:08:6a:44:98:51:c1:a9:b6:e9:ab:
a8:f9:be:ac:e7:d3:07:5a:6c:59:8a:56:f7:54:a3:
35:45:d5:84:2c:78:f7:07:98:99:d1:26:ba:85:99:
1a:8e:0a:0b:a0:f6:16:82:18:76:18:96:14:df:86:
07:5b:73:91:42:ef:d4:87:4d:59:91:e1:1a:7f:fa:
72:a3:6d:71:69:f3:32:bc:14:ba:35:ed:95:de:d5:
e4:f9:fb:75:6d:be:b1:01:8c:7c:b8:f8:a4:5f:73:
df:d1:70:41:2d:c9:ae:4b:58:d1:f7:5c:7d:c5:62:
1a:c6:2a:90:dc:e5:d3:ad:f2:f3:c5:d7:ab:54:8d:
93:c0:a8:00:a4:bd:8b:60:5d:cd:d5:a1:33:9a:92:
0c:48:3b:4f:e4:81:c1:b7:ea:cc:38:4f:31:e9:2c:
eb:d0:23:69:d0:3f:48:86:f4:8a:87:fa:33:55:ee:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:B3:EB:2A:E5:65:95:9D:21:77:FF:CC:17:A1:68:BF:23:A3:8B
X509v3 Authority Key Identifier:
keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32332d3233203d3e203633343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.26.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:6e:24:e3:ed:8a:26:c8:34:e5:d3:bd:30:0f:50:dc:6c:c6:
ca:6e:85:61:c2:da:05:3e:79:c0:b8:f8:28:de:ff:fb:b6:6b:
c9:2e:fc:f0:38:86:d0:47:2d:1d:08:7b:9a:5d:86:44:98:02:
38:bd:16:47:fe:b6:88:cf:c9:b7:b4:7c:db:d3:71:6f:6b:87:
07:f3:67:fa:9a:e7:7d:7f:44:a3:c5:e4:c4:63:b9:64:1d:10:
dc:85:4c:6b:7c:e2:cb:c6:66:c4:5c:eb:9e:ed:ca:26:fe:30:
e2:d1:68:18:0c:06:e1:73:06:3d:fe:f0:29:4e:59:f4:30:b7:
ef:5d:e7:28:37:94:5b:6c:f4:87:c8:f4:ef:72:e0:f8:8e:74:
17:74:a1:29:de:cd:6d:32:5c:24:26:f9:ad:d5:88:50:dd:04:
40:58:66:35:91:c6:bb:e6:62:21:24:ce:45:37:5c:58:93:d3:
a5:f0:cb:dc:7d:1e:a6:ce:4c:d5:31:68:5a:c1:98:2d:b1:74:
64:d7:04:93:82:b8:64:0c:1c:2a:85:50:67:3a:14:85:b0:bb:
32:a9:c9:70:0a:ef:a3:59:77:66:2d:ca:cd:69:77:eb:02:fb:
74:30:b1:24:85:6c:08:c6:7e:7e:53:b2:76:1f:0d:1c:21:d8:
75:1b:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org