Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32332e302f32342d3234203d3e20313531353339.roa
File: 3130332e3233392e32332e302f32342d3234203d3e20313531353339.roa (raw, json)
Hash identifier: Ke/77utPyRtOSY9eg3lNDOUQmjOlQMIfrXurG2RSvo8=
Subject key identifier: A5:F1:BC:76:1F:AF:5F:DB:F2:5F:EB:43:77:16:80:A1:9E:E9:D3:52
Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Certificate serial: 7B5D0FBF94D7B6627C9B5948AAA75C5DB0087A2D
Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32332e302f32342d3234203d3e20313531353339.roa
Signing time: Sat 04 Nov 2023 02:48:58 +0000
ROA not before: Sat 04 Nov 2023 02:43:58 +0000
ROA not after: Sat 02 Nov 2024 02:48:58 +0000
asID: 151539
IP address blocks: 103.239.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 09:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5d:0f:bf:94:d7:b6:62:7c:9b:59:48:aa:a7:5c:5d:b0:08:7a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B
Validity
Not Before: Nov 4 02:43:58 2023 GMT
Not After : Nov 2 02:48:58 2024 GMT
Subject: CN=A5F1BC761FAF5FDBF25FEB43771680A19EE9D352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:34:01:54:a4:91:ae:f9:bf:a0:23:4b:e9:
ef:69:da:46:63:39:fa:77:0f:4e:8a:52:9f:c9:4e:
79:b3:bc:db:3c:16:cc:2d:44:d5:e1:aa:57:24:a7:
36:9d:6d:95:87:58:41:27:29:c4:da:3d:9d:69:8f:
94:39:53:a5:be:e2:66:2e:75:b8:33:1c:17:47:d5:
c1:e1:91:1c:db:99:d5:6b:12:58:1d:45:e2:a3:61:
7c:11:0f:aa:95:63:2e:89:3d:e7:82:8b:c2:41:39:
96:9d:e9:a1:cf:ea:0c:38:d5:21:1d:40:37:e9:7c:
91:52:6d:8e:a4:4a:6f:69:dd:98:3c:1a:7b:ca:43:
cb:4c:dd:5c:ba:fc:00:e2:a0:12:f5:54:a5:a4:94:
ca:05:88:75:9c:0c:e5:ca:d6:d6:cd:d0:23:26:7e:
9a:54:cf:d6:5f:9c:38:76:b2:aa:aa:71:69:ff:12:
c5:50:a4:a7:a4:bc:5d:70:b5:d4:4a:90:bb:d7:2b:
95:e8:50:64:a2:8e:4f:ae:27:e3:b7:d7:a5:0f:b5:
fd:29:07:b8:92:fa:cc:b8:75:92:85:41:03:1c:a4:
00:38:3a:d2:95:2d:c1:c6:3c:0f:97:41:e0:39:d9:
b0:4b:ea:df:50:f4:ea:85:b6:6f:48:1b:a4:0d:8a:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F1:BC:76:1F:AF:5F:DB:F2:5F:EB:43:77:16:80:A1:9E:E9:D3:52
X509v3 Authority Key Identifier:
keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32332e302f32342d3234203d3e20313531353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.239.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6d:11:93:b7:70:ed:39:32:12:3c:0a:91:23:7e:c6:05:48:
35:67:88:32:cc:f6:ac:54:2d:fb:d5:d9:4a:47:8d:23:27:16:
4b:4c:5e:d3:5c:d1:dc:d2:fb:57:e3:fc:33:a6:70:2b:d4:bd:
98:ab:aa:af:99:e2:6c:9d:c7:fd:70:85:cc:d9:27:ea:72:e2:
37:90:a4:91:c4:95:08:f5:a5:a0:1e:14:f8:98:61:46:4f:bd:
1a:9e:94:2b:67:e0:df:7b:2d:b4:c5:cd:00:0a:e9:d0:c5:e8:
e2:93:e1:75:50:c0:be:d5:2e:42:7c:1f:08:e4:26:b3:3f:5a:
d1:6a:8e:d1:0c:d7:49:5e:5a:84:4d:c3:5b:3c:52:49:5d:eb:
9b:20:06:0a:c9:38:c3:e5:71:38:c1:d1:55:a3:6f:24:7c:6b:
8b:78:f3:fc:5d:b3:f7:dd:e0:76:19:81:dc:fc:9c:7b:00:d1:
1a:97:5f:be:42:e2:25:0f:5f:e2:6c:c0:d8:47:a5:e0:69:e3:
68:e3:c6:76:5a:f0:e3:58:3d:2c:4c:2b:36:eb:a6:57:e3:ec:
49:71:0b:50:9c:22:af:36:8c:11:79:93:e4:69:b4:20:8b:8a:
d9:0f:fd:2c:c4:29:3c:41:76:ac:c3:32:75:57:63:e5:45:05:
6c:ee:80:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org