Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3234203d3e203333363137.roa
File: 3130332e3133332e36302e302f32322d3234203d3e203333363137.roa (raw, json)
Hash identifier: DMdEBgkWfNoZb7eYAjJR5xAPVpUH0L0EWWaz3E5nItM=
Subject key identifier: 6A:D4:B1:75:2D:92:9F:72:D6:10:D2:D2:B1:13:4C:4C:BD:D0:CE:E6
Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Certificate serial: 1A31F6A5C8258F48CD5F842FC180636AEFC8B98B
Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3234203d3e203333363137.roa
Signing time: Mon 23 Sep 2024 17:43:37 +0000
ROA not before: Mon 23 Sep 2024 17:38:37 +0000
ROA not after: Mon 22 Sep 2025 17:43:37 +0000
asID: 33617
IP address blocks: 103.133.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 11:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:31:f6:a5:c8:25:8f:48:cd:5f:84:2f:c1:80:63:6a:ef:c8:b9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Validity
Not Before: Sep 23 17:38:37 2024 GMT
Not After : Sep 22 17:43:37 2025 GMT
Subject: CN=6AD4B1752D929F72D610D2D2B1134C4CBDD0CEE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:98:87:f5:48:e9:0e:ab:d5:e2:46:48:c4:
8f:78:11:e5:09:1c:f9:58:a9:da:b7:d3:6e:1f:1e:
85:a7:58:f0:61:d2:8d:f6:5f:b3:8c:2b:bd:7b:85:
ea:2d:e0:fd:e4:e2:ea:1c:af:3f:ee:bd:74:da:ed:
00:f4:9b:b7:66:4b:35:1b:c3:e8:1c:56:2b:b2:2c:
7a:1c:da:be:d5:37:41:19:f1:3a:3c:69:4a:bc:71:
09:29:8c:e2:12:c5:83:38:5b:7c:35:71:d7:7e:ad:
aa:15:55:c8:99:91:09:41:9f:f5:f8:86:eb:6f:25:
ea:01:02:a9:6e:54:67:1a:23:d4:49:89:2a:1b:4b:
2c:e2:14:91:33:87:42:71:d0:2a:3a:f9:e5:25:ec:
a7:c2:8c:72:5b:6c:f4:e4:4c:9d:25:f4:73:03:f4:
e4:76:67:e3:6b:df:f7:d9:12:ce:fa:18:09:60:fc:
ac:62:6e:de:55:42:5a:ce:37:fa:80:82:c5:ed:eb:
e1:70:3a:eb:94:97:a4:d4:74:da:8c:b7:01:87:c0:
ee:e0:52:4c:93:e5:e2:ec:fd:56:b2:bb:3e:36:7d:
34:e7:91:50:c8:12:d0:00:7e:60:aa:89:99:4e:aa:
92:99:62:45:fc:03:cd:4c:39:b0:9d:94:d1:5f:4a:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D4:B1:75:2D:92:9F:72:D6:10:D2:D2:B1:13:4C:4C:BD:D0:CE:E6
X509v3 Authority Key Identifier:
keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3234203d3e203333363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:e4:5e:5d:ae:a0:16:7c:de:0c:29:2b:af:c4:f5:ff:61:12:
70:04:d4:69:23:dd:d4:69:24:2b:22:75:d1:d3:b8:70:fe:96:
da:32:9c:93:e0:9f:d8:0b:22:e9:90:d8:d5:f1:b7:17:60:4b:
af:8d:94:b6:87:bc:fa:0c:2b:74:70:51:d8:b3:39:56:52:68:
22:30:4c:c0:2f:27:12:0a:3b:c7:4b:1b:30:31:ab:4e:c2:e6:
ec:c5:9e:f8:29:c1:5a:7c:14:bf:95:fc:e4:d8:5e:ae:2c:fb:
7f:c6:88:d5:00:e8:7a:c4:3a:73:80:04:5b:ff:15:94:13:c8:
ac:f7:1d:09:37:49:b3:c6:60:04:0a:88:34:49:56:2c:f6:20:
3a:07:ce:57:1f:5e:83:62:2b:c5:3e:01:b5:ac:9f:05:6b:3b:
14:c4:2d:75:20:58:81:4f:bf:9c:d7:22:9d:82:03:0f:dc:17:
63:86:a5:e8:0f:29:3e:58:64:7e:c7:d7:ef:7e:43:1e:d0:47:
a9:a2:3c:e7:0e:b5:1c:59:2e:66:b7:58:d7:31:c7:d9:85:84:
01:90:e7:b7:f2:df:c1:55:f7:4b:e7:62:8d:60:0b:de:5f:b9:
56:e1:12:6a:d1:a8:33:db:55:b0:7b:39:9b:b0:ce:7e:12:b7:
1c:aa:f1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 14:03:38 2024 by rpki-client on console-ams.rpki-client.org