Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/3130332e3132312e3233382e302f32332d3234203d3e20313338303536.roa
File: 3130332e3132312e3233382e302f32332d3234203d3e20313338303536.roa (raw, json)
Hash identifier: gwlxSmoXN0ymNY83ywCV5kqkWTkomZIDUI5d7ZlU3LI=
Subject key identifier: 38:CE:CA:D1:5B:BA:CF:0B:C0:6C:22:B9:CA:A9:42:91:A8:82:A7:1E
Certificate issuer: /CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB
Certificate serial: 44DB4480EC69080768F6BD64B6D8122AC7B08C14
Authority key identifier: 65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/3130332e3132312e3233382e302f32332d3234203d3e20313338303536.roa
Signing time: Mon 31 Jul 2023 00:03:59 +0000
ROA not before: Sun 30 Jul 2023 23:58:59 +0000
ROA not after: Mon 29 Jul 2024 00:03:59 +0000
asID: 138056
IP address blocks: 103.121.238.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:db:44:80:ec:69:08:07:68:f6:bd:64:b6:d8:12:2a:c7:b0:8c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65AE765288A08C9301DB21B4DDDD966B2F23A7EB
Validity
Not Before: Jul 30 23:58:59 2023 GMT
Not After : Jul 29 00:03:59 2024 GMT
Subject: CN=38CECAD15BBACF0BC06C22B9CAA94291A882A71E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:5b:b6:92:12:00:98:a5:86:87:10:c6:c7:
14:9f:0b:97:53:4c:be:5a:04:0d:e1:55:12:e0:a6:
ad:48:c5:a7:04:18:b5:e6:53:cd:9d:55:a1:81:2b:
81:12:b9:33:94:77:cb:58:04:0c:97:8c:0c:0c:8a:
63:12:e5:cf:d8:c3:6a:f9:1a:7a:c7:7c:c6:8d:7d:
c0:3e:92:42:fe:48:8f:0b:fa:74:fa:9d:48:bc:43:
f7:4c:cf:e5:9b:36:6f:28:5a:fa:5f:09:38:a7:eb:
54:41:58:9c:62:97:13:64:01:9a:fe:93:c4:64:b5:
7b:86:4a:d4:3b:08:2a:b8:a2:88:43:a6:fc:1a:52:
d2:4a:cc:a0:a7:52:fc:29:0f:42:df:d5:fe:95:01:
41:99:67:f0:e9:9c:8f:7d:03:ce:8b:68:a5:ff:53:
71:70:5b:5c:f9:3a:40:fa:27:d9:87:de:a7:b4:88:
9f:81:83:73:3d:96:86:11:dc:fb:51:47:53:a7:a1:
64:98:ce:1a:67:8a:6e:4a:e6:d3:c3:c3:3d:86:33:
4c:0d:86:eb:bb:82:27:2f:d0:39:7c:a6:4a:b8:73:
73:69:9f:d9:8f:ae:43:04:13:67:ae:1b:26:c2:9c:
ae:1e:d3:46:9d:62:d5:6e:12:fb:33:05:b9:05:1b:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CE:CA:D1:5B:BA:CF:0B:C0:6C:22:B9:CA:A9:42:91:A8:82:A7:1E
X509v3 Authority Key Identifier:
keyid:65:AE:76:52:88:A0:8C:93:01:DB:21:B4:DD:DD:96:6B:2F:23:A7:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65AE765288A08C9301DB21B4DDDD966B2F23A7EB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ef1920-8523-4ed4-b357-9de9a0c91710/0/3130332e3132312e3233382e302f32332d3234203d3e20313338303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.121.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:80:06:19:0a:86:9e:c4:ce:e4:a3:97:e1:29:89:84:02:a9:
