Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32342d3234203d3e203138333933.roa
File: 3130332e38372e36362e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier: Zp1U2DbvIRBhAFrEBrhwPryRnEtrug1Au3BAzVIlY4I=
Subject key identifier: B2:D3:22:3E:E5:B1:C1:F3:47:C2:13:5B:36:3D:34:9A:D1:64:7B:38
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 472D0C85545573F80DE059977B29D3784A95CBA0
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32342d3234203d3e203138333933.roa
Signing time: Thu 03 Oct 2024 04:03:25 +0000
ROA not before: Thu 03 Oct 2024 03:58:25 +0000
ROA not after: Thu 02 Oct 2025 04:03:25 +0000
asID: 18393
IP address blocks: 103.87.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 03:26:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2d:0c:85:54:55:73:f8:0d:e0:59:97:7b:29:d3:78:4a:95:cb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Oct 3 03:58:25 2024 GMT
Not After : Oct 2 04:03:25 2025 GMT
Subject: CN=B2D3223EE5B1C1F347C2135B363D349AD1647B38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:4a:04:d2:2d:ba:c3:7c:0f:1b:42:d6:46:
2f:72:d5:4c:7f:46:d7:d8:41:b4:2c:bb:c7:31:05:
06:24:0b:88:60:5b:76:c6:36:c0:a3:7d:34:15:3c:
bd:7d:3c:20:17:74:e2:50:83:62:be:ea:f9:c1:29:
2e:9a:0b:9b:31:91:fd:40:84:fa:5f:dc:8b:44:9f:
99:d1:c2:60:7e:67:78:9f:5b:7a:a4:cc:e2:12:99:
e7:b7:a3:d5:14:63:62:5b:6d:f5:a6:7a:e5:f7:d4:
63:82:ec:c2:bf:dc:35:b5:d0:bd:42:2a:61:03:6a:
a3:bd:da:14:01:2b:3c:81:9b:20:4e:7e:b7:ec:10:
62:6e:7d:32:c1:b9:3c:f6:e4:a8:6b:65:42:0f:86:
60:25:03:71:33:96:fb:81:ba:b0:6e:6a:51:0f:c1:
18:3d:04:ae:62:57:15:e0:d4:74:3f:61:24:90:06:
0a:99:89:eb:e4:8f:7d:d8:0c:fc:aa:d0:78:83:31:
af:ad:5c:d5:55:71:7e:d8:e9:0d:a6:fd:59:3c:bc:
16:b1:93:55:fd:01:be:41:6a:d7:fe:dd:8d:d7:84:
48:9f:db:5d:a7:1e:f1:9c:52:86:92:23:08:be:d5:
b2:49:cc:59:05:38:8b:71:ca:27:9c:65:be:bd:45:
50:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D3:22:3E:E5:B1:C1:F3:47:C2:13:5B:36:3D:34:9A:D1:64:7B:38
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32342d3234203d3e203138333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.87.66.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8d:bb:e2:4d:dd:7d:84:e4:59:97:5d:f8:97:8a:97:2c:f4:
e0:e2:9e:1a:9c:a7:41:fa:6d:42:a6:0e:f4:b6:ff:8a:32:70:
bf:08:37:8e:b7:44:16:f5:b8:cf:ff:35:06:f1:1e:3f:f9:b5:
d8:50:c3:d8:cf:de:8b:b0:e5:55:4e:63:6f:e9:67:c0:52:45:
04:3b:28:1e:4c:eb:1d:70:64:27:40:2c:85:1e:bc:a4:fb:aa:
6d:52:f4:77:67:7e:71:73:2f:28:37:38:ee:b3:3f:83:9f:a9:
d9:60:61:26:83:ac:33:b5:a5:0a:7b:b4:a0:2e:ff:d8:33:e2:
10:4b:3e:4f:60:01:87:ae:8e:4f:4d:67:de:c9:d3:37:3a:d5:
cb:1d:3c:2a:16:a0:45:79:28:2c:93:23:98:9c:0a:cd:b0:ce:
43:bb:1c:fb:b1:a9:0a:bf:09:f8:69:a1:dd:a5:40:8b:29:1b:
c6:5e:23:97:8c:8d:fd:e3:61:34:31:45:c4:24:4d:0f:d9:f2:
80:f3:56:87:72:ff:9b:9b:89:91:77:d2:51:26:c3:92:6c:5e:
18:79:85:8a:92:0a:d2:bc:48:09:0d:a1:6b:4e:d6:fd:30:43:
a4:89:87:ef:07:95:8c:fd:84:2d:9b:d7:7c:17:da:f9:6b:13:
73:5c:86:f3
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIURy0MhVRVc/gN4FmXeynTeEqVy6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3
RTc5RTY0MjAeFw0yNDEwMDMwMzU4MjVaFw0yNTEwMDIwNDAzMjVaMDMxMTAvBgNV
BAMTKEIyRDMyMjNFRTVCMUMxRjM0N0MyMTM1QjM2M0QzNDlBRDE2NDdCMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4CUoE0i26w3wPG0LWRi9y1Ux/
RtfYQbQsu8cxBQYkC4hgW3bGNsCjfTQVPL19PCAXdOJQg2K+6vnBKS6aC5sxkf1A
hPpf3ItEn5nRwmB+Z3ifW3qkzOISmee3o9UUY2JbbfWmeuX31GOC7MK/3DW10L1C
KmEDaqO92hQBKzyBmyBOfrfsEGJufTLBuTz25KhrZUIPhmAlA3EzlvuBurBualEP
wRg9BK5iVxXg1HQ/YSSQBgqZievkj33YDPyq0HiDMa+tXNVVcX7Y6Q2m/Vk8vBax
k1X9Ab5Batf+3Y3XhEif212nHvGcUoaSIwi+1bJJzFkFOItxyiecZb69RVBNAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUstMiPuWxwfNHwhNbNj00mtFkezgwHwYDVR0j
BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw
RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5
RTY0Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyYWY4MzUyLWNkNjUtNGRiNy1i
MGNiLTA0OGI0NWU3YTRiZi8wLzMxMzAzMzJlMzgzNzJlMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzgzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnV0IwDQYJKoZIhvcN
AQELBQADggEBAAaNu+JN3X2E5FmXXfiXipcs9ODinhqcp0H6bUKmDvS2/4oycL8I
N463RBb1uM//NQbxHj/5tdhQw9jP3ouw5VVOY2/pZ8BSRQQ7KB5M6x1wZCdALIUe
vKT7qm1S9HdnfnFzLyg3OO6zP4OfqdlgYSaDrDO1pQp7tKAu/9gz4hBLPk9gAYeu
jk9NZ97J0zc61csdPCoWoEV5KCyTI5icCs2wzkO7HPuxqQq/Cfhpod2lQIspG8Ze
I5eMjf3jYTQxRcQkTQ/Z8oDzVody/5ubiZF30lEmw5JsXhh5hYqSCtK8SAkNoWtO
1v0wQ6SJh+8HlYz9hC2b13wX2vlrE3NchvM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 06:33:18 2025 by rpki-client on console.sobornost.net