Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137322e302f32332d3233203d3e2030.roa
File: 3130332e3232352e3137322e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: XeHt0XFRRKn69iqmmZ6SEHqW+uo0jzVR0dUXmU8AQKc=
Subject key identifier: 3D:38:EA:6A:40:76:5A:DD:02:3E:CD:1B:18:EF:32:1E:17:ED:55:B3
Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial: 0F6B5B4022F04FA6F5609753D453CD454DE31752
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137322e302f32332d3233203d3e2030.roa
Signing time: Sun 30 Jun 2024 22:37:31 +0000
ROA not before: Sun 30 Jun 2024 22:32:31 +0000
ROA not after: Sun 29 Jun 2025 22:37:31 +0000
asID: 0
IP address blocks: 103.225.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 02 Oct 2024 22:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6b:5b:40:22:f0:4f:a6:f5:60:97:53:d4:53:cd:45:4d:e3:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Validity
Not Before: Jun 30 22:32:31 2024 GMT
Not After : Jun 29 22:37:31 2025 GMT
Subject: CN=3D38EA6A40765ADD023ECD1B18EF321E17ED55B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:68:7e:42:e6:d8:97:7c:e7:36:9d:0d:8a:
3f:55:9e:4d:b5:23:31:10:dc:d0:6f:a5:d4:39:10:
32:69:37:72:a4:78:c1:94:df:05:18:a6:4b:fd:e1:
cc:31:6d:be:8b:e9:98:d8:07:b0:fc:0b:90:40:d8:
73:3f:9d:6b:eb:d1:9a:a6:b1:d4:f7:18:c7:1b:45:
22:7d:f5:01:b1:4c:63:e6:77:5d:c7:2b:70:3b:ac:
6f:c4:01:a0:cd:0d:72:e9:5a:e8:45:25:4c:1f:4a:
d3:2e:e7:26:13:04:71:e0:0f:26:34:e9:5b:d5:d0:
84:0c:bf:50:44:f9:58:2e:8b:19:a2:9f:aa:70:81:
32:de:be:a4:6b:04:cd:91:f7:3e:e1:97:53:bb:db:
69:03:26:dc:09:60:9f:49:9e:55:be:e7:fd:cf:fe:
99:d4:16:e9:cb:b7:09:cf:0e:76:88:02:0f:e9:6b:
6b:68:1c:38:54:41:16:14:f1:7e:80:3f:ea:7a:7b:
3b:7e:1f:ca:65:7b:d6:8f:39:e6:90:4e:8e:db:cb:
15:20:9b:a5:78:d1:e8:7c:b8:50:7d:cb:23:af:16:
65:25:9f:f5:29:e5:92:1c:c3:80:02:0a:60:68:64:
03:ce:8a:b0:28:9d:99:b8:57:f3:47:93:4b:5b:c3:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:38:EA:6A:40:76:5A:DD:02:3E:CD:1B:18:EF:32:1E:17:ED:55:B3
X509v3 Authority Key Identifier:
keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137322e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.225.172.0/23
Signature Algorithm: sha256WithRSAEncryption
56:18:d8:a7:7f:2c:9a:ce:d2:61:61:48:59:9d:b3:70:c8:9d:
6f:c4:bc:9a:08:d7:52:ae:6b:b5:f9:23:7d:ff:dd:c8:5f:b7:
05:19:1c:04:10:f1:c8:02:ea:6c:ed:90:f0:86:8e:3c:27:08:
3d:80:83:ef:b3:e6:a4:e9:9c:38:35:6f:7c:78:cd:c2:04:62:
5d:5f:c1:e1:02:74:58:73:a9:1c:3b:dc:46:e0:01:ac:7c:85:
0a:ee:59:38:72:6c:3b:a7:78:29:9e:86:04:f6:15:22:14:15:
c1:6f:93:10:c2:54:fc:30:c8:d7:23:32:0f:c2:2c:30:c2:04:
c7:88:75:61:36:e4:a8:98:ca:53:d7:67:9a:98:24:c6:55:d9:
20:c2:fd:a4:00:b8:51:ce:6c:e4:32:b2:a0:78:be:09:df:60:
b7:f7:59:ae:d9:65:d3:7e:21:43:24:40:41:89:6f:8a:0b:78:
43:75:b4:7b:80:6d:c2:4f:e0:ae:3b:7d:3f:94:cc:14:db:14:
a4:0f:0d:a1:ae:25:33:55:e7:7e:15:9c:5b:d4:57:13:72:21:
96:89:f3:06:e4:ae:81:65:b2:f8:cc:9e:08:8a:b5:cb:76:07:
e9:30:9e:5e:47:7a:a3:23:4f:d1:e9:02:70:ea:c1:71:87:6e:
a3:a0:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 23:42:24 2024 by rpki-client on console-ams.rpki-client.org