Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131392e302f32342d3234203d3e203438343635.roa
File: 3130332e3137322e3131392e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: cvzl6cjvqrI6eT54jkwxYZRAliVaec0uCmVA3aniRC0=
Subject key identifier: FC:91:62:01:B3:47:46:6F:23:A0:6E:B6:81:1E:44:A3:FE:A0:60:0A
Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial: 628FAAA631B94DEF8930DBEFC8A869BA800201F4
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131392e302f32342d3234203d3e203438343635.roa
Signing time: Mon 15 Jul 2024 00:02:29 +0000
ROA not before: Sun 14 Jul 2024 23:57:29 +0000
ROA not after: Mon 14 Jul 2025 00:02:29 +0000
asID: 48465
IP address blocks: 103.172.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 12:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8f:aa:a6:31:b9:4d:ef:89:30:db:ef:c8:a8:69:ba:80:02:01:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Validity
Not Before: Jul 14 23:57:29 2024 GMT
Not After : Jul 14 00:02:29 2025 GMT
Subject: CN=FC916201B347466F23A06EB6811E44A3FEA0600A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:f4:2e:e5:9b:db:a4:a8:03:5e:02:79:04:
1d:e8:68:44:6f:bf:98:5e:58:8c:6e:8b:1a:69:58:
19:db:05:98:14:a0:c0:94:42:07:40:61:11:8d:e4:
4a:8e:bc:f6:af:9d:16:76:d8:f0:a2:5e:75:23:0c:
71:21:c4:9c:e6:a7:23:10:00:23:e6:8a:a7:c2:e8:
e7:ee:80:02:db:8e:86:b4:08:64:dd:4f:cd:88:5a:
74:44:ed:9e:7e:0d:36:6a:d6:e2:ce:01:7a:e0:e4:
9b:74:cd:7a:57:93:53:cc:d9:62:35:d0:16:96:33:
4b:4f:45:e3:8d:74:e1:cf:85:f0:f5:0a:60:ce:8a:
71:39:5f:14:2f:88:1c:01:7a:86:1b:7f:b1:8a:43:
4a:ae:29:d5:68:59:10:a9:35:87:ab:a0:c8:95:8a:
ae:dc:96:c0:e9:51:1c:ec:4d:b1:d7:18:cc:e9:c1:
9d:3f:50:9e:5d:c5:38:d8:05:00:d2:11:19:49:42:
a3:65:4e:88:fd:92:76:b8:03:95:a7:14:4a:96:19:
ae:7f:64:3c:2d:33:d3:d8:98:ce:b2:af:dd:bf:97:
bc:1c:33:59:ff:34:f6:4e:25:5a:fd:55:d2:f1:7d:
45:fe:dc:09:40:a2:ab:0d:ac:7a:37:37:38:4c:73:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:62:01:B3:47:46:6F:23:A0:6E:B6:81:1E:44:A3:FE:A0:60:0A
X509v3 Authority Key Identifier:
keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131392e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:59:24:54:de:3f:b8:ac:90:bf:ee:3b:46:e0:fc:5d:7e:9f:
d3:7a:95:bb:20:68:23:51:f8:c2:15:37:14:7c:8e:0e:09:e7:
2f:08:c2:59:61:9e:bd:67:a4:a2:f0:45:d9:f5:d3:48:5d:59:
a6:05:3e:bc:b2:49:37:a2:12:75:cc:8b:ea:35:0a:3a:8e:3a:
5e:01:b4:29:67:1c:ae:9e:0f:df:9e:65:fb:d6:5e:6a:54:2a:
73:0a:d6:67:79:df:88:bd:04:56:b6:41:c3:4b:05:c6:44:ec:
78:ed:a2:fb:c6:79:bc:c9:b0:1f:0d:83:eb:9b:c7:07:1e:ac:
3f:d8:18:42:00:78:27:ce:7e:4f:3c:aa:2f:6b:b5:53:4b:5f:
1f:c1:7a:3f:db:8d:4a:68:fe:19:3b:cc:38:30:e9:e2:df:61:
0f:75:30:5c:8c:34:42:31:de:14:21:22:a7:0c:f7:21:8e:b9:
1a:db:f5:2d:8c:01:32:c7:80:84:bb:70:35:0e:2e:03:72:41:
e2:97:2b:35:d0:fc:7e:31:78:76:34:89:c9:ac:6c:af:3b:fe:
ca:50:05:30:9f:3d:a6:13:f7:fe:c7:a0:4a:32:f7:ff:24:35:
e9:03:6a:9d:63:61:e8:7a:13:f2:cc:c8:51:fb:c5:51:ca:4a:
91:a2:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:09 2024 by rpki-client on console-ams.rpki-client.org