Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e20313431383932.roa
File: 3130332e3233352e37342e302f32342d3234203d3e20313431383932.roa (raw, json)
Hash identifier: jPBn+XhxJvArEyKeyEsq6P9th4Pb/JDkOB4fgzOJDVA=
Subject key identifier: B9:9F:7C:E2:5C:4B:DD:32:61:78:FB:B8:A8:9B:3F:E0:7D:7B:2A:29
Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial: 18175EA5E157A68F8E76CFE0AC72A08CD778F388
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e20313431383932.roa
Signing time: Wed 16 Aug 2023 05:00:00 +0000
ROA not before: Wed 16 Aug 2023 04:55:00 +0000
ROA not after: Wed 14 Aug 2024 05:00:00 +0000
asID: 141892
IP address blocks: 103.235.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 04:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:17:5e:a5:e1:57:a6:8f:8e:76:cf:e0:ac:72:a0:8c:d7:78:f3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Validity
Not Before: Aug 16 04:55:00 2023 GMT
Not After : Aug 14 05:00:00 2024 GMT
Subject: CN=B99F7CE25C4BDD326178FBB8A89B3FE07D7B2A29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:36:d5:1d:6a:0e:90:dd:b9:c7:ff:0c:88:
28:76:86:05:8c:6c:39:c8:9d:e7:1a:d1:ff:d7:b7:
bb:37:20:cd:1f:a8:ca:01:7b:ba:e6:dc:0b:95:db:
20:e4:17:ed:45:dc:e5:bf:ca:7f:dc:15:26:ed:8b:
ae:a5:e6:e2:ba:8e:c2:18:65:b2:2a:46:20:45:a9:
a3:e9:73:ec:ff:0f:40:8b:c0:5e:f9:12:dc:f7:d5:
ae:8d:3a:14:d0:bb:93:15:b5:73:1c:8f:38:a2:8d:
85:22:7f:a9:16:2b:f4:b9:0c:c0:eb:f9:16:a2:bc:
2a:4f:ff:ee:05:05:53:2a:3e:64:bc:b3:67:9e:86:
f6:60:8c:d8:d7:34:1f:be:98:32:01:79:47:40:a0:
f3:df:86:92:62:c7:6a:d6:d2:dc:9c:29:1c:e7:fb:
d2:39:7a:60:60:70:9e:52:e3:33:cf:c1:4f:92:b1:
3b:52:f6:36:c6:9b:1a:33:0d:79:24:b9:aa:b1:9f:
11:13:ce:22:92:d8:b6:39:15:0c:32:7d:6e:0f:26:
70:b6:b8:f0:0b:94:a5:61:a1:ec:d4:07:90:e7:61:
e7:aa:96:80:59:92:02:f9:88:ec:92:d0:7b:34:73:
ab:ef:31:f4:62:ba:b5:fa:b4:e1:c2:d9:24:43:3e:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9F:7C:E2:5C:4B:DD:32:61:78:FB:B8:A8:9B:3F:E0:7D:7B:2A:29
X509v3 Authority Key Identifier:
keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37342e302f32342d3234203d3e20313431383932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ab:e6:a4:ff:09:06:21:1c:7b:f2:62:19:97:2e:38:fd:16:
99:ed:ed:80:39:89:da:a9:66:27:52:1e:7b:b4:38:a1:92:11:
54:dc:50:a4:8b:1a:09:80:62:d1:f9:0f:d8:d6:7f:3a:44:76:
5e:0f:05:a1:ff:1f:6c:4e:00:83:4b:39:1d:e6:6c:0c:ea:bb:
10:db:d5:c9:79:29:58:4f:23:b8:66:40:10:e7:4e:c4:19:7d:
0c:fc:53:ef:9b:a5:76:ab:43:9a:f3:24:11:2a:16:a1:04:78:
45:af:71:12:87:bc:6b:1b:5d:35:9b:10:47:9d:0a:dd:e1:86:
93:7c:ea:cb:37:49:32:57:34:1c:70:c6:ec:76:49:06:72:21:
4e:23:f1:86:a0:c3:dc:b9:bb:de:10:d3:ad:e5:1b:0f:eb:46:
1d:20:7f:1e:97:a7:3f:eb:27:4e:5b:9d:92:07:db:00:70:d9:
f6:0b:13:24:0e:3f:1f:06:56:8f:6f:d8:89:8a:c3:7b:c4:3f:
50:a2:25:bc:1e:2f:87:65:26:1c:7e:bc:de:db:f1:57:e0:3e:
e2:73:c9:d1:d1:2d:02:0c:ff:96:a5:89:0a:db:e0:ae:81:dc:
33:8d:28:48:a5:af:09:26:76:1a:d7:b4:e0:da:a1:14:6f:40:
46:65:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org