Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313431393234.roa
File: 3130332e3136352e3235322e302f32342d3234203d3e20313431393234.roa (raw, json)
Hash identifier: 3MvwZ1LhI/ydFYeq9r/1Cy2I87cB4iS1tbKbFoFVHKE=
Subject key identifier: 88:97:9A:2A:A9:C7:B0:B5:A4:FC:B9:0A:6C:D3:7F:90:C4:A0:D6:08
Certificate issuer: /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
Certificate serial: 74E24ABC19F89F7C2D1DB59A43126132B07295FB
Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313431393234.roa
Signing time: Sat 12 Oct 2024 11:00:02 +0000
ROA not before: Sat 12 Oct 2024 10:55:02 +0000
ROA not after: Sat 11 Oct 2025 11:00:02 +0000
asID: 141924
IP address blocks: 103.165.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 02:56:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e2:4a:bc:19:f8:9f:7c:2d:1d:b5:9a:43:12:61:32:b0:72:95:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
Validity
Not Before: Oct 12 10:55:02 2024 GMT
Not After : Oct 11 11:00:02 2025 GMT
Subject: CN=88979A2AA9C7B0B5A4FCB90A6CD37F90C4A0D608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:f6:82:a3:14:86:40:5d:a3:6b:09:9f:49:
69:83:1d:29:fa:e6:c1:0e:40:17:1f:86:c5:06:3d:
6a:1f:0b:3e:7f:9a:37:66:0e:ea:ee:84:65:fd:c0:
e6:b8:b9:ef:89:74:76:dc:6b:83:44:f4:b7:94:8e:
a8:2c:d1:71:21:d7:d1:33:60:46:e4:7e:47:3e:52:
7f:c1:f0:99:e2:29:5f:64:ff:4d:bc:a7:ba:13:61:
a9:56:81:c7:c3:18:e9:d5:c3:da:c0:af:1e:0b:8d:
b8:4c:e4:f3:96:ea:5f:29:a8:f2:9c:12:87:d6:9b:
d7:5b:51:db:f1:18:3e:0a:09:c8:17:b4:99:79:16:
04:0a:a4:26:66:69:02:07:1c:28:90:48:56:b4:c1:
1a:93:45:e2:b6:49:83:40:e1:e0:e1:87:89:33:22:
00:fc:ea:87:41:65:ea:bb:c0:e2:1b:38:dd:12:7c:
5a:cc:d2:0e:e2:55:2b:6c:89:25:db:83:e5:32:a3:
25:21:28:5f:fd:20:11:8f:f2:1f:87:61:3f:31:33:
e2:2a:8c:0c:28:14:94:4c:82:e9:52:a4:d5:3b:85:
56:8f:5c:94:9a:1b:08:60:b6:a7:a3:47:c9:de:4d:
97:4f:12:5f:72:ba:31:53:51:00:c9:b1:19:55:ff:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:97:9A:2A:A9:C7:B0:B5:A4:FC:B9:0A:6C:D3:7F:90:C4:A0:D6:08
X509v3 Authority Key Identifier:
keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313431393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.165.252.0/24
Signature Algorithm: sha256WithRSAEncryption
33:80:2a:02:eb:31:12:0b:ea:20:51:7e:2c:2e:cf:9b:0b:4b:
18:5d:a3:ca:52:12:a5:b3:a8:af:7b:27:25:8f:f7:c4:1a:3e:
ce:ff:02:40:6c:4d:9f:d0:c7:cb:23:78:82:66:da:dd:88:4c:
26:14:e8:4b:84:5f:84:d4:e6:92:dd:58:ef:eb:60:82:a1:7c:
8a:fc:50:9f:1b:55:54:4a:89:5c:2d:74:76:b1:14:61:01:14:
b0:4b:0c:0d:14:7a:41:ad:4b:98:00:c1:8a:5b:f2:ce:5e:c1:
de:78:c8:74:fc:c3:6b:c2:a0:d8:b4:a7:d1:4c:32:dc:e3:dd:
32:7c:42:62:e8:a3:bd:be:1c:81:ea:97:6e:08:b8:a6:6a:2b:
65:02:98:68:07:99:d3:df:a0:bd:c3:4c:5e:d8:11:0a:77:da:
1a:05:6d:3c:11:ee:fe:80:2a:8f:45:19:b8:5f:46:31:51:23:
a0:9b:5a:41:84:7d:f0:1c:0a:05:57:bc:99:c8:d6:4b:ca:28:
39:20:f1:5b:3f:7d:d6:f2:50:2d:61:35:66:eb:5c:b7:81:31:
3d:43:95:ab:ba:fe:a2:55:62:9b:82:ca:a7:5f:9a:73:72:34:
f0:a1:8e:59:a4:a5:ff:f3:c5:1a:9b:2d:5a:fd:b5:e4:6b:4b:
9c:9c:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 06:33:48 2024 by rpki-client on console-ams.rpki-client.org