Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa
File: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (raw, json)
Hash identifier: Wt92DBbbEEWJOc7zxFljzPMzCgh9zQpMjYjSvmrKnJY=
Subject key identifier: F6:FC:2F:59:21:5C:6E:6C:92:74:E5:50:FB:D9:84:75:60:16:37:8D
Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
Certificate serial: 102EAFF56A0DA80241D5DE05DE72269CDCE931B4
Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa
Signing time: Wed 02 Oct 2024 14:00:50 +0000
ROA not before: Wed 02 Oct 2024 13:55:50 +0000
ROA not after: Wed 01 Oct 2025 14:00:50 +0000
asID: 149665
IP address blocks: 103.182.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 14:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2e:af:f5:6a:0d:a8:02:41:d5:de:05:de:72:26:9c:dc:e9:31:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6
Validity
Not Before: Oct 2 13:55:50 2024 GMT
Not After : Oct 1 14:00:50 2025 GMT
Subject: CN=F6FC2F59215C6E6C9274E550FBD984756016378D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:96:3d:b0:7c:0b:6d:ef:56:31:53:0e:00:
20:cb:78:11:e8:e2:6f:f3:c3:9f:1f:05:52:f3:37:
5f:71:b5:04:8a:ab:91:1f:17:61:a2:10:d9:35:9f:
a8:5b:bb:bf:24:a8:aa:88:2a:51:4d:aa:35:ab:ea:
46:10:85:b3:58:ac:68:e2:ad:af:ea:ba:e0:bd:69:
b2:bb:45:21:ab:f1:ca:53:a8:d6:4f:71:8b:23:f6:
f9:da:ad:7c:f0:5d:58:18:3a:7d:e5:86:21:e5:a8:
95:8b:6d:1a:a6:52:78:29:db:af:9c:c8:47:05:63:
81:49:8a:30:e3:0e:bc:be:66:c1:70:c6:d6:ae:74:
2e:be:df:1a:4d:57:6c:51:4b:3c:20:cd:a7:8e:bf:
23:e3:69:d5:7c:4b:86:2b:4e:b4:06:f2:49:4e:1c:
6a:da:e4:aa:d4:24:f4:6b:83:d8:e4:a1:41:f3:94:
61:38:56:96:97:d9:80:f0:0e:98:72:ba:9b:c0:1d:
3e:ce:58:ab:21:96:5a:14:07:9c:e4:bc:f7:2d:23:
e1:46:69:de:a9:53:1f:cb:bc:34:e5:eb:58:b2:d6:
27:be:83:9c:6f:ea:46:80:3e:95:8c:4c:83:30:1a:
71:bd:92:c5:25:6c:30:71:fc:59:f8:77:5a:8c:bb:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FC:2F:59:21:5C:6E:6C:92:74:E5:50:FB:D9:84:75:60:16:37:8D
X509v3 Authority Key Identifier:
keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.182.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:da:aa:af:65:d5:04:ae:f0:9b:6c:47:c9:b5:87:37:97:fc:
02:99:64:e1:d7:ac:4e:3e:cb:41:be:ab:37:bc:26:0b:c4:18:
57:c6:2c:f4:cd:6e:b5:05:a3:cb:68:fb:4a:4c:29:23:94:21:
0d:0c:0d:02:a8:ee:45:54:92:d4:99:42:12:57:33:22:85:e4:
11:77:ef:77:2d:56:f7:4e:e2:29:d0:0b:f5:74:a9:01:64:4e:
86:e9:b8:3c:a4:7f:50:85:e9:a3:6c:d7:4f:60:b4:93:d6:22:
10:73:93:a3:28:f4:16:d5:a0:82:75:6d:09:6d:98:d1:95:58:
f6:ec:57:73:9b:f2:50:a5:e8:4b:e5:44:d7:70:f1:6a:cb:38:
e2:0c:32:85:c8:4e:e3:17:d9:55:12:f6:50:09:9d:fc:59:c1:
cf:2d:79:b1:53:17:fe:83:9b:65:84:36:a4:f1:6c:87:32:55:
0b:a0:17:94:63:ac:0f:44:be:83:2c:80:0b:1e:20:c3:eb:df:
20:2d:54:d0:49:40:17:de:14:9e:f4:0d:a7:05:ea:83:40:f6:
7c:51:81:5b:c4:4c:fd:68:8d:fd:ae:19:9d:e4:dd:a9:59:13:
0e:e3:21:4d:2c:1e:e5:ee:df:0b:bb:95:cf:44:1a:6a:c2:67:
3d:38:4e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 20:37:54 2024 by rpki-client on console-fra.rpki-client.org