Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3232203d3e203333363137.roa
File: 3130332e3133332e36302e302f32322d3232203d3e203333363137.roa (raw, json)
Hash identifier: yce4mSMIggZYGo6WfBuJpjrHXYeSHy0uPze4TRy46uE=
Subject key identifier: 9B:60:0B:A5:AE:E2:53:FD:D5:EF:77:BE:CC:50:10:AC:F0:75:31:AB
Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Certificate serial: 1EEF4F22E05278C7FB229A9B114D83458467D322
Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3232203d3e203333363137.roa
Signing time: Mon 23 Sep 2024 17:45:57 +0000
ROA not before: Mon 23 Sep 2024 17:40:57 +0000
ROA not after: Mon 22 Sep 2025 17:45:57 +0000
asID: 33617
IP address blocks: 103.133.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 24 Sep 2024 11:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ef:4f:22:e0:52:78:c7:fb:22:9a:9b:11:4d:83:45:84:67:d3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Validity
Not Before: Sep 23 17:40:57 2024 GMT
Not After : Sep 22 17:45:57 2025 GMT
Subject: CN=9B600BA5AEE253FDD5EF77BECC5010ACF07531AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:cb:29:e1:6b:28:8b:40:71:d3:29:de:e5:
81:38:22:60:6a:9d:f9:67:51:9a:59:64:1a:cc:8c:
af:6d:e2:85:d2:8f:df:b0:11:dd:44:b3:93:4b:26:
85:fb:c6:06:ad:e6:ae:bd:bf:63:6b:bc:b3:12:c6:
ed:24:9b:42:ee:ac:21:59:83:f0:c0:1b:cb:e3:d1:
71:3e:cc:69:79:4a:31:37:81:51:51:ca:3d:aa:52:
58:4c:09:fb:a9:5b:d2:10:f6:b9:e5:e7:4d:de:a5:
99:60:64:9e:2c:59:10:0e:16:5e:a3:12:6a:e3:19:
5c:79:10:a1:cd:fa:94:bc:87:9f:7e:91:3b:d0:c5:
f9:93:6e:37:06:e5:33:19:f0:0b:0f:9a:5d:17:1d:
12:62:e9:df:29:86:0c:c7:f8:26:c2:5e:d6:a8:02:
41:b2:70:11:50:6d:75:0f:87:ea:35:5f:1e:d2:f6:
4d:db:6f:c7:75:6a:61:bb:a0:fb:aa:1c:87:b4:49:
f8:3e:80:8b:96:50:e9:39:1c:3a:98:6c:e9:11:aa:
55:cf:30:4f:09:73:3c:62:fa:56:c2:30:35:25:01:
2a:22:3d:9c:17:de:fa:8d:3c:45:24:f8:0f:81:e0:
19:24:03:05:0d:64:d3:12:2a:e2:97:3d:ab:53:ed:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:60:0B:A5:AE:E2:53:FD:D5:EF:77:BE:CC:50:10:AC:F0:75:31:AB
X509v3 Authority Key Identifier:
keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3232203d3e203333363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.60.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:cb:ce:08:c0:7e:03:86:33:a9:0f:f8:f2:f8:1f:67:42:ef:
0c:ee:c2:87:e4:55:9e:45:f3:5d:4e:fe:e2:fa:d7:f1:78:8b:
3f:98:ed:26:75:f7:29:91:58:d0:d4:15:44:71:4f:e7:32:5a:
b7:05:4a:00:63:6e:88:e9:a1:23:e5:8e:96:d0:60:68:f7:0a:
24:1b:8b:ea:e9:fc:df:20:c6:b5:57:34:1d:7b:95:f6:b0:22:
86:4a:9e:31:d5:e8:55:f2:c8:5b:5e:b7:42:e8:04:84:7b:86:
c4:b8:a6:82:07:01:5f:f2:5c:a2:2f:f9:f3:cb:9d:0a:e7:3b:
92:48:fb:bd:bb:1a:6e:12:64:3d:44:12:fc:6a:d9:30:b6:12:
e0:2a:8c:a4:e9:a0:ab:11:ae:a1:a1:ed:e5:20:c6:04:8e:8a:
07:f4:d7:01:2e:59:84:43:60:5a:c2:da:9a:37:f1:f9:dd:57:
53:40:fb:b8:d8:e3:d0:b9:39:ed:4e:bd:d1:2a:16:5e:bb:34:
d1:aa:2b:ef:b0:08:35:10:47:28:c6:17:23:a4:57:44:36:4d:
e7:5f:5f:13:0c:83:96:3c:9a:7f:f1:d5:9f:7f:90:b8:ce:4d:
8e:bb:2c:16:9f:80:ff:58:68:c9:74:3f:67:4e:30:ce:41:a4:
77:15:79:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 12:40:08 2024 by rpki-client on console-fra.rpki-client.org