Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32342d3234203d3e20313339343030.roa
File: 3130332e3134332e3137302e302f32342d3234203d3e20313339343030.roa (raw, json)
Hash identifier: /Rqo0Tz8y3RsQAve2VX5/x4TQYMfa+I3ytNPQSChwsI=
Subject key identifier: F3:41:54:49:1D:B1:DD:3C:6D:0C:0F:72:A3:BF:4C:60:0C:51:D7:F0
Certificate issuer: /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial: 6E54CF8D89627956EFBE2849CC623412C69D2BE3
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32342d3234203d3e20313339343030.roa
Signing time: Mon 01 Jul 2024 01:05:14 +0000
ROA not before: Mon 01 Jul 2024 01:00:14 +0000
ROA not after: Mon 30 Jun 2025 01:05:14 +0000
asID: 139400
IP address blocks: 103.143.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 03:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:54:cf:8d:89:62:79:56:ef:be:28:49:cc:62:34:12:c6:9d:2b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Validity
Not Before: Jul 1 01:00:14 2024 GMT
Not After : Jun 30 01:05:14 2025 GMT
Subject: CN=F34154491DB1DD3C6D0C0F72A3BF4C600C51D7F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:db:65:4c:d0:db:46:95:16:e8:20:23:23:
20:79:4a:f8:6b:40:9a:bf:51:19:a0:09:cf:c7:63:
f9:c7:2a:00:d1:dd:d7:63:00:f4:f6:60:82:52:08:
22:d2:a1:04:d1:d1:92:91:20:b3:7a:e4:35:e3:1c:
81:f3:10:db:25:84:8a:50:91:3f:57:5b:a8:41:4c:
fb:2c:85:a0:89:5d:32:69:4c:ad:29:3e:0a:4a:8d:
8a:72:e1:e5:bf:7e:9b:92:07:8e:05:3a:57:56:37:
74:57:24:e3:89:df:ce:d8:ab:75:3d:58:8d:d4:52:
dc:9e:ab:fc:7b:68:1d:e1:1b:e8:10:bf:93:82:d9:
31:61:1a:a5:07:63:f3:66:85:47:c0:e0:8f:2a:8c:
fa:fc:06:48:8f:f2:c7:58:40:ef:67:c5:a2:f2:31:
cb:3b:9d:52:e6:76:5d:24:de:51:b0:e4:c7:ce:04:
c6:68:a0:59:22:0a:0d:c5:6b:fa:26:b4:fa:a5:a5:
7c:06:3b:26:51:e1:b1:8e:e0:87:8b:7c:bc:2f:c9:
a5:ff:39:ef:cc:b4:00:bc:b2:1d:25:83:38:63:36:
39:78:c5:88:b0:06:b1:46:0e:42:4b:53:b2:1f:03:
1c:b8:42:06:15:63:f9:8e:1b:ad:71:70:be:30:67:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:41:54:49:1D:B1:DD:3C:6D:0C:0F:72:A3:BF:4C:60:0C:51:D7:F0
X509v3 Authority Key Identifier:
keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32342d3234203d3e20313339343030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:70:51:b4:52:c1:8c:af:3a:6f:66:09:cb:bc:5c:a2:ff:0a:
75:6e:1d:bd:84:1a:eb:49:f4:bd:52:12:76:c2:54:9f:be:49:
2c:8b:84:ea:07:22:93:86:2a:65:ce:f2:d1:02:9e:6f:ab:0b:
bd:17:4c:a8:e6:5d:25:b9:b5:4f:cb:74:77:46:b1:fb:92:4b:
f1:4a:ca:c5:ec:e0:6c:1c:d3:c3:c6:5f:c2:76:bf:43:85:8b:
66:86:a2:6f:e2:b2:01:ba:0d:6d:57:c4:52:51:48:25:4c:6b:
17:bb:63:43:3e:74:e4:68:1b:dd:cf:03:6c:ff:92:bd:b9:6e:
ac:76:88:fe:65:b1:bd:78:cd:4e:97:2d:8a:97:43:e7:33:69:
5d:18:54:6d:13:88:3e:04:8f:06:f5:f9:5b:0d:ce:97:b1:87:
45:9b:09:44:f2:33:b0:60:7f:e5:98:05:61:e8:32:9d:36:3e:
a2:30:a5:7a:ab:46:2f:c1:0e:d6:a7:43:e2:83:57:a2:2b:25:
0f:7f:80:20:d6:b4:ce:cc:9e:90:27:d3:9d:f5:90:8c:bb:5b:
ae:d1:d3:44:2c:3b:12:ba:07:3f:16:d1:83:88:26:6e:eb:ea:
5d:ba:c2:6a:0a:8f:ba:43:00:ed:a5:ce:d1:07:39:23:66:b7:
93:76:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:57 2025 by rpki-client