Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32332d3234203d3e20313432333736.roa
File: 3130332e3231302e36382e302f32332d3234203d3e20313432333736.roa (raw, json)
Hash identifier: QEUHim7scDbzRiaJOM+q5jEqkwxiP6ZCFc5RagNnSFU=
Subject key identifier: 80:5B:70:7B:96:52:DC:FE:24:C0:D9:E4:D2:62:19:57:47:C4:50:05
Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A
Certificate serial: 3C8C2EBA2C3B451AB1B90734A95FF7D4AE3A15C6
Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32332d3234203d3e20313432333736.roa
Signing time: Tue 01 Aug 2023 23:06:02 +0000
ROA not before: Tue 01 Aug 2023 23:01:02 +0000
ROA not after: Tue 30 Jul 2024 23:06:02 +0000
asID: 142376
IP address blocks: 103.210.68.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 15:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:8c:2e:ba:2c:3b:45:1a:b1:b9:07:34:a9:5f:f7:d4:ae:3a:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A
Validity
Not Before: Aug 1 23:01:02 2023 GMT
Not After : Jul 30 23:06:02 2024 GMT
Subject: CN=805B707B9652DCFE24C0D9E4D262195747C45005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:63:5f:f0:12:ab:58:4a:0c:dc:e0:5a:ca:
58:48:21:3b:4c:d2:41:40:f6:50:26:61:dc:97:57:
7e:cb:5a:86:bc:a9:0e:f8:c6:55:5e:fa:66:ae:b9:
d9:c3:bd:5a:93:d6:67:af:7c:a5:78:0c:5a:2f:f8:
67:c2:56:4f:34:40:b8:5a:81:4a:45:6a:3f:82:6f:
7b:66:a8:1f:1c:48:c1:39:57:17:5c:83:5d:02:fa:
80:99:f0:cc:84:86:c7:d6:80:27:13:f1:0b:29:1f:
19:f5:a2:80:5d:df:31:75:23:c0:0d:4c:3c:c2:c8:
6d:a5:92:df:35:5f:82:df:2b:1c:f6:ca:23:78:12:
e8:2f:0d:53:d8:3d:68:d7:56:55:ba:8e:5d:f9:aa:
29:4d:3a:3a:8f:5d:13:fc:82:1a:21:a4:32:fe:2a:
1e:27:03:59:1d:88:d5:d5:5d:b9:cc:46:58:e7:85:
2d:4e:ba:c0:c0:6f:d6:e3:9c:96:66:b7:5a:ba:ba:
de:2f:41:4a:ee:cb:ea:de:8b:40:47:33:a6:a1:9f:
c2:d7:f0:36:11:53:36:cf:a1:1d:e5:de:4b:04:c0:
25:1b:bf:d4:a6:f3:44:73:27:a3:87:0f:d8:af:b5:
25:a4:72:b6:cd:d0:2c:c5:77:af:46:13:09:ae:f8:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:70:7B:96:52:DC:FE:24:C0:D9:E4:D2:62:19:57:47:C4:50:05
X509v3 Authority Key Identifier:
keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32332d3234203d3e20313432333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.68.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:87:e8:90:3f:d0:c7:da:d8:5e:ab:a6:44:e8:a1:87:a7:4e:
d9:bd:b1:4f:47:55:0b:ea:65:ad:0f:1a:01:dd:b4:1f:77:5c:
f5:0c:9c:59:ee:97:2e:e8:e5:c6:a7:ef:57:54:27:94:e6:55:
7d:79:81:ac:6a:c9:30:65:12:61:62:5d:0e:1a:3f:d6:c6:e7:
bd:0b:00:7f:00:07:ff:50:a6:76:49:b4:89:ad:c8:86:63:ef:
94:bc:82:fb:95:4f:42:0f:2e:47:9d:3f:23:5c:27:c8:aa:68:
ce:28:c0:e6:e2:52:20:bc:42:05:c5:48:83:6a:55:04:57:97:
ae:e6:9b:77:c0:de:7e:cc:60:a4:d5:88:ce:4c:49:ce:44:ec:
1c:40:9e:d1:47:fd:0d:4d:3c:e8:5d:ab:36:bc:6a:32:d7:18:
bd:7d:46:a5:48:a0:d3:90:94:ce:c0:4c:8b:58:a5:17:dc:b4:
38:03:a3:dd:89:89:8c:7c:42:05:a7:a8:90:9b:26:8c:d2:a6:
f4:c3:43:01:a9:36:72:91:bd:e2:2c:a0:04:5b:9e:12:6a:1d:
24:58:34:f3:ef:99:18:f3:b0:14:40:73:45:30:f3:c9:22:cf:
22:d8:77:36:8e:1f:59:55:be:a5:b6:0a:fa:5b:b3:b0:2a:d3:
aa:d7:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:53 2024 by rpki-client on console-ams.rpki-client.org