Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3235302e302f32332d3234203d3e20313335343738.roa
File: 3130332e36312e3235302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: NLjJoQykQ8P1x6lAOkPlKDuseIMtuJChWg49tpYgGDA=
Subject key identifier: 66:23:C6:D5:FE:67:72:41:4E:F2:51:A8:EE:44:21:97:F6:00:58:A4
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 1C43E87DFF2E262AB16F41DB69FE30656A598B30
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3235302e302f32332d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:16 +0000
ROA not before: Mon 01 Jul 2024 00:57:16 +0000
ROA not after: Mon 30 Jun 2025 01:02:16 +0000
asID: 135478
IP address blocks: 103.61.250.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:43:e8:7d:ff:2e:26:2a:b1:6f:41:db:69:fe:30:65:6a:59:8b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:16 2024 GMT
Not After : Jun 30 01:02:16 2025 GMT
Subject: CN=6623C6D5FE6772414EF251A8EE442197F60058A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:64:4a:af:0b:b2:d9:91:12:2c:41:4d:4f:
24:e3:b7:7b:70:47:c3:49:4b:1a:ae:a7:1d:db:2a:
ec:7a:74:30:08:cd:3a:b2:26:75:99:1d:85:7f:b6:
7f:59:92:36:f7:45:b3:83:05:76:87:c5:0b:db:33:
0e:80:36:10:a3:2d:a6:e7:73:6d:75:82:9d:78:a0:
c7:02:5d:64:99:4d:52:5b:ab:39:8f:d2:96:8b:50:
c9:db:e0:9d:17:c0:65:2a:3b:72:3d:42:fe:f8:80:
cf:10:06:a3:ad:22:4f:90:5e:0e:23:6f:a5:ae:fe:
05:e4:2a:35:40:2c:f1:f7:0f:78:af:09:c8:e4:f4:
cf:40:e0:38:6c:f7:1f:06:2c:88:ba:e8:2c:6f:4f:
ac:6d:f1:2d:38:88:c9:bb:35:3b:3c:2e:7b:2f:ec:
a9:0e:8f:6d:c6:cd:a0:f5:9f:8b:8e:a1:55:d8:a1:
87:92:1d:7e:39:6b:2f:87:48:e6:98:11:7c:cf:b5:
66:f3:b0:04:6f:b7:26:93:9c:99:ec:bb:46:00:e0:
9e:1c:14:57:82:a4:49:97:8f:96:b4:01:f4:41:49:
ef:32:42:9f:84:3f:c1:63:78:28:ed:1b:79:4a:8a:
f8:66:ba:72:6b:0b:7e:1b:b7:38:a0:6c:0e:68:8f:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:23:C6:D5:FE:67:72:41:4E:F2:51:A8:EE:44:21:97:F6:00:58:A4
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3235302e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.250.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:24:e9:c7:60:fa:ac:46:d7:03:90:ec:aa:9a:b9:98:fd:2b:
de:3c:f3:39:18:f4:77:1d:da:7a:5e:dd:52:fe:1a:ae:ca:7a:
82:3a:73:ab:4d:34:33:24:11:23:24:91:ea:d3:f7:49:96:9a:
00:d7:d2:2f:7c:21:93:5a:8f:91:20:54:b1:dd:d1:7e:8f:00:
fd:5f:19:29:d5:25:e3:59:a6:36:33:a9:10:5a:cd:3a:50:3e:
dc:50:c3:47:da:bc:af:f1:d1:b1:99:b9:52:96:ac:4c:2a:07:
19:00:f0:51:65:9d:3e:7b:01:87:4b:fe:96:6a:eb:a6:21:d3:
7a:ca:99:8b:54:66:00:6e:ab:3f:38:4f:64:4e:9e:de:f6:7e:
09:a6:f5:5d:44:a9:62:61:a8:6b:28:92:66:3e:d7:12:a6:b6:
4f:1c:4b:72:37:25:dc:3e:ff:ee:4a:89:d8:a2:0d:9a:56:80:
fa:c6:8a:d0:77:f7:4b:a6:10:eb:40:c8:f3:08:09:28:fe:5e:
1c:c8:a0:3f:ad:45:cb:63:3a:49:e2:e2:14:68:e7:a8:9e:50:
87:26:63:b6:89:60:79:15:ad:6c:2c:ad:53:47:c0:dd:c0:74:
1c:cb:cd:12:09:4b:25:e7:b4:d4:58:ed:86:9f:34:f4:5f:a0:
25:f6:63:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org