Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39322e302f32332d3234203d3e20313331373338.roa
File: 3130332e32312e39322e302f32332d3234203d3e20313331373338.roa (raw, json)
Hash identifier: 1LyLi+czNpwsmf1p6XoCixK0C7xXBGqv1u/W45QFvNY=
Subject key identifier: 60:4A:50:F9:62:CF:4F:AE:A0:1C:A7:66:21:AF:7D:3A:5C:1C:A3:1B
Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
Certificate serial: 621A07C6D69BE0F482CEF18E498121CF6FE2111B
Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39322e302f32332d3234203d3e20313331373338.roa
Signing time: Sat 12 Aug 2023 05:00:00 +0000
ROA not before: Sat 12 Aug 2023 04:55:00 +0000
ROA not after: Sat 10 Aug 2024 05:00:00 +0000
asID: 131738
IP address blocks: 103.21.92.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 15:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:1a:07:c6:d6:9b:e0:f4:82:ce:f1:8e:49:81:21:cf:6f:e2:11:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5
Validity
Not Before: Aug 12 04:55:00 2023 GMT
Not After : Aug 10 05:00:00 2024 GMT
Subject: CN=604A50F962CF4FAEA01CA76621AF7D3A5C1CA31B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:01:51:04:2b:8a:63:5d:93:1c:ed:87:6a:87:
39:13:7b:0d:4d:f5:dc:5b:a7:f6:33:a6:a1:d1:a0:
c1:0d:d3:4c:62:c7:2a:25:79:ef:c4:77:e9:8a:cf:
18:2f:f2:86:aa:4c:5b:75:f0:1f:4d:73:8c:35:b5:
eb:53:04:9c:a5:4d:f1:26:69:a4:00:6d:09:f8:a4:
5d:06:a1:22:bb:f3:a3:ce:52:c8:8f:79:cd:ff:83:
21:89:bb:47:c8:d6:91:a7:d8:d9:f1:bd:2b:8f:44:
e3:39:8b:b9:56:af:96:aa:75:d7:ad:8e:63:ee:2a:
1a:63:05:e1:43:32:6b:b4:0a:70:90:d6:b8:1d:9a:
0d:89:e8:d9:b9:63:c5:83:88:43:91:3f:43:07:fc:
80:85:90:c7:8f:74:95:39:67:cc:dc:ee:ad:1e:9d:
21:54:41:3e:fd:6f:56:b4:25:a9:09:ef:b1:e6:e7:
a0:14:23:1b:e7:a4:23:0c:c4:94:21:8c:97:d8:97:
bd:36:38:47:e5:ce:a2:11:37:80:7b:81:fe:12:82:
70:ac:ca:1a:ca:e4:de:0a:b5:7a:3a:24:dc:de:20:
f8:47:5b:55:a1:38:60:a8:b7:fd:3d:66:41:66:5e:
ab:eb:bc:84:99:fb:bd:79:3a:c9:85:36:c4:e1:cb:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:50:F9:62:CF:4F:AE:A0:1C:A7:66:21:AF:7D:3A:5C:1C:A3:1B
X509v3 Authority Key Identifier:
keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39322e302f32332d3234203d3e20313331373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.21.92.0/23
Signature Algorithm: sha256WithRSAEncryption
57:4e:2b:d4:e4:58:53:90:ee:0e:bb:52:17:53:e9:bf:1b:e3:
e1:ad:1b:ec:95:68:24:35:b1:ed:5c:35:60:48:7b:e9:7d:c1:
35:b6:39:f9:03:5f:49:56:82:a7:4f:fd:e7:dc:9c:bb:d6:81:
fc:83:f2:23:80:d2:ab:e6:a9:b8:b3:c5:fb:9d:df:9a:10:95:
e2:84:2d:1b:d4:51:19:ae:64:59:1e:64:d3:1f:21:a1:d2:dd:
3b:78:0e:3c:a8:2d:43:80:1a:6e:47:06:18:1a:4a:3b:53:0b:
df:a4:3e:23:3a:73:78:77:08:e4:0a:6e:08:68:7f:28:93:a5:
92:50:c5:9a:db:d4:2c:27:0a:60:04:a4:bf:85:5a:3a:5a:d1:
40:42:b6:8f:e4:71:8b:2e:ea:01:e8:e4:b8:95:ae:1c:92:3f:
ac:e8:50:74:71:43:b3:b9:47:b9:3c:30:08:7f:7f:7a:7e:8a:
df:a0:e2:e4:14:84:d1:c0:f9:24:72:44:e0:c9:95:06:7d:9e:
05:54:db:93:39:dd:22:5b:31:44:3f:a5:a7:32:fc:08:fa:dc:
fd:7e:a9:bc:c1:06:fb:5d:df:27:f2:ef:27:f1:ea:a0:a3:e1:
b9:84:11:4d:d9:a0:04:ce:a9:2a:4c:51:e2:3f:e5:a1:36:bc:
8e:8c:c1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org