Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e203338303031.roa
File: 3130332e3233352e37352e302f32342d3234203d3e203338303031.roa (raw, json)
Hash identifier: fdv7fWMMz2/sSaxac5GJmjQIegfsfj3XWQ7AOuAWowY=
Subject key identifier: 8C:16:86:06:BB:B3:FF:58:B4:DE:7E:89:A1:B1:CD:FF:92:D7:6B:E0
Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial: 6F7BE9D219045F1878F898365F2991F52CB53028
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e203338303031.roa
Signing time: Sat 17 Jun 2023 06:00:00 +0000
ROA not before: Sat 17 Jun 2023 05:55:00 +0000
ROA not after: Sat 15 Jun 2024 06:00:00 +0000
asID: 38001
IP address blocks: 103.235.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 04:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:7b:e9:d2:19:04:5f:18:78:f8:98:36:5f:29:91:f5:2c:b5:30:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Validity
Not Before: Jun 17 05:55:00 2023 GMT
Not After : Jun 15 06:00:00 2024 GMT
Subject: CN=8C168606BBB3FF58B4DE7E89A1B1CDFF92D76BE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:82:22:02:ea:89:8e:90:b7:14:84:8d:ea:
a4:46:5e:78:9f:28:57:1a:d1:2c:95:0d:3d:c9:3e:
62:e8:05:90:06:e8:8e:6b:6a:f7:05:d0:05:db:9d:
06:0e:d2:82:45:cd:a0:9e:66:42:f0:d9:0a:f5:47:
e5:bf:d0:92:a3:da:cf:fc:78:4e:b3:c9:4b:fa:8b:
0e:51:f2:bb:f2:69:fa:28:0e:43:cf:a6:a0:d9:1d:
be:08:97:cc:e6:53:5a:2a:5c:b6:0e:fe:06:7b:0d:
e3:ec:f6:4b:6f:e5:3d:bc:c5:54:d0:eb:3e:64:c3:
3f:00:2b:f6:d3:f6:02:97:ee:86:ae:ae:38:3a:f9:
9c:2d:a8:6e:9d:c9:02:12:ed:14:13:f7:40:ac:ee:
48:47:21:34:5c:6b:c2:6b:24:2d:3c:a4:f2:ee:a5:
c2:b9:8e:10:fc:34:db:f1:84:29:f0:c6:8f:30:8f:
02:e7:67:7a:5e:19:7f:c2:41:90:de:1b:27:81:1f:
15:1f:73:f1:b3:f4:d7:dd:ce:26:5a:f4:fc:b8:2c:
5c:43:01:5b:fd:9d:5d:c7:93:21:1f:64:b3:ed:0e:
2a:18:12:af:28:fa:d5:1c:64:cc:41:a9:e3:86:fd:
7b:df:c2:62:1c:d9:19:a1:7e:0a:e5:7f:84:b9:96:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:16:86:06:BB:B3:FF:58:B4:DE:7E:89:A1:B1:CD:FF:92:D7:6B:E0
X509v3 Authority Key Identifier:
keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e203338303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.235.75.0/24
Signature Algorithm: sha256WithRSAEncryption
49:19:8e:64:71:f5:bf:6a:44:9a:44:4f:80:33:e9:f7:89:3d:
59:ce:66:95:7d:79:eb:d9:04:f0:2b:da:38:7d:f2:78:06:43:
a3:cd:55:1a:34:d3:b0:2e:c3:68:65:f5:32:ee:97:67:b2:05:
a5:07:70:83:46:35:de:9e:91:58:9f:c1:fc:2a:9a:93:f6:e4:
ce:d1:f6:33:37:76:20:14:f5:9a:19:14:6c:86:73:e1:4d:a1:
9b:cb:19:a2:57:62:19:ed:ce:cf:63:67:48:0f:13:34:c3:33:
1f:e5:93:ba:a4:7c:1b:5a:8c:a2:87:79:da:12:25:72:47:ee:
c0:96:6e:05:4b:6c:bf:6e:53:c8:be:44:16:e2:4a:09:b5:72:
a5:b0:d9:04:8c:98:6c:6f:a4:94:37:08:8c:dd:0c:82:4e:b2:
e4:a5:e4:dd:d9:2d:4c:92:b4:37:66:44:07:ea:47:c2:93:92:
ab:5d:bc:52:b8:78:4d:8b:4e:7c:ea:d8:9d:15:6f:81:c2:d5:
b4:60:a6:a5:36:58:ce:93:55:70:98:f0:2b:fb:db:04:67:80:
55:80:6c:69:cd:05:f8:92:0a:51:70:69:d0:4f:d0:93:c3:27:
ca:15:48:2a:06:7e:48:bc:a0:38:b4:0f:14:03:66:80:9c:8a:
71:fd:1b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org