Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32342d3234203d3e203436303535.roa
File: 3130332e3139382e3132322e302f32342d3234203d3e203436303535.roa (raw, json)
Hash identifier: G1S1JsvxyJY1UPJJCn8837WGZKTjh/TSzbDECwItr9I=
Subject key identifier: 6E:98:02:2A:5C:21:AA:FE:29:20:98:C7:EC:08:F1:B5:F2:E6:E7:BC
Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Certificate serial: 1E4CFE6FBD71A3053F715A3C8DC88BEF54E79251
Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32342d3234203d3e203436303535.roa
Signing time: Wed 09 Aug 2023 09:00:58 +0000
ROA not before: Wed 09 Aug 2023 08:55:58 +0000
ROA not after: Wed 07 Aug 2024 09:00:58 +0000
asID: 46055
IP address blocks: 103.198.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 02:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:4c:fe:6f:bd:71:a3:05:3f:71:5a:3c:8d:c8:8b:ef:54:e7:92:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Validity
Not Before: Aug 9 08:55:58 2023 GMT
Not After : Aug 7 09:00:58 2024 GMT
Subject: CN=6E98022A5C21AAFE292098C7EC08F1B5F2E6E7BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:21:d6:b2:70:01:61:27:d7:bc:b8:a7:98:
27:27:f0:c0:c9:58:92:81:61:16:3f:d9:37:87:7f:
79:a0:3a:de:cf:42:9b:df:c9:70:6e:7c:2e:bf:80:
e8:8e:71:ac:eb:dc:c8:ef:4e:3a:b9:16:01:cc:18:
fb:da:cd:2d:31:78:99:f4:cb:52:68:7e:eb:42:9b:
61:57:91:d7:b7:8c:e9:82:85:f1:69:23:18:e4:c6:
e1:b3:88:cc:7b:44:5d:c0:1b:b8:8b:d3:65:2c:57:
33:0c:ff:f1:a2:4f:dc:0b:5e:4c:41:63:ce:be:d5:
c8:38:9c:7c:2f:97:28:31:90:a7:b7:7c:e7:21:da:
32:e1:13:52:7b:d4:57:2b:f1:3f:2c:0c:35:9c:87:
cb:82:11:36:23:26:2b:37:30:6c:63:7a:12:dc:50:
97:84:b4:53:a4:ca:ab:0c:0e:6c:ca:dd:4e:91:f1:
84:de:0f:87:a2:ac:95:32:4e:ca:76:cf:5a:65:65:
0d:fe:33:b9:e9:a9:06:f7:12:17:64:c9:d1:e5:9d:
b8:4e:b5:ee:05:25:17:29:fa:a5:88:bd:6f:08:84:
09:38:5e:cd:42:7a:a4:07:8e:8f:83:f4:57:29:71:
71:c4:06:df:7b:04:05:70:0c:f7:13:95:44:7b:f9:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:98:02:2A:5C:21:AA:FE:29:20:98:C7:EC:08:F1:B5:F2:E6:E7:BC
X509v3 Authority Key Identifier:
keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32342d3234203d3e203436303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.198.122.0/24
Signature Algorithm: sha256WithRSAEncryption
39:11:dc:1f:a4:26:44:95:c7:d0:21:68:18:de:cf:25:19:bd:
dc:01:61:c4:4e:80:f8:94:90:87:f4:6a:8b:32:32:d6:b2:0f:
1f:99:31:a4:2f:d7:26:c5:18:18:a0:2c:c8:a5:30:98:b6:8b:
89:f3:1c:ca:61:cd:1d:f1:1c:66:15:11:3b:d1:f8:a1:84:3a:
7d:4c:d7:59:17:e7:1c:50:5c:7c:95:2e:22:be:62:f9:ca:d4:
ae:77:15:f9:0e:24:63:02:34:e7:99:bf:69:bf:8b:6b:c3:67:
f8:b0:52:68:45:a6:be:e2:ee:84:de:f0:03:32:84:1b:15:c7:
b6:67:4d:80:0a:d1:76:ab:ef:ee:e5:e2:41:c8:f1:c2:c5:e3:
9f:aa:c9:bb:4c:11:55:07:87:6e:aa:62:ba:16:d8:9a:c0:0d:
0f:b0:7a:e2:95:8e:f8:bb:4e:5e:22:c6:37:a3:c5:f3:0a:8a:
b0:f9:68:d1:ff:c9:c9:d6:33:c0:45:bd:d9:ee:ce:02:7a:76:
63:34:9e:80:d3:1f:63:36:b5:ff:b3:b9:c3:5d:58:00:61:99:
d0:cc:08:ff:9f:ce:4c:71:2f:13:26:ac:4e:60:95:89:91:d4:
e1:67:53:7f:2a:40:64:41:40:38:f9:6f:dc:a0:83:c0:07:80:
41:e9:d5:b5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHkz+b71xowU/cVo8jciL71TnklEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx
M0ZGREE5MTAeFw0yMzA4MDkwODU1NThaFw0yNDA4MDcwOTAwNThaMDMxMTAvBgNV
BAMTKDZFOTgwMjJBNUMyMUFBRkUyOTIwOThDN0VDMDhGMUI1RjJFNkU3QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfiHWsnABYSfXvLinmCcn8MDJ
WJKBYRY/2TeHf3mgOt7PQpvfyXBufC6/gOiOcazr3MjvTjq5FgHMGPvazS0xeJn0
y1JofutCm2FXkde3jOmChfFpIxjkxuGziMx7RF3AG7iL02UsVzMM//GiT9wLXkxB
Y86+1cg4nHwvlygxkKe3fOch2jLhE1J71Fcr8T8sDDWch8uCETYjJis3MGxjehLc
UJeEtFOkyqsMDmzK3U6R8YTeD4eirJUyTsp2z1plZQ3+M7npqQb3EhdkydHlnbhO
te4FJRcp+qWIvW8IhAk4Xs1CeqQHjo+D9FcpcXHEBt97BAVwDPcTlUR7+SANAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbpgCKlwhqv4pIJjH7AjxtfLm57wwHwYDVR0j
BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw
NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG
REE5MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0LThjMmQtNGViMS1i
NGNkLTM1YjQ5MjE2ZTA3My8wLzMxMzAzMzJlMzEzOTM4MmUzMTMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8Z6MA0GCSqG
SIb3DQEBCwUAA4IBAQA5EdwfpCZElcfQIWgY3s8lGb3cAWHEToD4lJCH9GqLMjLW
sg8fmTGkL9cmxRgYoCzIpTCYtouJ8xzKYc0d8RxmFRE70fihhDp9TNdZF+ccUFx8
lS4ivmL5ytSudxX5DiRjAjTnmb9pv4trw2f4sFJoRaa+4u6E3vADMoQbFce2Z02A
CtF2q+/u5eJByPHCxeOfqsm7TBFVB4duqmK6FtiawA0PsHrilY74u05eIsY3o8Xz
Coqw+WjR/8nJ1jPARb3Z7s4CenZjNJ6A0x9jNrX/s7nDXVgAYZnQzAj/n85McS8T
JqxOYJWJkdThZ1N/KkBkQUA4+W/coIPAB4BB6dW1
-----END CERTIFICATE-----
Generated at Thu May 23 04:42:17 2024 by rpki-client on console-ams.rpki-client.org