Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230332e302f32342d3234203d3e20313338383138.roa
File: 3130332e3233382e3230332e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier: X6htK3OcOM00lIvuhk0pgzFeP8wuBINT9jwhoCBv7hs=
Subject key identifier: 5A:96:B8:E8:E6:D9:F8:C3:FB:25:E1:EF:C0:57:CA:2E:9D:02:78:A0
Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Certificate serial: 0E4C97E806FA696D1CDDFD86C3DB51767DC86C96
Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230332e302f32342d3234203d3e20313338383138.roa
Signing time: Mon 17 Oct 2022 03:00:00 +0000
ROA not before: Mon 17 Oct 2022 02:55:00 +0000
ROA not after: Mon 16 Oct 2023 03:00:00 +0000
asID: 138818
IP address blocks: 103.238.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4c:97:e8:06:fa:69:6d:1c:dd:fd:86:c3:db:51:76:7d:c8:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Validity
Not Before: Oct 17 02:55:00 2022 GMT
Not After : Oct 16 03:00:00 2023 GMT
Subject: CN=5A96B8E8E6D9F8C3FB25E1EFC057CA2E9D0278A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:f4:bb:14:69:ad:b7:b0:5d:e1:3e:bd:a0:
9e:4a:33:3c:c4:78:d9:bf:b4:20:bc:77:cf:bf:62:
50:36:b8:93:b4:8f:f3:a5:4f:d2:de:d5:9a:80:58:
1f:24:2f:73:a6:8c:4a:52:7a:86:6d:e8:86:04:80:
27:93:79:23:75:d5:33:37:0d:aa:d3:45:5a:c6:00:
f8:a9:ae:28:fa:b1:95:64:29:67:11:d0:85:83:2e:
72:a3:49:d6:5e:64:d1:9b:bc:52:a2:b4:4b:fe:49:
04:9b:87:92:b8:52:9f:a7:32:eb:56:1e:11:20:c5:
b7:fb:df:3c:a6:41:66:9c:2e:9a:fd:5c:62:bd:e5:
08:2a:6e:42:e1:0c:1a:18:36:85:e1:5b:a5:f9:d2:
6d:51:a4:1c:1c:f0:ab:3b:3c:7e:60:fc:c6:8a:33:
60:d4:ee:11:33:ab:b0:c2:a8:3c:b8:76:cf:e3:99:
b3:be:c2:09:5f:b4:1f:28:00:c7:16:23:36:45:99:
3e:2b:c6:ce:7e:53:19:82:9a:5d:e9:d2:07:b5:25:
5c:fc:8e:29:4f:89:6c:26:df:0f:a5:43:3e:af:6f:
a6:68:6f:69:48:f7:3f:ce:73:43:b5:22:2d:1a:e4:
4b:1c:f1:13:e6:d9:fb:45:75:63:c3:dd:26:42:08:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:96:B8:E8:E6:D9:F8:C3:FB:25:E1:EF:C0:57:CA:2E:9D:02:78:A0
X509v3 Authority Key Identifier:
keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/3130332e3233382e3230332e302f32342d3234203d3e20313338383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.238.203.0/24
Signature Algorithm: sha256WithRSAEncryption
93:03:67:33:20:4e:d1:6a:b7:11:4e:90:f4:2d:83:13:81:2a:
5c:5f:7e:bc:30:4e:9d:68:41:96:d9:9b:89:17:01:7a:f0:cf:
5b:ed:33:4a:f1:70:2f:bc:f4:48:ce:58:5d:83:13:e7:2c:cd:
e6:68:71:e8:6f:62:ea:6c:f2:1f:74:9b:f0:86:cd:98:c1:fd:
0e:56:80:d7:a7:61:a0:d0:85:b2:7f:99:7b:ce:44:9d:84:3b:
05:75:1a:dd:8b:db:00:e4:f3:25:e6:35:6d:0f:8d:e5:c8:47:
e5:8f:10:c3:25:2c:f4:ce:65:1f:1f:81:cb:35:53:6e:c4:29:
76:79:65:ab:99:e5:b2:36:cf:80:f7:c7:28:54:58:e7:b5:d4:
c7:c3:5d:22:c3:d0:cc:a7:92:83:b3:69:ce:9b:c0:02:e0:c7:
76:01:41:84:66:ad:9e:14:2a:03:ae:db:8b:79:14:00:0f:48:
96:3b:80:39:a8:51:7b:5a:97:ce:a6:f7:c4:b1:6d:1d:f3:e2:
ce:53:f0:23:28:3c:36:5c:99:85:fd:a3:0d:b9:b9:f8:a1:a2:
23:8b:11:4a:b6:51:93:da:3e:7f:3a:a1:fc:3c:96:b5:a8:73:
40:cc:1d:f0:e3:a8:f8:e7:95:89:38:cc:cb:19:dc:54:e1:2d:
af:78:5c:30
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUDkyX6Ab6aW0c3f2Gw9tRdn3IbJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz
QzkzQjk2QjAeFw0yMjEwMTcwMjU1MDBaFw0yMzEwMTYwMzAwMDBaMDMxMTAvBgNV
BAMTKDVBOTZCOEU4RTZEOUY4QzNGQjI1RTFFRkMwNTdDQTJFOUQwMjc4QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GfS7FGmtt7Bd4T69oJ5KMzzE
eNm/tCC8d8+/YlA2uJO0j/OlT9Le1ZqAWB8kL3OmjEpSeoZt6IYEgCeTeSN11TM3
DarTRVrGAPiprij6sZVkKWcR0IWDLnKjSdZeZNGbvFKitEv+SQSbh5K4Up+nMutW
HhEgxbf73zymQWacLpr9XGK95QgqbkLhDBoYNoXhW6X50m1RpBwc8Ks7PH5g/MaK
M2DU7hEzq7DCqDy4ds/jmbO+wglftB8oAMcWIzZFmT4rxs5+UxmCml3p0ge1JVz8
jilPiWwm3w+lQz6vb6Zob2lI9z/Oc0O1Ii0a5Esc8RPm2ftFdWPD3SZCCKUNAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUWpa46ObZ+MP7JeHvwFfKLp0CeKAwHwYDVR0j
BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw
NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz
Qjk2Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyNGE2NWY0LTRmNGItNDRiNi1h
MmViLTU5OTU3YmM2YTRkMy8wLzMxMzAzMzJlMzIzMzM4MmUzMjMwMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn7sswDQYJ
KoZIhvcNAQELBQADggEBAJMDZzMgTtFqtxFOkPQtgxOBKlxffrwwTp1oQZbZm4kX
AXrwz1vtM0rxcC+89EjOWF2DE+cszeZocehvYups8h90m/CGzZjB/Q5WgNenYaDQ
hbJ/mXvORJ2EOwV1Gt2L2wDk8yXmNW0PjeXIR+WPEMMlLPTOZR8fgcs1U27EKXZ5
ZauZ5bI2z4D3xyhUWOe11MfDXSLD0MynkoOzac6bwALgx3YBQYRmrZ4UKgOu24t5
FAAPSJY7gDmoUXtal86m98SxbR3z4s5T8CMoPDZcmYX9ow25ufihoiOLEUq2UZPa
Pn86ofw8lrWoc0DMHfDjqPjnlYk4zMsZ3FThLa94XDA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org