Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32332d3233203d3e20313439363635.roa
File: 3130332e3138322e37382e302f32332d3233203d3e20313439363635.roa (raw, json)
Hash identifier: IWtyOq3L9262llL9ls7Px6OxbMnx23Gbeg7U9Y80iTk=
Subject key identifier: B4:85:B7:32:4C:18:D3:54:80:0F:7E:98:FA:88:8D:D7:CB:83:64:37
Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
Certificate serial: 61C76020EAE204EBE8307C379048DDB63DC7A8A6
Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32332d3233203d3e20313439363635.roa
Signing time: Wed 02 Oct 2024 14:00:50 +0000
ROA not before: Wed 02 Oct 2024 13:55:50 +0000
ROA not after: Wed 01 Oct 2025 14:00:50 +0000
asID: 149665
IP address blocks: 103.182.78.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 07 Oct 2024 14:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:c7:60:20:ea:e2:04:eb:e8:30:7c:37:90:48:dd:b6:3d:c7:a8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
Validity
Not Before: Oct 2 13:55:50 2024 GMT
Not After : Oct 1 14:00:50 2025 GMT
Subject: CN=B485B7324C18D354800F7E98FA888DD7CB836437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d7:b0:cd:35:35:b7:d3:a3:c3:13:94:c5:9d:
88:28:d3:b8:3c:2d:ab:35:45:ee:8b:99:ac:ae:cb:
23:38:88:24:a7:31:68:30:64:38:85:a8:f3:f9:b8:
12:c3:17:fb:4b:fa:b9:f0:23:3a:46:5d:3d:9c:f1:
1b:e0:e5:94:d9:ce:a5:96:69:6c:75:f0:84:5e:ab:
1e:84:36:0d:d6:57:47:5b:cd:b2:68:6c:9d:33:3f:
1a:27:d1:94:d7:dd:75:1e:be:66:98:8c:31:32:94:
7f:10:96:88:1b:e8:99:2d:da:b1:d2:be:42:ec:f2:
39:f6:35:d9:16:2a:db:dd:13:8b:eb:7a:ff:41:3f:
e8:25:40:8c:de:eb:d7:d5:dd:77:61:07:99:8f:cc:
39:93:da:bd:e2:9f:3f:e0:94:e2:f2:6e:8c:47:e5:
27:25:15:bf:86:fa:0f:39:7b:aa:22:70:57:11:6d:
d3:27:cd:93:d4:f0:53:62:09:99:33:08:5a:d2:be:
a6:d4:2e:b2:6c:bc:3b:aa:19:0b:0c:0a:fa:d4:9a:
1b:16:5b:df:38:3b:09:c6:bb:f9:0d:7f:6b:e4:25:
e8:e2:0d:31:e0:ad:20:55:62:0c:92:40:de:1e:d1:
cd:04:fb:a0:b2:a8:fa:64:e8:0f:f5:3b:6a:59:38:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:B7:32:4C:18:D3:54:80:0F:7E:98:FA:88:8D:D7:CB:83:64:37
X509v3 Authority Key Identifier:
keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32332d3233203d3e20313439363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.78.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:0e:3b:01:da:e6:a2:7c:0b:5c:a0:6f:c7:13:33:37:ba:eb:
8a:ef:0e:8b:3e:18:58:d9:41:f2:75:9d:db:aa:2a:3e:36:0b:
9c:4f:ec:7e:2d:24:f0:50:37:a9:f0:4e:5e:da:b9:8e:42:ef:
14:3c:34:e3:12:63:ef:e6:fb:c7:3b:bf:60:a8:26:76:6b:39:
98:a9:15:57:ac:01:c0:9a:b4:08:d3:d8:26:b6:7f:a8:94:e5:
3d:70:15:4d:af:b3:b0:81:bf:9f:e0:8b:dd:84:12:e2:70:fa:
75:7d:17:fc:a1:ca:62:bf:57:5b:e3:bf:53:7d:b9:1a:41:c1:
13:16:88:6e:c1:86:56:d1:25:88:7c:73:3a:17:64:80:cb:3c:
fb:20:28:2d:69:7a:89:5d:61:fd:86:bd:75:ff:1a:c6:65:80:
82:44:4f:de:5e:fe:35:0a:51:e5:87:ee:31:48:59:14:38:f6:
d0:86:64:bd:0d:fe:27:10:4c:f5:73:7b:4d:06:d0:60:de:3f:
5f:c8:62:81:a2:d5:2b:39:f0:ef:00:bc:13:98:f0:26:bc:03:
ce:03:26:f1:db:73:bb:e4:bd:d3:bb:ed:6a:70:07:68:c8:28:
08:ca:84:63:55:60:1e:4d:0b:bf:af:45:ae:d1:d5:1f:3c:c2:
d8:10:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 19:10:51 2024 by rpki-client on console-ams.rpki-client.org