Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38776.roa
File: AS38776.roa (raw, json)
Hash identifier: oV+6BOxnP+lBCHgcysbSirxZjMQRa31k/wMpOy4b+Ew=
Subject key identifier: 01:65:F4:F1:43:D4:41:E8:97:98:CA:8C:C6:01:46:94:CE:83:D6:ED
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 17C1A38F96523D3C490EEEE54253DA0F8A42586D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38776.roa
Signing time: Tue 09 Jan 2024 04:00:18 +0000
ROA not before: Tue 09 Jan 2024 03:55:18 +0000
ROA not after: Tue 07 Jan 2025 04:00:18 +0000
asID: 38776
IP address blocks: 103.133.148.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 07:24:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:c1:a3:8f:96:52:3d:3c:49:0e:ee:e5:42:53:da:0f:8a:42:58:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 9 03:55:18 2024 GMT
Not After : Jan 7 04:00:18 2025 GMT
Subject: CN=0165F4F143D441E89798CA8CC6014694CE83D6ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0a:5d:ef:f5:67:6a:ca:9b:01:ac:df:3a:c0:
a8:90:d8:94:e4:0f:80:06:72:55:78:7a:91:56:5e:
8c:66:40:5b:36:6b:31:30:75:c5:d9:40:d4:46:d7:
56:71:d8:06:4b:46:06:a3:79:1c:20:ff:a0:38:d9:
7a:35:2a:b5:14:75:b2:ae:13:86:93:52:02:9a:76:
92:18:b5:66:ff:f2:1b:c2:63:5d:dc:b0:2c:a1:80:
7e:c1:38:5e:79:0b:d7:bb:8e:ad:3d:fe:4f:39:24:
a0:74:2e:60:6e:7f:e4:5d:77:4a:96:5e:7c:49:ff:
51:90:66:32:7f:cb:d6:ed:28:6a:f7:55:83:81:d2:
8a:16:b3:b5:e7:ed:04:46:6b:d4:e7:e9:0e:35:70:
c9:3c:77:23:3d:21:0f:cd:da:d3:90:31:5a:71:11:
2f:00:82:41:d9:97:06:6b:56:79:25:cc:de:75:dd:
fc:aa:ca:99:28:c6:21:4e:37:d2:9d:fd:13:e6:c6:
e4:bd:1d:be:87:c7:3c:9a:66:7c:5f:e6:e4:c7:a8:
0d:6c:cf:a0:7a:27:3e:75:c1:99:25:9a:4a:e7:ce:
18:a8:92:99:5d:c6:f8:05:3f:10:ab:84:b8:3d:5d:
84:c8:56:35:9d:35:ae:44:8f:4b:0b:05:2f:ef:cd:
27:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:F4:F1:43:D4:41:E8:97:98:CA:8C:C6:01:46:94:CE:83:D6:ED
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS38776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.133.148.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:95:86:bc:1e:bf:33:13:ab:bd:28:3d:99:c9:82:04:b0:8a:
e8:cb:42:ab:76:57:45:b5:52:7b:79:23:e3:38:e7:0d:d6:31:
4d:34:d0:49:9e:36:d1:47:a8:e2:fb:2d:37:47:24:7f:25:a2:
94:56:c9:98:6e:fe:d5:a1:3f:c6:ca:23:ec:f9:db:b2:c8:42:
62:6f:08:8a:e3:7c:d6:33:52:99:98:54:70:c5:08:8c:4b:97:
94:a7:0b:9a:04:d9:fa:34:03:68:36:b7:9e:bf:bf:62:51:79:
00:65:30:bd:10:fd:f4:01:9f:64:30:b3:3a:d0:e0:34:30:ea:
54:e1:88:c9:7b:09:32:55:6a:b1:d8:c9:24:42:87:cb:2a:8c:
7a:f2:09:ed:be:59:f4:53:e9:de:8d:a4:bd:17:bb:6d:ac:06:
a1:ae:99:44:59:e4:ce:3d:11:eb:3f:a2:70:99:c1:d8:5c:d4:
30:6d:2f:33:7b:6e:fc:f2:2b:ff:fb:cb:a9:ed:db:a1:45:92:
2b:29:66:33:f6:7b:7b:f9:72:57:c6:79:15:36:db:3a:af:4e:
a2:b7:83:18:ba:33:8c:f9:6b:3f:57:22:5a:0c:89:34:0b:c5:
92:2e:2a:fb:89:3d:50:40:51:ef:47:0f:ca:31:1b:d6:57:82:
37:10:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 09:53:54 2024 by rpki-client on console-fra.rpki-client.org