Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137312e302f32342d3234203d3e2030.roa
File: 3130332e3232352e3137312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: O4XDGTFKmHj08NJK577XdU+4hQT8VqMWOqftBKZpCA0=
Subject key identifier: ED:89:59:CA:A6:E8:EC:E5:FF:DF:00:32:E2:D8:D9:86:E5:2A:62:B1
Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial: 6090E919CDE2CA3974F1B934CDED3F5ED92168DD
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137312e302f32342d3234203d3e2030.roa
Signing time: Sun 30 Jun 2024 22:37:08 +0000
ROA not before: Sun 30 Jun 2024 22:32:08 +0000
ROA not after: Sun 29 Jun 2025 22:37:08 +0000
asID: 0
IP address blocks: 103.225.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 22:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:90:e9:19:cd:e2:ca:39:74:f1:b9:34:cd:ed:3f:5e:d9:21:68:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Validity
Not Before: Jun 30 22:32:08 2024 GMT
Not After : Jun 29 22:37:08 2025 GMT
Subject: CN=ED8959CAA6E8ECE5FFDF0032E2D8D986E52A62B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:63:5b:21:9e:5e:b8:96:bd:3d:ff:fe:63:
28:54:c8:03:90:57:e6:4d:3a:ca:0e:e2:90:1d:23:
1d:31:bd:9b:22:20:6e:c3:10:3e:77:1c:ff:72:8b:
f5:63:fd:69:ed:28:44:5b:9a:66:9f:64:72:5d:be:
f5:da:8a:03:21:42:19:10:c4:3d:c0:e7:b6:e2:4d:
95:91:d3:49:84:c0:53:5b:71:f1:f4:1e:5f:9e:e6:
c6:38:c8:69:ce:82:64:2a:bd:86:92:f8:c7:33:66:
0d:7c:9f:0d:d0:b9:0a:a4:97:32:3e:80:f2:cc:aa:
c0:76:29:ce:e9:5f:1a:5b:0f:9f:2e:c3:6d:13:d6:
70:64:5d:d5:49:41:38:dc:56:8f:2b:0d:d1:45:cc:
ac:4a:87:0a:bf:4b:14:23:d4:45:17:f3:7a:59:f4:
10:8f:3c:05:55:36:56:30:cf:62:50:67:f6:dd:ae:
da:59:f9:de:2d:fb:f0:23:ac:7f:bf:c7:92:e2:eb:
22:f1:9c:66:19:36:1e:45:9f:30:b1:33:88:a2:17:
15:32:f7:38:2c:72:5b:7a:19:aa:30:8a:7c:19:a3:
62:30:c8:7d:9c:96:c9:5f:bb:10:fa:1e:2f:57:e8:
04:e9:06:88:cd:ec:3f:c6:57:f0:e9:a4:1d:00:e1:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:59:CA:A6:E8:EC:E5:FF:DF:00:32:E2:D8:D9:86:E5:2A:62:B1
X509v3 Authority Key Identifier:
keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.225.171.0/24
Signature Algorithm: sha256WithRSAEncryption
02:55:8d:51:8e:2a:dc:9e:35:05:98:49:ea:99:09:59:71:a9:
b3:43:ed:58:b0:1b:78:b7:bb:d9:e6:34:f4:87:5c:ee:3e:b2:
8d:c7:17:1d:f5:63:a5:98:e9:ce:07:15:26:5f:80:2a:a5:4a:
b6:a0:5e:37:77:3e:ec:5f:61:9f:2c:d9:e4:95:9c:f4:78:6f:
17:b9:18:12:1c:53:04:1d:9c:5a:2e:35:a1:d4:1b:8c:e6:5a:
50:99:e3:9d:74:b9:e1:62:62:d8:d5:4f:ef:2f:31:5a:88:33:
15:b6:e9:0a:49:10:08:ea:d5:57:f0:11:90:30:9e:c1:c4:4e:
53:a2:06:a5:8b:9c:89:bc:f4:7c:50:98:6b:bf:42:c0:4b:9d:
83:70:83:e5:c0:cf:12:f2:18:c9:ff:2a:82:02:9c:65:1d:56:
52:4e:d0:a7:68:90:51:a0:cb:f2:0c:95:9c:f2:74:be:d5:e4:
6a:6d:88:3d:d3:56:da:04:37:9c:82:69:3a:fa:c9:2e:3a:5b:
7a:37:69:1c:c1:bc:cc:7b:d5:b7:72:1a:4f:dd:02:f0:f7:eb:
da:dc:72:bb:8c:64:00:63:1c:88:d0:ba:55:0c:67:b3:f6:4e:
3c:0a:67:ab:12:29:42:a8:11:87:76:88:82:e6:de:1e:6a:2e:
7b:6b:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 23:42:24 2024 by rpki-client on console-ams.rpki-client.org