Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa
File: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (raw, json)
Hash identifier: mbpkahNE+9KiPHSGjoXgIOl1shOueF+bJVZgj1KtSSg=
Subject key identifier: 4E:99:C8:F9:C9:E7:40:7C:16:BC:01:93:C1:5B:9D:A5:88:24:AD:FE
Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
Certificate serial: 06FA3AD79C71100BF1156627E41B6A29409A5E63
Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa
Signing time: Wed 02 Oct 2024 14:00:50 +0000
ROA not before: Wed 02 Oct 2024 13:55:50 +0000
ROA not after: Wed 01 Oct 2025 14:00:50 +0000
asID: 149665
IP address blocks: 103.182.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 14:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fa:3a:d7:9c:71:10:0b:f1:15:66:27:e4:1b:6a:29:40:9a:5e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
Validity
Not Before: Oct 2 13:55:50 2024 GMT
Not After : Oct 1 14:00:50 2025 GMT
Subject: CN=4E99C8F9C9E7407C16BC0193C15B9DA58824ADFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:27:04:1f:5f:1b:ed:80:6a:07:0a:a5:2c:
12:cc:6c:32:ad:eb:43:49:e4:67:cb:36:5e:a4:91:
ac:6d:f6:79:06:67:01:7a:f8:69:f3:bc:ce:d5:fb:
1e:ba:2f:ea:c2:a6:c5:50:7d:d7:c4:d4:d9:d3:08:
33:0a:3e:d4:39:de:a2:da:e2:16:42:c4:2d:3e:e5:
93:54:17:88:19:f9:1c:ef:ba:ff:a9:de:98:34:5b:
9e:dc:24:83:e4:4c:a6:ae:74:90:17:a5:f9:07:11:
8d:e2:b3:1f:21:da:e4:17:61:35:54:06:e0:42:bd:
2b:6b:83:f9:da:dd:3c:75:a7:9b:8a:1b:b9:cc:7e:
cc:7e:e0:2e:ac:47:00:40:29:ab:ed:be:94:16:fa:
e2:93:5c:ef:c8:14:9e:17:28:43:fd:8c:be:85:92:
25:44:13:04:2a:1a:82:38:c5:c6:53:9e:89:cd:34:
85:f4:46:d3:17:c2:3f:58:a7:63:80:34:19:7c:a6:
b8:60:d8:c1:3a:f8:ca:04:ce:35:64:30:de:0a:0d:
89:b4:0d:f7:ae:cf:2d:20:49:b1:7b:c9:97:a9:46:
48:c4:3d:a1:3e:e3:69:6a:0f:a1:fa:b6:55:cc:56:
a2:6b:28:dc:09:25:86:4d:23:c1:13:b9:09:21:9e:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:C8:F9:C9:E7:40:7C:16:BC:01:93:C1:5B:9D:A5:88:24:AD:FE
X509v3 Authority Key Identifier:
keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.78.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4a:24:07:0f:ad:ca:21:ad:58:2a:4a:9c:bc:79:fa:d3:79:
ee:28:5c:d9:24:e5:8d:f8:97:be:ad:77:42:d2:b5:1c:a5:9c:
35:2b:b4:57:ef:fd:20:99:05:e5:f3:7d:5a:22:13:d1:1c:81:
6f:90:8c:13:dd:cc:b0:3c:3e:af:78:96:a3:8c:be:0c:35:bf:
94:c4:5d:26:63:3d:96:6b:18:55:20:e5:5b:7a:28:82:93:dd:
98:48:9f:15:96:86:4f:6d:04:01:77:5e:1d:4e:7d:db:41:d2:
42:b2:31:4d:05:49:d4:82:2a:06:8d:b3:76:02:17:14:33:5d:
f6:87:7b:f9:57:81:3b:05:ca:ca:5f:08:01:a7:28:80:62:08:
0d:e8:6e:12:a6:fc:de:d1:3a:b2:76:de:39:16:97:94:11:f0:
9a:4f:1f:9a:4c:45:3b:38:e7:94:1d:5d:9f:f3:88:35:f2:82:
6a:26:7d:c5:68:88:9d:63:d2:93:13:65:35:ce:64:18:c3:a2:
1b:ee:18:b7:76:6c:a2:ea:b7:0f:3c:de:d1:d0:2d:33:e7:27:
0a:1b:37:b6:c7:2d:e3:f2:c4:39:69:b5:f6:c5:fb:be:38:4e:
60:58:4f:d8:b7:ed:11:c4:d1:d5:da:b2:91:73:9e:06:5e:17:
ec:e6:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 20:37:54 2024 by rpki-client on console-fra.rpki-client.org