Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS33617.roa
File: AS33617.roa (raw, json)
Hash identifier: w5lcYkY0SbB9SlODbO2MFcn3Rf/bnE/c32ARz2RwhbM=
Subject key identifier: A3:32:4D:C2:22:DA:0D:34:35:11:2A:D8:CF:76:76:81:1B:52:A0:F3
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 5D2092DF743544BDD8F04513E08ED56C608B50B9
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS33617.roa
Signing time: Sun 08 Sep 2024 00:08:01 +0000
ROA not before: Sun 08 Sep 2024 00:03:01 +0000
ROA not after: Sun 07 Sep 2025 00:08:01 +0000
asID: 33617
IP address blocks: 103.228.244.0/24 maxlen: 24
116.206.212.0/23 maxlen: 24
116.206.214.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 03:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:20:92:df:74:35:44:bd:d8:f0:45:13:e0:8e:d5:6c:60:8b:50:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 8 00:03:01 2024 GMT
Not After : Sep 7 00:08:01 2025 GMT
Subject: CN=A3324DC222DA0D3435112AD8CF7676811B52A0F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:ed:f9:e3:ff:cd:21:84:2b:05:4d:d0:19:
6d:dc:46:f8:88:7a:0e:eb:14:3a:f6:54:7c:53:52:
29:a9:66:29:e6:02:96:33:7e:05:d6:7b:d2:6d:09:
e8:ae:23:16:64:e3:3c:15:4e:03:a9:e7:9b:fc:5f:
95:b4:79:e7:04:92:f1:9e:c4:9f:12:8e:82:39:76:
27:b2:85:ca:85:8d:34:a4:a3:eb:fa:bb:91:c1:8d:
b7:7b:f9:aa:fe:c7:62:72:dc:7d:6e:80:fa:ed:a0:
f7:e0:dd:f2:52:cb:0c:5e:85:3c:73:0d:f0:74:c1:
b1:89:da:eb:b3:b2:5b:e2:4a:bc:60:54:e8:9b:48:
2f:89:a8:71:5c:5f:0b:b0:03:ab:76:90:fd:61:74:
e4:6a:3a:39:93:2a:b9:a6:b7:40:10:d3:d6:6f:16:
fe:50:a5:16:c5:dc:37:19:04:a2:0d:42:48:07:5e:
c1:35:af:ca:df:4c:a1:fc:71:98:60:bd:ea:40:95:
f7:7f:9f:a3:ad:25:02:17:e9:18:81:c6:d5:97:f2:
6e:c3:38:0b:f2:eb:e8:8d:4e:a8:46:0c:e7:7f:73:
9d:95:33:de:b9:53:1d:67:07:34:86:db:2c:22:83:
d3:72:05:66:a1:05:57:a8:8a:0d:42:f7:c0:de:7e:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:32:4D:C2:22:DA:0D:34:35:11:2A:D8:CF:76:76:81:1B:52:A0:F3
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/AS33617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.228.244.0/24
116.206.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:09:f7:7e:8a:29:00:80:92:c4:a5:8e:44:d2:1f:f7:46:33:
b8:b2:5e:0b:8c:ff:8a:f9:ef:54:96:cd:de:1c:79:da:91:96:
73:c4:08:02:8a:84:cc:63:54:20:bb:07:86:25:f3:6f:be:51:
a0:26:96:d5:92:4a:d3:dc:49:48:0f:2f:b3:4c:d7:36:7f:ba:
e8:9f:c7:1f:b5:b5:92:57:3c:f0:b2:f3:b8:ba:ac:0d:94:4f:
2c:48:e2:ba:af:ba:71:a4:af:55:06:da:c1:e1:15:61:6f:9d:
ca:7d:3e:4e:7d:42:0d:7b:0d:6d:62:5f:1f:d0:65:c1:a0:44:
e8:ef:5d:62:04:c3:53:a9:3c:4e:f6:a9:61:06:0e:38:24:4d:
d2:2b:d4:e7:3c:f7:1c:d9:07:7d:26:ce:cc:35:f3:93:76:ce:
97:95:53:23:e3:fa:26:ad:cc:58:52:35:61:91:3b:3f:db:55:
bc:2e:f0:fe:26:46:c7:0c:57:90:3d:88:54:22:93:79:89:a7:
e0:00:9f:9b:90:04:5e:6d:a5:67:4c:b6:06:24:56:7e:f4:9c:
6a:f9:95:1f:8e:a5:15:c6:8f:ef:81:b3:b5:36:cc:86:8e:ea:
a0:9f:e6:99:40:d8:74:5a:ad:41:1e:7a:8b:de:74:d5:42:01:
8a:69:70:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 05:48:51 2024 by rpki-client on console-ams.rpki-client.org