d8:70:86:61:03:7f:8b:fd:ca:3b:b6:42:b2:44:b7:1a:f7:8b:
20:5e:78:40:d0:5b:49:ad:93:71:10:49:a6:c9:b1:ac:59:1e:
38:3d:ad:c5:7f:17:40:b6:48:9c:38:8f:c0:e0:27:45:27:95:
fd:95:30:3d:4e:c5:91:3b:7f:6d:b9:89:02:8a:52:3c:43:45:
20:a7:ef:8c:a3:79:e7:7c:7a:78:f4:d0:88:8f:02:f7:49:dc:
e7:e1:5d:e3:39:42:7d:e3:c7:75:49:93:5f:af:7e:a6:ef:4e:
17:aa:e9:c1:2a:40:ca:57:de:9b:92:7e:3f:3d:c5:76:a7:ad:
11:27:0f:f4:ce:15:7e:1c:51:4d:db:b7:40:6f:c7:ce:24:c4:
19:7c:5b:62:9c:dd:ba:86:99:65:37:95:c7:9e:04:dc:8c:c3:
a0:43:4a:41:46:31:56:ca:54:23:61:94:6f:fd:9b:12:a7:ac:
21:2b:23:43:67:bc:20:ee:c4:2d:a0:93:ce:c7:7b:1e:90:db:
42:ee:5f:7a:6f:ef:8f:70:08:33:6b:e8:cf:cf:a2:5b:21:07:
73:7b:4b:ff:35:bf:53:dc:c1:56:97:05:01:9a:06:39:cc:44:
74:e9:f0:01
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURNtEgOxpCAdo9r1kttgSKsewjBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIy
RjIzQTdFQjAeFw0yMzA3MzAyMzU4NTlaFw0yNDA3MjkwMDAzNTlaMDMxMTAvBgNV
BAMTKDM4Q0VDQUQxNUJCQUNGMEJDMDZDMjJCOUNBQTk0MjkxQTg4MkE3MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Wlu2khIAmKWGhxDGxxSfC5dT
TL5aBA3hVRLgpq1IxacEGLXmU82dVaGBK4ESuTOUd8tYBAyXjAwMimMS5c/Yw2r5
GnrHfMaNfcA+kkL+SI8L+nT6nUi8Q/dMz+WbNm8oWvpfCTin61RBWJxilxNkAZr+
k8RktXuGStQ7CCq4oohDpvwaUtJKzKCnUvwpD0Lf1f6VAUGZZ/DpnI99A86LaKX/
U3FwW1z5OkD6J9mH3qe0iJ+Bg3M9loYR3PtRR1OnoWSYzhpnim5K5tPDwz2GM0wN
huu7gicv0Dl8pkq4c3Npn9mPrkMEE2euGybCnK4e00adYtVuEvszBbkFG+wnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUOM7K0Vu6zwvAbCK5yqlCkaiCpx4wHwYDVR0j
BBgwFoAUZa52UoigjJMB2yG03d2Way8jp+swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NGVmMTkyMC04NTIzLTRlZDQtYjM1Ny05ZGU5YTBjOTE3MTAvMC82NUFFNzY1Mjg4
QTA4QzkzMDFEQjIxQjREREREOTY2QjJGMjNBN0VCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjVBRTc2NTI4OEEwOEM5MzAxREIyMUI0RERERDk2NkIyRjIz
QTdFQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0ZWYxOTIwLTg1MjMtNGVkNC1i
MzU3LTlkZTlhMGM5MTcxMC8wLzMxMzAzMzJlMzEzMjMxMmUzMjMzMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnee4wDQYJ
KoZIhvcNAQELBQADggEBAE6ABhkKhp7EzuSjl+EpiYQCqdhwhmEDf4v9yju2QrJE
txr3iyBeeEDQW0mtk3EQSabJsaxZHjg9rcV/F0C2SJw4j8DgJ0Unlf2VMD1OxZE7
f225iQKKUjxDRSCn74yjeed8enj00IiPAvdJ3OfhXeM5Qn3jx3VJk1+vfqbvTheq
6cEqQMpX3puSfj89xXanrREnD/TOFX4cUU3bt0Bvx84kxBl8W2Kc3bqGmWU3lcee
BNyMw6BDSkFGMVbKVCNhlG/9mxKnrCErI0NnvCDuxC2gk87Hex6Q20LuX3pv749w
CDNr6M/PolshB3N7S/81v1PcwVaXBQGaBjnMRHTp8AE=
-----END CERTIFICATE-----
Generated at Wed Oct 11 13:07:13 2023 by rpki-client on console-ams.rpki-client.org