Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3233203d3e20313336313136.roa
File: 3130332e39342e3233382e302f32332d3233203d3e20313336313136.roa (raw, json)
Hash identifier: wjsJVoZRGR+izi0X9dlwysNrRNMYfMi9I2n8oqyAFW0=
Subject key identifier: D7:8A:15:11:DA:F4:0A:A9:A1:D5:F7:08:83:50:09:45:36:A6:D5:B7
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 0B78FE04B0E4ACFB0C8ADBF3F619AAD5D656485C
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3233203d3e20313336313136.roa
Signing time: Fri 23 Aug 2024 08:38:28 +0000
ROA not before: Fri 23 Aug 2024 08:33:28 +0000
ROA not after: Fri 22 Aug 2025 08:38:28 +0000
asID: 136116
IP address blocks: 103.94.238.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 07 Nov 2024 10:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:78:fe:04:b0:e4:ac:fb:0c:8a:db:f3:f6:19:aa:d5:d6:56:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Aug 23 08:33:28 2024 GMT
Not After : Aug 22 08:38:28 2025 GMT
Subject: CN=D78A1511DAF40AA9A1D5F7088350094536A6D5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:42:1b:7e:c9:12:0b:db:fa:e1:93:80:1b:48:
9e:4a:ec:fa:c9:80:17:7a:39:dc:41:9a:da:ba:e4:
99:8a:17:03:c2:93:c9:17:9e:1b:7b:b2:d8:78:e3:
67:b6:7a:9d:f8:34:be:6c:36:b0:08:63:07:68:18:
34:92:dc:bf:a0:e6:70:3b:67:b2:f2:3e:64:fb:d1:
6a:13:d5:fd:37:55:dc:4f:b4:d1:ce:8d:13:01:af:
76:57:34:0a:e8:07:a1:99:dd:28:7b:9f:0a:41:64:
37:d6:e4:8c:4a:16:fd:89:d5:ef:9b:32:4c:af:ee:
85:e0:27:b5:8f:58:ac:11:70:7f:24:7d:d9:03:85:
f1:10:66:36:55:d6:1f:aa:47:f4:cf:80:c9:1a:79:
fb:d6:19:17:ea:ed:be:2b:49:9b:73:35:c2:1b:20:
74:ef:38:60:02:c6:c3:14:d9:63:f2:4a:2f:55:bc:
d6:e6:3b:bd:cd:bf:f1:b3:84:b6:af:38:11:a0:7a:
6f:df:4e:29:92:11:e2:2f:a7:b4:5b:68:61:a9:b4:
78:4b:1e:36:2b:88:ab:3a:04:06:2d:1e:d4:c9:88:
57:8e:c6:0a:39:8c:0c:e8:67:7e:47:99:69:aa:f9:
e9:29:7c:a3:df:3f:ab:6a:75:b7:49:3d:75:51:5c:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:15:11:DA:F4:0A:A9:A1:D5:F7:08:83:50:09:45:36:A6:D5:B7
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3233203d3e20313336313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.238.0/23
Signature Algorithm: sha256WithRSAEncryption
69:17:1d:c2:e4:f7:be:2f:6f:04:e3:f4:8a:f6:09:3d:54:4a:
45:62:08:65:c0:f3:01:ff:03:ca:28:fb:b0:31:7e:84:d6:91:
d0:95:27:aa:70:40:91:fc:5e:f1:df:be:ba:b2:ba:05:20:c0:
e0:ff:83:6b:83:d4:81:c2:1d:c6:f0:f3:65:5c:d3:52:22:12:
10:d0:67:43:09:af:8a:3d:fd:35:ad:c7:7a:e5:79:ac:20:36:
8b:c0:b3:ab:83:c6:78:58:62:69:28:b0:59:98:c1:56:da:33:
cd:c6:bf:6d:b7:96:59:44:11:20:28:2a:79:7b:3c:6f:7e:8c:
24:dc:9b:87:8e:cd:92:50:17:33:bf:5a:ce:02:aa:5d:1b:5d:
27:7f:b9:4b:96:91:82:00:f2:43:42:3f:6b:5b:5b:d3:f6:5a:
64:98:ac:6a:fe:8a:c9:f7:fc:d5:08:00:82:55:a4:2b:fe:41:
64:a5:61:ac:61:e3:06:12:d3:c5:25:9e:c2:d7:47:2b:40:a7:
e4:85:6d:db:59:f4:56:02:49:99:b6:be:32:ac:12:25:e2:3b:
bf:df:d9:c6:ac:6d:64:58:58:77:46:ea:a5:01:ff:54:e2:c4:
52:e1:0e:cb:0a:47:3f:b0:22:e5:1c:8f:7f:7d:62:a6:fe:94:
ef:e7:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:13 2024 by rpki-client on console.sobornost.net