Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/3130332e38332e3233362e302f32332d3233203d3e20313530353430.roa
File: 3130332e38332e3233362e302f32332d3233203d3e20313530353430.roa (raw, json)
Hash identifier: eGkHKUKGj24fkom5DpEc6pKCuOrUJerCgJMNoqgjQpw=
Subject key identifier: 70:73:CC:FC:65:F8:51:E0:DA:DC:FD:FB:48:21:85:E6:43:D4:F2:FB
Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B
Certificate serial: 04131B9AD3C4F3C094A99D7FC159A8CAD9D90080
Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/3130332e38332e3233362e302f32332d3233203d3e20313530353430.roa
Signing time: Mon 18 Dec 2023 20:04:31 +0000
ROA not before: Mon 18 Dec 2023 19:59:31 +0000
ROA not after: Mon 16 Dec 2024 20:04:31 +0000
asID: 150540
IP address blocks: 103.83.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 04 Jun 2024 19:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:13:1b:9a:d3:c4:f3:c0:94:a9:9d:7f:c1:59:a8:ca:d9:d9:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B
Validity
Not Before: Dec 18 19:59:31 2023 GMT
Not After : Dec 16 20:04:31 2024 GMT
Subject: CN=7073CCFC65F851E0DADCFDFB482185E643D4F2FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7a:a5:75:a6:ba:cc:2a:81:33:58:81:e5:ac:
d1:af:a5:e5:8b:d1:b1:7f:6b:7e:61:23:6e:8f:72:
8f:9f:5a:6f:17:92:9d:26:d5:b5:c4:5e:c3:0c:8a:
55:36:ab:f9:f1:63:2e:cd:92:49:2b:b7:1b:81:21:
77:9c:24:70:2e:23:14:11:be:68:e7:14:cc:27:38:
4a:b3:89:c7:38:30:a7:98:01:e7:64:33:64:b9:5b:
f2:d2:a9:41:4d:32:59:68:e6:72:3a:46:d5:59:8f:
e0:98:59:d7:0d:eb:7a:e9:29:1a:f2:56:2c:ae:5b:
b0:ec:3d:eb:45:7a:a3:06:7b:ae:dc:a1:69:5a:e9:
44:41:5e:98:f5:47:cb:ec:d2:7c:17:77:ba:2b:72:
3e:48:4a:63:c0:3e:91:4b:12:32:a6:9a:76:c1:e7:
54:04:94:56:4e:da:a3:92:00:c9:65:9f:0e:5e:dd:
d6:fb:3b:16:1c:57:3c:bd:a5:1f:a3:9c:42:0a:8d:
46:c7:4b:7d:09:35:95:8a:a7:0a:ca:d1:17:79:2d:
ee:c4:e0:55:6f:a1:50:4a:65:9e:90:2b:c4:8e:ad:
2d:4f:88:ae:b7:94:d5:dc:0b:da:7c:26:ed:8f:fd:
a0:34:1b:ab:5b:97:35:c9:c0:29:fb:00:92:25:20:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:73:CC:FC:65:F8:51:E0:DA:DC:FD:FB:48:21:85:E6:43:D4:F2:FB
X509v3 Authority Key Identifier:
keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/3130332e38332e3233362e302f32332d3233203d3e20313530353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.236.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:f2:92:6f:b3:5c:67:8a:04:dd:5d:bd:15:16:7e:7e:f1:27:
18:bf:d8:dc:e0:37:94:32:69:25:31:74:38:c7:fb:9f:32:83:
45:12:27:e3:ed:22:31:3c:e3:32:de:09:cf:7a:0b:53:e8:30:
eb:0f:92:15:f1:bc:54:c5:92:bf:42:5d:3f:5e:e4:64:56:b2:
aa:b2:0d:15:f8:10:bb:33:b3:c8:f4:88:fb:09:2f:04:72:0a:
45:a1:3e:52:a6:8f:2e:c3:b7:28:1b:c9:36:2c:dd:7f:9f:ec:
b2:ce:13:71:05:c5:44:ab:88:38:e0:68:c2:15:60:89:a7:44:
b5:4a:57:52:62:42:76:68:7d:55:fd:a8:a6:c6:b4:52:0b:30:
f5:ab:4b:2b:9a:6b:1d:65:f9:ce:49:ab:83:24:e9:13:34:2a:
a9:7a:94:09:dd:ba:41:18:aa:fa:99:7b:9b:16:64:25:c1:85:
0e:c4:99:bd:99:20:e7:ca:2e:0b:ae:0b:1f:7e:78:36:99:f0:
b9:dc:5e:31:4e:e3:04:90:4b:54:90:a7:cc:cc:85:e6:f2:d8:
cd:a6:ce:57:4a:b8:8e:9a:5c:2d:36:c4:a5:d4:f5:ed:10:a0:
0a:40:99:12:ac:f6:e7:8b:f0:c0:7f:34:02:80:8c:79:8b:17:
27:68:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org