Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e203438343635.roa
File: 3130332e3139342e34362e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: SGsvdB/aFFcOFKbaKEP32WwkP7L+lCrMhfjVxkiI6LY=
Subject key identifier: 57:84:F9:A4:E6:A6:2C:EB:E3:74:28:60:05:0E:66:DE:09:17:98:C6
Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial: 4FECDBD0B3ADE1AD0D198FFABF9F8D9FB87067F4
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e203438343635.roa
Signing time: Sun 14 Jul 2024 23:53:26 +0000
ROA not before: Sun 14 Jul 2024 23:48:26 +0000
ROA not after: Sun 13 Jul 2025 23:53:26 +0000
asID: 48465
IP address blocks: 103.194.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 04:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:ec:db:d0:b3:ad:e1:ad:0d:19:8f:fa:bf:9f:8d:9f:b8:70:67:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
Validity
Not Before: Jul 14 23:48:26 2024 GMT
Not After : Jul 13 23:53:26 2025 GMT
Subject: CN=5784F9A4E6A62CEBE3742860050E66DE091798C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:14:28:42:69:66:c7:38:d5:07:0a:42:58:
b5:3f:8a:45:38:83:d9:29:24:4f:ae:f9:4f:3f:8a:
36:20:01:7f:02:8f:91:0f:93:83:10:bd:c7:27:fa:
fd:0e:74:8a:19:58:19:94:ff:b3:a9:70:20:f2:cd:
f0:7c:70:e1:3b:37:1d:59:28:e1:df:bf:60:2d:ff:
59:ce:dc:00:05:45:3f:1e:3b:06:35:81:ec:04:df:
ac:03:d5:a6:18:19:10:4f:d5:ed:61:17:97:eb:b1:
c3:09:13:45:ab:66:f7:cd:c3:f1:15:b5:df:9c:5a:
e3:72:7b:c6:e3:d5:4e:4d:b1:a1:b7:00:d1:d6:f9:
c2:c8:70:ac:bf:b7:cc:87:5c:81:09:64:b2:bb:62:
cc:cc:59:17:63:6f:4c:12:53:85:a8:b0:b7:59:63:
73:0a:ae:fd:80:f6:65:36:3d:85:f1:cd:99:5f:cc:
b0:ea:61:10:b6:a7:95:41:f0:2a:0d:29:4c:32:e4:
58:ad:57:6a:1e:02:03:85:cc:c2:a8:7a:3b:48:40:
48:72:e9:e4:ec:bd:85:79:9b:ff:1a:4f:2c:e5:86:
ae:fa:83:10:02:85:3c:b2:92:23:f0:27:21:bd:92:
d1:87:a2:42:fd:de:8f:6f:6d:a1:66:1a:3f:0c:e3:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:F9:A4:E6:A6:2C:EB:E3:74:28:60:05:0E:66:DE:09:17:98:C6
X509v3 Authority Key Identifier:
keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.194.46.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:5c:ad:31:a8:39:87:45:6b:7e:cf:a9:ee:3c:17:32:8e:9e:
98:98:54:41:8d:19:9c:98:ef:2b:0e:92:8c:b6:4d:88:22:fa:
dc:a2:a0:9f:1a:a5:f7:b9:cb:a1:b3:46:74:8c:30:85:a5:b4:
a8:42:73:f3:0d:50:e2:9b:15:76:06:4d:53:40:fe:10:ba:37:
2b:ab:7f:14:7a:62:01:ae:c8:e8:21:99:32:50:ee:5d:da:34:
10:1f:fe:07:f0:1e:fa:6f:29:ea:7a:f2:38:0d:c4:a6:d7:41:
4d:15:da:44:fe:a6:a7:3c:b7:30:85:d2:fb:0c:de:bb:94:dd:
75:e6:6a:a3:86:78:41:c3:ee:8e:d0:8e:04:f8:df:d7:7e:50:
71:ff:45:b2:4d:ba:c3:18:34:82:8a:d4:e1:64:19:34:26:f6:
27:eb:04:53:dc:a0:ea:9f:a0:eb:39:b2:28:22:00:e7:9e:4a:
10:4b:44:f1:0d:cd:87:8e:93:34:c5:f4:3b:7b:4a:a1:1f:a9:
57:1a:c9:08:92:a9:72:c9:23:e3:25:31:4b:fe:8a:ec:30:4b:
4d:58:b5:ac:af:03:be:44:03:eb:0a:28:bb:4a:ba:1a:e4:f3:
03:03:a6:72:9c:1e:5d:a1:07:42:b0:f2:54:b5:94:5d:85:e6:
ed:a8:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 05:52:32 2024 by rpki-client on console-fra.rpki-client.org