Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132312e302f32342d3234203d3e203633353136.roa
File: 3130332e34322e3132312e302f32342d3234203d3e203633353136.roa (raw, json)
Hash identifier: CGJWJryOQOe9V6e8F5w5Y7oRGei5AErtCG48SLjFeeA=
Subject key identifier: AB:DC:F5:C8:D4:2D:FA:13:94:29:69:FD:F1:90:80:81:CD:79:A1:0F
Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial: 62E7A1CD978C7DE27EE7BCE3083C5C02C27CAA3D
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132312e302f32342d3234203d3e203633353136.roa
Signing time: Thu 07 Sep 2023 04:00:00 +0000
ROA not before: Thu 07 Sep 2023 03:55:00 +0000
ROA not after: Thu 05 Sep 2024 04:00:00 +0000
asID: 63516
IP address blocks: 103.42.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 02:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:e7:a1:cd:97:8c:7d:e2:7e:e7:bc:e3:08:3c:5c:02:c2:7c:aa:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Validity
Not Before: Sep 7 03:55:00 2023 GMT
Not After : Sep 5 04:00:00 2024 GMT
Subject: CN=ABDCF5C8D42DFA13942969FDF1908081CD79A10F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:74:f7:47:30:69:51:61:0c:f7:c5:3d:a8:
c1:fd:44:f9:08:8a:d7:f1:b5:0e:ce:c2:3d:26:1c:
f4:f1:10:0c:1c:da:3d:34:95:5a:3c:74:f7:74:7d:
f0:da:03:01:86:ce:f0:52:3f:e1:a1:17:d7:13:e1:
78:c8:44:cb:c0:e8:10:d6:ca:cc:50:c1:d4:78:99:
72:4b:9b:01:4c:00:97:89:7e:5e:ef:4a:ba:e3:41:
ac:d2:5f:b6:64:e8:b5:e6:75:11:35:19:b5:f2:de:
8d:4e:c3:cb:35:59:b7:f1:dd:ac:7a:93:e4:d7:da:
9f:f2:e4:ee:91:16:8f:36:81:5e:bb:06:01:30:88:
b7:5f:5d:ef:72:70:af:e6:f5:8d:e6:5a:16:d3:8d:
41:fe:ff:0d:1a:d0:37:6b:de:d5:b4:b7:2c:37:fd:
fa:3f:8c:4b:05:02:e2:ec:99:7c:7c:09:19:95:bb:
ae:89:bf:d7:b6:13:8b:5c:46:95:6d:8a:01:b8:0b:
30:1b:96:ec:92:e6:5c:56:56:fa:4d:9e:c7:03:1b:
86:b9:1c:ed:e0:10:2f:b6:ba:e9:6b:f1:b9:3b:75:
62:38:2a:0e:d2:80:7f:4e:1d:45:d0:54:08:43:d6:
b8:79:b4:cd:15:f0:14:b1:3c:db:d7:6d:17:b9:ae:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DC:F5:C8:D4:2D:FA:13:94:29:69:FD:F1:90:80:81:CD:79:A1:0F
X509v3 Authority Key Identifier:
keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/3130332e34322e3132312e302f32342d3234203d3e203633353136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.42.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:94:15:ae:56:b5:f3:ff:c2:91:e8:54:fe:01:93:2e:d4:4b:
25:14:79:a7:a0:2e:39:fb:be:69:94:ad:e4:30:6e:be:4d:5d:
1d:5b:5e:08:c4:29:79:36:7a:b5:b9:77:43:21:e6:35:d9:51:
2a:95:12:f8:82:42:a4:30:75:bb:a2:38:0d:c9:bf:17:b8:27:
5d:bd:5b:09:b6:b1:82:a2:e5:15:c6:cb:66:d0:10:44:3d:1d:
7b:5f:ea:f4:5a:f1:84:41:a6:ac:e5:f5:a5:f0:42:42:44:67:
50:09:83:b3:8e:af:e3:3b:52:44:ba:4f:4f:78:20:3e:40:35:
bd:28:4e:37:12:51:ae:3e:62:ad:24:34:59:36:a1:42:97:e4:
44:66:a0:4a:5b:3b:8e:a6:89:69:0d:ee:d6:f4:3e:d5:0d:a5:
7a:56:22:a5:ce:db:bb:77:3c:7c:38:71:a9:d6:37:10:a7:95:
5c:2e:4d:f7:2b:07:59:06:0b:37:2b:47:8e:37:55:bf:91:c7:
20:5a:8c:42:d3:5f:c1:65:86:ed:5f:67:56:85:98:1b:c5:ae:
0a:15:ae:18:78:30:fa:69:f1:76:86:67:5d:6b:93:c2:cb:1e:
d8:b0:9c:7c:ec:f0:2c:b6:87:d8:c0:cc:96:3e:54:02:d7:6b:
84:7c:27:2e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYuehzZeMfeJ+57zjCDxcAsJ8qj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF
NzUyNjNENzAeFw0yMzA5MDcwMzU1MDBaFw0yNDA5MDUwNDAwMDBaMDMxMTAvBgNV
BAMTKEFCRENGNUM4RDQyREZBMTM5NDI5NjlGREYxOTA4MDgxQ0Q3OUExMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpXT3RzBpUWEM98U9qMH9RPkI
itfxtQ7Owj0mHPTxEAwc2j00lVo8dPd0ffDaAwGGzvBSP+GhF9cT4XjIRMvA6BDW
ysxQwdR4mXJLmwFMAJeJfl7vSrrjQazSX7Zk6LXmdRE1GbXy3o1Ow8s1Wbfx3ax6
k+TX2p/y5O6RFo82gV67BgEwiLdfXe9ycK/m9Y3mWhbTjUH+/w0a0Ddr3tW0tyw3
/fo/jEsFAuLsmXx8CRmVu66Jv9e2E4tcRpVtigG4CzAbluyS5lxWVvpNnscDG4a5
HO3gEC+2uulr8bk7dWI4Kg7SgH9OHUXQVAhD1rh5tM0V8BSxPNvXbRe5rtk5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUq9z1yNQt+hOUKWn98ZCAgc15oQ8wHwYDVR0j
BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF
NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy
NjNENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h
M2NiLWNlOGIzMjZiOGY3MS8wLzMxMzAzMzJlMzQzMjJlMzEzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzMzM1MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcqeTANBgkqhkiG
9w0BAQsFAAOCAQEADZQVrla18//CkehU/gGTLtRLJRR5p6AuOfu+aZSt5DBuvk1d
HVteCMQpeTZ6tbl3QyHmNdlRKpUS+IJCpDB1u6I4Dcm/F7gnXb1bCbaxgqLlFcbL
ZtAQRD0de1/q9FrxhEGmrOX1pfBCQkRnUAmDs46v4ztSRLpPT3ggPkA1vShONxJR
rj5irSQ0WTahQpfkRGagSls7jqaJaQ3u1vQ+1Q2lelYipc7bu3c8fDhxqdY3EKeV
XC5N9ysHWQYLNytHjjdVv5HHIFqMQtNfwWWG7V9nVoWYG8WuChWuGHgw+mnxdoZn
XWuTwsse2LCcfOzwLLaH2MDMlj5UAtdrhHwnLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org