Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32342d3234203d3e20313439393439.roa
File: 3130332e3138372e38382e302f32342d3234203d3e20313439393439.roa (raw, json)
Hash identifier: 0o7fjxJNePHn44IRKUQbSP6IPH/DCJGN2VGp/hllKSI=
Subject key identifier: 36:CF:14:FE:F4:19:9E:F7:52:6A:43:18:89:C3:F2:AA:9D:C0:DD:4B
Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA
Certificate serial: 798B1B2A07CF78DBC7B4B07F8D39882465BD918D
Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32342d3234203d3e20313439393439.roa
Signing time: Wed 31 Aug 2022 10:14:38 +0000
ROA not before: Wed 31 Aug 2022 10:09:38 +0000
ROA not after: Wed 30 Aug 2023 10:14:38 +0000
asID: 149949
IP address blocks: 103.187.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:8b:1b:2a:07:cf:78:db:c7:b4:b0:7f:8d:39:88:24:65:bd:91:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA
Validity
Not Before: Aug 31 10:09:38 2022 GMT
Not After : Aug 30 10:14:38 2023 GMT
Subject: CN=36CF14FEF4199EF7526A431889C3F2AA9DC0DD4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:04:57:55:8a:ee:42:b7:67:4c:a0:3e:2e:
67:46:9d:39:13:ce:d6:56:93:5d:64:4b:82:2a:5f:
f0:6a:e1:90:7b:4d:69:fc:08:43:7a:c4:7a:be:0b:
e8:19:76:54:41:ca:a4:c3:d6:6b:0e:43:61:fa:e2:
a6:ec:bc:4e:7b:53:1d:55:c1:ef:0a:16:17:82:9b:
43:fe:60:62:21:e6:fa:bd:a2:18:2d:41:af:48:25:
a1:3e:e4:d8:3b:67:dc:3c:95:ac:1f:9f:81:59:09:
b6:22:f9:76:f2:49:b1:4e:78:97:c9:ac:e3:2b:98:
fb:50:8d:0d:ef:80:36:f7:58:0c:7c:e3:45:61:f7:
fc:ed:a5:81:9a:ff:f4:6a:78:cb:bc:86:ed:7f:c5:
1c:74:48:31:03:72:da:3f:59:14:0b:27:53:4b:94:
94:bd:b9:2b:e2:7c:e8:70:ff:ab:2a:26:32:43:c4:
b3:f7:9f:53:e6:aa:27:a4:0f:2a:da:cf:09:f3:01:
b4:72:1d:43:12:7d:74:5e:3a:83:34:40:cc:30:44:
ad:e2:7c:d4:ea:59:e6:93:b4:0e:4b:8a:00:9a:eb:
07:7a:3e:36:58:90:74:5c:65:d2:3b:d1:8c:73:74:
69:fc:cf:80:6b:2e:53:84:ef:bc:63:41:3b:0a:65:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:14:FE:F4:19:9E:F7:52:6A:43:18:89:C3:F2:AA:9D:C0:DD:4B
X509v3 Authority Key Identifier:
keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32342d3234203d3e20313439393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.88.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f3:da:9b:e3:7f:1f:b9:5a:07:57:a9:64:ec:be:b1:00:38:
fe:c0:ac:04:27:9a:75:16:0d:68:05:0a:32:f6:40:f1:55:30:
5e:47:de:f7:6f:8b:0a:c7:ee:d0:66:a8:d5:e7:9c:19:06:ac:
ab:1b:aa:0e:a2:92:4d:da:45:8a:a1:9c:2a:ec:ca:8f:f3:3e:
8d:4d:5d:a8:03:8f:ad:ed:f9:b9:15:34:24:23:5e:07:51:f3:
1a:67:fe:44:1e:00:16:a4:bd:83:8e:59:6c:0b:aa:54:08:11:
ff:30:57:d9:27:71:8e:08:a5:94:29:9c:6b:ff:f7:33:84:ed:
4d:41:6a:28:e1:d9:0d:b7:de:80:b5:a5:3d:1f:0f:a7:a1:8a:
44:c8:55:05:89:ac:4b:bc:fb:b7:88:ef:4b:7a:97:7b:28:4c:
3e:90:f2:8a:f4:ad:15:a0:4b:78:92:df:85:3d:41:20:d9:86:
b9:3c:ee:10:2f:86:b1:f7:9f:a9:4a:31:b5:23:ce:c9:ce:ac:
23:20:3a:d3:13:ff:48:81:f8:42:2a:d9:90:b2:25:d7:c0:08:
e4:cd:5f:2e:38:87:7c:41:76:f2:bc:a2:bd:94:a4:91:a1:11:
3f:35:d1:82:f3:8c:59:44:6d:ed:b8:82:55:0c:74:e5:cf:d1:
a6:bf:68:02
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUeYsbKgfPeNvHtLB/jTmIJGW9kY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1
MTdDQUZGQTAeFw0yMjA4MzExMDA5MzhaFw0yMzA4MzAxMDE0MzhaMDMxMTAvBgNV
BAMTKDM2Q0YxNEZFRjQxOTlFRjc1MjZBNDMxODg5QzNGMkFBOURDMERENEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqpwRXVYruQrdnTKA+LmdGnTkT
ztZWk11kS4IqX/Bq4ZB7TWn8CEN6xHq+C+gZdlRByqTD1msOQ2H64qbsvE57Ux1V
we8KFheCm0P+YGIh5vq9ohgtQa9IJaE+5Ng7Z9w8lawfn4FZCbYi+XbySbFOeJfJ
rOMrmPtQjQ3vgDb3WAx840Vh9/ztpYGa//RqeMu8hu1/xRx0SDEDcto/WRQLJ1NL
lJS9uSvifOhw/6sqJjJDxLP3n1PmqiekDyrazwnzAbRyHUMSfXReOoM0QMwwRK3i
fNTqWeaTtA5LigCa6wd6PjZYkHRcZdI70YxzdGn8z4BrLlOE77xjQTsKZZXBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNs8U/vQZnvdSakMYicPyqp3A3UswHwYDVR0j
BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC
RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD
QUZGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTBmMGY1LWI4ODMtNGIyNC05
NzkyLTdlOTU3YWY4OGJmOC8wLzMxMzAzMzJlMzEzODM3MmUzODM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7tYMA0GCSqG
SIb3DQEBCwUAA4IBAQAx89qb438fuVoHV6lk7L6xADj+wKwEJ5p1Fg1oBQoy9kDx
VTBeR973b4sKx+7QZqjV55wZBqyrG6oOopJN2kWKoZwq7MqP8z6NTV2oA4+t7fm5
FTQkI14HUfMaZ/5EHgAWpL2DjllsC6pUCBH/MFfZJ3GOCKWUKZxr//czhO1NQWoo
4dkNt96AtaU9Hw+noYpEyFUFiaxLvPu3iO9Lepd7KEw+kPKK9K0VoEt4kt+FPUEg
2Ya5PO4QL4ax95+pSjG1I87JzqwjIDrTE/9IgfhCKtmQsiXXwAjkzV8uOId8QXby
vKK9lKSRoRE/NdGC84xZRG3tuIJVDHTlz9Gmv2gC
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org