Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130342e302f32322d3232203d3e20313333383334.roa
File: 3130332e35382e3130342e302f32322d3232203d3e20313333383334.roa (raw, json)
Hash identifier: 1JGg8B8ACvAZSaftr1ciAhB5FbVXNk0mknecjq1wAFo=
Subject key identifier: 14:74:12:57:C8:51:84:24:4B:A5:D3:92:59:2E:EE:1F:93:1D:0A:02
Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B
Certificate serial: 67001949C05611A7795C170F50FF9777DE887A48
Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130342e302f32322d3232203d3e20313333383334.roa
Signing time: Mon 06 Nov 2023 08:04:29 +0000
ROA not before: Mon 06 Nov 2023 07:59:29 +0000
ROA not after: Mon 04 Nov 2024 08:04:29 +0000
asID: 133834
IP address blocks: 103.58.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:00:19:49:c0:56:11:a7:79:5c:17:0f:50:ff:97:77:de:88:7a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B
Validity
Not Before: Nov 6 07:59:29 2023 GMT
Not After : Nov 4 08:04:29 2024 GMT
Subject: CN=14741257C85184244BA5D392592EEE1F931D0A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:b9:ef:27:03:ca:52:60:f1:27:94:e1:5d:
66:6c:f0:fe:8e:ab:13:81:2a:00:e7:4c:40:b5:ba:
cf:64:cb:76:12:0e:79:df:8f:7b:e0:88:1c:c6:91:
ed:18:40:d0:38:80:68:e4:ca:fb:ac:20:bf:f4:70:
34:93:40:63:9c:1c:39:6e:31:20:99:7f:21:1c:dd:
61:a3:56:1e:15:c6:f7:a3:c1:bc:d0:64:c0:59:e3:
bc:26:6d:c9:46:b9:a2:d7:10:76:d0:63:77:44:c2:
ab:01:1c:94:51:52:9a:9c:9c:21:ec:57:61:27:08:
c6:fd:2b:74:77:2c:a9:f2:a8:e9:e3:01:e9:77:a0:
a0:cd:33:e7:1b:7e:3a:08:9b:b7:8b:25:7a:51:53:
07:58:2c:c3:d4:ea:78:8c:16:4d:38:8c:df:c2:69:
e6:e8:b9:53:fb:5c:51:37:36:88:40:2b:3e:7d:88:
66:ad:e3:14:17:6b:17:b2:c3:e1:53:98:e5:59:08:
68:36:81:98:24:92:9b:bd:03:bc:f0:e4:28:5c:30:
2d:a3:e7:53:65:0a:b8:7a:36:89:55:c0:61:50:c4:
61:01:25:54:f7:0c:c5:15:d1:42:dd:f7:6e:12:85:
74:1a:a7:59:da:4a:4c:5e:6d:74:2d:74:d8:f1:2e:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:74:12:57:C8:51:84:24:4B:A5:D3:92:59:2E:EE:1F:93:1D:0A:02
X509v3 Authority Key Identifier:
keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/3130332e35382e3130342e302f32322d3232203d3e20313333383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.58.104.0/22
Signature Algorithm: sha256WithRSAEncryption
58:93:a0:6c:d8:6b:bd:6f:fd:fa:9b:4f:1c:38:6b:8b:9b:ca:
5c:46:a9:ff:cc:37:49:a8:9c:68:b8:74:73:70:26:b2:76:6d:
ee:c7:0e:30:cf:14:7d:d1:6d:4e:35:64:a4:60:c5:2d:02:3e:
18:f4:73:7a:62:0f:68:62:f6:ee:51:f1:ec:24:d1:c9:f6:c0:
32:f8:d9:d7:dd:0a:cf:c1:2e:21:cc:2f:fa:38:e1:80:12:0c:
9e:9f:d6:29:ca:fc:53:22:49:aa:c8:a9:3d:63:e6:d3:44:be:
10:8e:3d:a8:34:e3:a3:4d:06:99:07:9f:81:d9:1e:1e:b7:c1:
ae:38:f5:57:52:85:de:ee:c0:19:db:0f:54:44:0b:65:b7:2b:
ff:29:be:c0:d4:b2:5f:ef:5f:60:71:7f:cc:60:65:e6:28:9c:
5f:7b:1e:04:c8:be:2e:5f:74:95:56:41:69:f7:ad:8b:ed:4c:
ae:a5:01:6f:b2:53:c0:d4:67:49:ad:94:e7:d2:26:f3:b1:da:
38:e3:81:73:65:63:aa:8c:dc:14:c8:4c:bb:74:f4:12:1f:ab:
f8:6e:d6:58:d4:57:9f:49:2f:08:ed:d9:8e:54:b3:95:48:c3:
b0:f2:27:5b:87:b0:e8:49:57:20:a5:e3:bc:ec:58:3f:ea:15:
29:0c:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:20 2023 by rpki-client on console.sobornost.net