Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3234203d3e20313339343333.roa
File: 3130332e3134342e3132382e302f32332d3234203d3e20313339343333.roa (raw, json)
Hash identifier: QrUcuIy8NvB7DN7QJd/+AkoeIvFkVoxrDRGfDNObOp4=
Subject key identifier: 24:9B:45:58:ED:E1:12:9C:BE:F3:B7:A5:DB:A3:FF:8F:7F:59:AC:21
Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Certificate serial: 36AC79AA6020797B9992EB21B9050B70363DF4CC
Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3234203d3e20313339343333.roa
Signing time: Wed 15 Nov 2023 09:14:07 +0000
ROA not before: Wed 15 Nov 2023 09:09:07 +0000
ROA not after: Wed 13 Nov 2024 09:14:07 +0000
asID: 139433
IP address blocks: 103.144.128.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 20:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ac:79:aa:60:20:79:7b:99:92:eb:21:b9:05:0b:70:36:3d:f4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C
Validity
Not Before: Nov 15 09:09:07 2023 GMT
Not After : Nov 13 09:14:07 2024 GMT
Subject: CN=249B4558EDE1129CBEF3B7A5DBA3FF8F7F59AC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:da:19:c8:2a:42:7e:26:32:68:10:28:f4:
a8:16:1b:f1:d1:a7:f4:3b:ab:ed:13:0d:f0:54:8b:
fc:b1:eb:ef:ca:e5:95:86:fc:c3:ee:7a:bf:92:d2:
b7:89:13:20:68:a9:35:5e:97:31:d9:be:f3:05:5d:
48:cd:d3:74:22:ea:97:fb:1a:e0:c4:8f:1f:a5:34:
d9:7a:5d:15:2e:de:69:d1:e4:c7:9d:3a:0a:dc:64:
e1:79:d9:af:dc:25:0d:2d:ee:db:c6:14:d0:17:7d:
36:c3:51:50:13:5a:9e:f8:f2:b5:b5:8b:35:e7:29:
ba:bd:d5:dc:9d:21:5e:a2:ec:60:9b:f5:9a:5b:32:
85:cd:67:76:cb:49:d4:5f:ff:de:70:85:74:00:a7:
12:23:88:34:e1:7e:ba:5b:d1:e4:3d:92:ca:ca:01:
21:91:6f:2c:f6:03:57:a3:96:66:b3:fa:d9:d3:6d:
6c:f1:de:41:af:e8:fa:13:ec:18:fa:72:0a:b0:1a:
57:5e:9e:b4:5a:9a:69:37:09:3d:4c:55:fe:0a:af:
40:d0:ed:4a:08:d5:06:0c:ce:ff:40:62:f7:c7:03:
16:e5:85:32:b4:2b:4d:08:8d:56:3f:2f:17:04:5b:
f1:48:0b:83:e1:f2:f1:ad:f7:24:b0:85:53:ca:0c:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:45:58:ED:E1:12:9C:BE:F3:B7:A5:DB:A3:FF:8F:7F:59:AC:21
X509v3 Authority Key Identifier:
keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/3130332e3134342e3132382e302f32332d3234203d3e20313339343333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.144.128.0/23
Signature Algorithm: sha256WithRSAEncryption
42:ad:1a:e6:ac:ad:e8:20:ef:59:01:d4:78:3b:8d:ef:7a:2c:
e4:fa:63:12:3d:09:26:55:66:d5:f1:88:b0:f5:e0:67:cb:a8:
44:8c:27:a3:cc:f8:db:3a:ad:a9:a9:32:cf:a1:ee:35:7e:2c:
c7:bc:fc:b8:69:ca:1d:08:bf:3e:08:cf:be:93:3d:9f:2a:7a:
ad:9b:93:cb:1a:e3:93:a5:9d:cc:28:7a:56:24:13:4f:eb:25:
df:90:69:32:72:67:60:71:06:8f:90:80:ee:38:7a:e9:93:cf:
16:90:71:7a:27:cc:a3:14:20:07:06:04:fb:ad:ee:f4:9c:c0:
91:24:4b:c4:1e:01:d0:69:03:c8:c4:c7:00:38:71:15:df:16:
d6:9e:9c:ab:81:64:85:00:04:45:23:fe:aa:0c:fa:b6:ca:0a:
8d:dd:07:4a:e0:3e:c0:29:8e:30:e3:25:db:ac:64:0e:32:6e:
86:fa:8c:80:f9:8d:a8:5c:d5:85:db:2d:d4:b7:41:af:f0:cb:
f9:97:c6:5d:c5:da:ab:f7:32:ed:61:64:14:b3:78:74:1f:78:
b3:3d:a3:54:cd:6d:8b:b4:1e:0a:d9:e1:9f:9c:96:5f:c4:47:
2d:28:83:e6:b8:bd:50:b2:2f:95:cf:5c:d2:aa:83:4c:8f:7f:
f5:e3:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org