Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3234203d3e203438343635.roa
File: 3130332e3133332e36302e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier: V8BTY8i+YTq8zTZpX1CrsEFp5niX7wT5Ay06jg/cNGU=
Subject key identifier: AD:12:46:F8:18:B9:FD:39:4D:22:30:3A:66:45:EF:51:33:1A:59:35
Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Certificate serial: 527226B8817D516DBEA3A316A0191FA86170FC48
Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3234203d3e203438343635.roa
Signing time: Mon 15 Jul 2024 03:11:04 +0000
ROA not before: Mon 15 Jul 2024 03:06:04 +0000
ROA not after: Mon 14 Jul 2025 03:11:04 +0000
asID: 48465
IP address blocks: 103.133.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 17:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:72:26:b8:81:7d:51:6d:be:a3:a3:16:a0:19:1f:a8:61:70:fc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Validity
Not Before: Jul 15 03:06:04 2024 GMT
Not After : Jul 14 03:11:04 2025 GMT
Subject: CN=AD1246F818B9FD394D22303A6645EF51331A5935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:b3:01:d5:5e:4e:83:9e:6e:22:bd:6d:80:
69:f7:d9:82:92:46:b1:90:51:ec:c3:54:bf:aa:1e:
06:5a:3c:67:8c:eb:79:dd:a9:5c:fc:9c:2b:da:39:
19:55:e5:e5:c8:80:39:25:b8:18:5a:e1:a8:f6:cd:
aa:f7:f3:78:ac:bb:d7:78:0c:32:0d:ed:ed:8b:72:
f8:a5:ca:4f:f7:fd:ab:96:33:5d:89:07:ae:60:75:
fe:a4:9a:8c:98:d2:4f:aa:72:d5:de:01:c7:81:db:
4f:80:85:8b:17:f6:cd:e7:2e:d4:61:92:ad:67:c9:
f0:2e:ec:8f:1d:b3:8b:65:f9:d7:c4:a3:60:4c:9d:
95:11:26:33:0b:bb:14:62:85:4a:4f:42:bd:40:b4:
1a:fd:18:55:8d:43:ce:b7:0f:89:70:2b:71:fc:37:
62:f6:d4:65:0c:19:6c:6a:08:3d:88:03:0a:6a:80:
ab:c1:c4:0b:f3:e3:bf:b9:b8:f7:35:a5:8f:d3:ae:
5f:28:c7:80:ae:a1:a9:b7:ec:e7:f7:c0:8d:60:8e:
d9:f0:8f:5a:9c:d3:a5:e6:bc:74:a5:de:a3:56:70:
9d:b5:ed:21:6d:af:a4:25:5d:b7:16:a3:7a:c1:e1:
8b:7d:99:e3:18:da:3a:e7:33:68:0c:2e:10:4e:ac:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:46:F8:18:B9:FD:39:4D:22:30:3A:66:45:EF:51:33:1A:59:35
X509v3 Authority Key Identifier:
keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/3130332e3133332e36302e302f32322d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.60.0/22
Signature Algorithm: sha256WithRSAEncryption
55:96:21:6d:90:2e:bf:10:3a:46:44:db:40:ef:d5:1a:ff:a9:
02:c9:cf:51:2f:a8:bc:a7:74:8c:37:63:c5:71:00:c5:de:e6:
1f:0a:f8:ca:35:c6:0e:b4:ba:72:b1:c7:b7:eb:47:2e:6b:f0:
17:43:dd:51:21:c6:21:35:d4:c1:6c:4f:34:09:16:cb:94:b2:
3a:32:fe:67:60:35:ed:2b:13:33:ba:64:8b:96:06:ae:33:cf:
87:3a:6f:c3:5c:7d:4f:55:59:3d:26:b2:cc:71:9f:1c:f9:06:
e8:07:a6:e7:4a:35:7b:b8:7e:c9:9d:28:a2:49:fa:31:a2:b7:
ee:4a:82:d1:7b:09:ae:2c:5d:8d:3d:73:87:2a:2d:df:2a:20:
58:0a:96:cc:55:09:6c:57:10:ec:85:b4:33:b7:9e:42:99:d6:
b0:d1:1a:4d:e9:83:a9:6d:4f:64:24:c2:5a:be:95:eb:26:cd:
9e:2e:b5:59:81:e1:92:d2:8c:d2:e1:fc:f8:b5:74:94:9d:6e:
ef:a3:9d:b0:b7:23:b1:c1:89:d2:bb:c5:e4:88:33:f1:8e:3b:
93:41:fa:b8:34:40:5b:be:f8:0c:e1:e7:73:97:9b:fe:d0:07:
9c:b3:57:7f:df:e6:c6:2c:a4:1c:9c:83:3d:fb:45:a6:2d:a2:
02:f4:fb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 21:19:05 2024 by rpki-client on console-ams.rpki-client.org