Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32332d3234203d3e20313439373439.roa
File: 3130332e3138392e3131302e302f32332d3234203d3e20313439373439.roa (raw, json)
Hash identifier: YLCZRJ8JTrwBBjK3uw4wJwH0B/ddZobD/majw21ocSY=
Subject key identifier: 70:F1:0D:9C:B7:83:31:29:A1:7D:42:C9:9D:04:2F:B0:AB:5B:08:6D
Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
Certificate serial: 4D5C6B2B532ABDCFB7C8DA9BF9ECE3C522021E1F
Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32332d3234203d3e20313439373439.roa
Signing time: Mon 30 Oct 2023 09:00:00 +0000
ROA not before: Mon 30 Oct 2023 08:55:00 +0000
ROA not after: Mon 28 Oct 2024 09:00:00 +0000
asID: 149749
IP address blocks: 103.189.110.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 17:23:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:5c:6b:2b:53:2a:bd:cf:b7:c8:da:9b:f9:ec:e3:c5:22:02:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897
Validity
Not Before: Oct 30 08:55:00 2023 GMT
Not After : Oct 28 09:00:00 2024 GMT
Subject: CN=70F10D9CB7833129A17D42C99D042FB0AB5B086D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:72:d2:ee:27:95:bb:7d:d4:ec:dc:46:3c:
93:bb:10:c8:02:43:a0:97:87:0a:a0:c5:a9:d2:24:
60:57:61:cb:2d:3e:5c:f3:50:68:8f:56:eb:d2:37:
c2:2f:de:f7:45:cc:ad:19:aa:d5:96:b3:80:9e:01:
26:3e:45:4c:90:c9:12:44:0f:96:5a:95:bb:0c:43:
87:45:83:2e:5c:db:98:a9:1d:94:a4:bd:d9:68:e7:
25:e7:06:2a:be:d7:64:79:3f:72:e4:15:9c:0e:4a:
70:3d:b5:99:a8:51:4a:00:2e:95:bf:c6:b3:60:c2:
14:dc:3f:57:51:ee:5d:d3:d4:4f:e5:64:24:84:ff:
70:d3:3c:1e:bf:4f:0c:ee:bb:6a:7d:c8:f8:b4:08:
e1:b7:06:b0:0d:50:1c:cd:b5:c0:8e:d5:e0:d1:de:
00:fa:35:f5:d5:66:10:a3:31:5b:24:26:d7:29:27:
6b:24:91:7c:e6:03:15:0e:81:d1:01:e6:b4:56:aa:
4c:c2:bf:8d:3a:c4:b9:43:1e:c7:02:e3:a2:1b:c6:
14:37:b8:a3:1f:7a:be:4b:35:39:85:25:9f:f7:11:
ba:9a:7d:11:bf:09:df:a9:75:2a:f3:c8:43:62:03:
fc:83:cf:88:10:d9:48:3e:85:a1:d3:c5:4a:00:ae:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F1:0D:9C:B7:83:31:29:A1:7D:42:C9:9D:04:2F:B0:AB:5B:08:6D
X509v3 Authority Key Identifier:
keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32332d3234203d3e20313439373439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.110.0/23
Signature Algorithm: sha256WithRSAEncryption
86:18:3d:0c:29:57:54:ca:fd:fe:13:32:03:78:37:d4:42:d0:
50:14:9b:c9:a0:ab:43:d4:2b:f6:0e:5e:82:d6:3e:ff:73:03:
03:3d:bd:fe:ea:03:30:f1:09:9f:42:cb:b0:dc:ad:8c:04:25:
e9:f7:ee:01:3c:24:3f:8f:0b:6b:8a:fd:de:51:87:10:69:da:
1b:7c:3c:97:9a:84:a9:01:56:c9:72:66:30:a2:c5:ee:79:79:
f7:47:76:b3:71:f3:f4:aa:d1:6c:c7:65:5c:55:42:3b:6a:cb:
a7:8d:ab:d7:8d:da:7e:e7:0f:8d:26:83:75:5f:78:05:bd:d8:
5d:c1:4b:fe:cf:70:30:5f:00:77:e5:c4:0e:40:08:d1:2c:6c:
c6:13:98:7c:97:00:70:93:dd:5e:0d:53:c4:32:48:96:3f:39:
7b:2d:08:01:80:e7:20:cf:10:17:5d:5d:ec:fd:8d:39:70:56:
ce:30:60:d3:35:38:8a:75:3c:48:39:10:f4:bb:0f:c7:96:f8:
d8:e1:ef:74:0a:96:65:87:31:e9:bd:96:d3:af:d4:d8:2c:85:
55:97:0f:15:b1:2b:4f:8d:d0:38:88:b3:75:55:05:01:7c:85:
e0:bf:83:b4:3f:a4:b6:35:4e:85:8b:57:bb:6f:65:41:9d:29:
23:4b:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 18:39:38 2024 by rpki-client on console-fra.rpki-client.org