Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3130332e37362e39312e302f32342d3234203d3e20313530323432.roa
File: 3130332e37362e39312e302f32342d3234203d3e20313530323432.roa (raw, json)
Hash identifier: QcLxWNnrVrwDS7QxxnPvqfGjeCsAjOAbjjPJEpMOTa0=
Subject key identifier: 90:0B:F6:9B:D9:3C:35:D6:94:B8:B6:7A:87:F5:61:B2:07:E5:3C:A3
Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF
Certificate serial: 7FF46F6521DD76EA2F3727E9ABFBDB8A1225AF15
Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3130332e37362e39312e302f32342d3234203d3e20313530323432.roa
Signing time: Thu 04 Apr 2024 16:00:01 +0000
ROA not before: Thu 04 Apr 2024 15:55:01 +0000
ROA not after: Thu 03 Apr 2025 16:00:01 +0000
asID: 150242
IP address blocks: 103.76.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 04:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f4:6f:65:21:dd:76:ea:2f:37:27:e9:ab:fb:db:8a:12:25:af:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF
Validity
Not Before: Apr 4 15:55:01 2024 GMT
Not After : Apr 3 16:00:01 2025 GMT
Subject: CN=900BF69BD93C35D694B8B67A87F561B207E53CA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:23:8b:23:10:33:20:6c:fe:60:af:70:d1:
ff:fb:e2:17:12:21:51:80:ad:ac:28:5e:35:bc:d3:
26:23:2c:ac:b9:c6:f4:44:c2:0d:17:07:f3:d2:2f:
6a:c9:fa:2d:ca:54:5f:ae:38:9a:88:18:a0:ec:cc:
90:69:d9:b1:c9:4f:2e:97:4a:8a:d8:34:58:07:79:
6c:72:4d:e9:c1:ac:bd:21:6c:bd:6e:a9:cb:45:32:
08:43:ab:67:3e:e1:3b:90:28:32:1c:1f:f8:10:b1:
06:3d:46:96:cb:3b:61:d3:b6:82:4e:fd:34:57:c2:
4e:65:25:13:ce:6c:66:5c:e7:80:85:3e:e1:36:60:
43:77:4f:f0:b3:d9:ad:6f:01:7a:85:75:0f:7b:0e:
7a:da:28:c9:a5:74:60:6c:82:31:9b:f6:ad:54:c4:
17:ca:d2:04:26:86:7f:4f:f9:05:c9:d4:47:a8:c5:
9c:80:ae:21:d6:99:2b:fa:74:65:b7:38:36:35:d1:
2e:70:76:04:9e:78:04:c9:58:ca:cb:64:b1:ec:34:
01:0d:4f:a8:fa:33:85:ff:f7:11:d8:95:6a:72:bb:
54:4f:4e:74:6e:62:c6:9e:ea:03:dc:09:a1:99:73:
21:8b:9f:6d:2b:8b:8d:6c:6d:63:50:ab:8a:14:f3:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0B:F6:9B:D9:3C:35:D6:94:B8:B6:7A:87:F5:61:B2:07:E5:3C:A3
X509v3 Authority Key Identifier:
keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/3130332e37362e39312e302f32342d3234203d3e20313530323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.91.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:c8:a1:1d:27:eb:64:69:8f:6e:95:f6:f7:1a:3d:4e:dc:36:
35:56:72:1b:11:60:43:dc:a3:9f:5f:fa:0e:2e:92:51:e2:a8:
e1:fe:f4:0e:89:76:f2:54:aa:ec:67:e2:91:52:61:eb:82:8a:
ec:c1:b1:a6:a7:bb:f4:01:7d:19:66:e7:c8:0f:91:b9:fc:e7:
93:02:18:cd:4a:2d:d4:7e:2d:88:2a:53:f2:cd:ab:e4:5a:6a:
08:08:2d:26:51:26:df:01:a9:23:d5:eb:6c:56:a1:77:fc:8f:
13:5a:ab:c1:aa:1c:e6:46:dd:ba:91:f0:80:f5:99:80:16:d5:
8e:44:49:d3:92:b2:8b:72:6c:85:54:55:12:a2:68:54:53:70:
d9:92:0d:11:7d:68:53:22:6f:63:b7:36:48:a5:a4:3d:41:20:
b5:23:0e:c9:1b:04:4c:93:e1:a2:9e:8a:7c:6f:23:83:37:4f:
4d:d9:af:6c:7f:29:69:d5:71:6f:85:85:e8:0e:72:a8:09:ff:
eb:8e:5f:0b:c7:d1:0b:ff:18:f2:d1:a6:45:04:6d:85:39:ae:
0d:f4:bf:ee:ad:9d:2c:39:b5:ec:5a:7c:27:c9:4f:6b:9f:b1:
a5:6a:d8:11:52:20:61:e4:37:3e:21:9e:97:1a:0e:c8:c9:48:
68:97:a7:04
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUf/RvZSHdduovNyfpq/vbihIlrxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx
M0RGRDZGRjAeFw0yNDA0MDQxNTU1MDFaFw0yNTA0MDMxNjAwMDFaMDMxMTAvBgNV
BAMTKDkwMEJGNjlCRDkzQzM1RDY5NEI4QjY3QTg3RjU2MUIyMDdFNTNDQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWiOLIxAzIGz+YK9w0f/74hcS
IVGArawoXjW80yYjLKy5xvREwg0XB/PSL2rJ+i3KVF+uOJqIGKDszJBp2bHJTy6X
SorYNFgHeWxyTenBrL0hbL1uqctFMghDq2c+4TuQKDIcH/gQsQY9RpbLO2HTtoJO
/TRXwk5lJRPObGZc54CFPuE2YEN3T/Cz2a1vAXqFdQ97DnraKMmldGBsgjGb9q1U
xBfK0gQmhn9P+QXJ1EeoxZyAriHWmSv6dGW3ODY10S5wdgSeeATJWMrLZLHsNAEN
T6j6M4X/9xHYlWpyu1RPTnRuYsae6gPcCaGZcyGLn20ri41sbWNQq4oU8+zzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUkAv2m9k8NdaUuLZ6h/VhsgflPKMwHwYDVR0j
BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC
NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG
RDZGRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwZjI0NzMzLWU4ZGEtNDJjOC04
NDZiLWU3OTRlMWI0MzlkYS8wLzMxMzAzMzJlMzczNjJlMzkzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdMWzANBgkqhkiG
9w0BAQsFAAOCAQEAxcihHSfrZGmPbpX29xo9Ttw2NVZyGxFgQ9yjn1/6Di6SUeKo
4f70Dol28lSq7GfikVJh64KK7MGxpqe79AF9GWbnyA+RufznkwIYzUot1H4tiCpT
8s2r5FpqCAgtJlEm3wGpI9XrbFahd/yPE1qrwaoc5kbdupHwgPWZgBbVjkRJ05Ky
i3JshVRVEqJoVFNw2ZINEX1oUyJvY7c2SKWkPUEgtSMOyRsETJPhop6KfG8jgzdP
TdmvbH8padVxb4WF6A5yqAn/645fC8fRC/8Y8tGmRQRthTmuDfS/7q2dLDm17Fp8
J8lPa5+xpWrYEVIgYeQ3PiGelxoOyMlIaJenBA==
-----END CERTIFICATE-----
Generated at Thu Jun 20 04:44:04 2024 by rpki-client on console-fra.rpki-client.org