Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39382e302f32342d3234203d3e203137343530.roa
File: 3130332e382e39382e302f32342d3234203d3e203137343530.roa (raw, json)
Hash identifier: hRkq+x4IIpMUVYLw9/akqvApq7050eKkq0Toy1VF5dU=
Subject key identifier: 09:C3:25:C6:FC:D8:E5:E9:FF:65:0C:52:70:D5:ED:CC:D3:F3:A8:5F
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 25263A401C66CBCCBB5B7742EA49F8EFC21EB454
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39382e302f32342d3234203d3e203137343530.roa
Signing time: Fri 08 Sep 2023 08:39:32 +0000
ROA not before: Fri 08 Sep 2023 08:34:32 +0000
ROA not after: Fri 06 Sep 2024 08:39:32 +0000
asID: 17450
IP address blocks: 103.8.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 07:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:26:3a:40:1c:66:cb:cc:bb:5b:77:42:ea:49:f8:ef:c2:1e:b4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Sep 8 08:34:32 2023 GMT
Not After : Sep 6 08:39:32 2024 GMT
Subject: CN=09C325C6FCD8E5E9FF650C5270D5EDCCD3F3A85F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:80:61:a2:2f:f9:26:d8:65:dc:61:5d:72:
47:49:6d:06:d6:90:37:7f:f4:a3:b1:ec:7d:b4:69:
0f:55:12:d8:f1:9f:78:41:15:ee:42:f0:5a:9f:58:
18:d7:7a:68:f7:fc:51:fe:53:7f:4f:6a:d4:a5:bf:
da:27:b3:85:fb:ff:f4:62:71:eb:f5:eb:90:9a:4b:
d4:76:9d:fd:be:c2:e9:45:24:f3:31:bd:07:31:ca:
0e:07:dd:a0:42:73:27:dd:3e:f7:79:99:5b:6a:d6:
3b:c5:27:1d:ae:3e:01:ad:03:78:1f:71:82:15:cd:
09:49:98:53:58:db:00:c0:69:92:94:e0:7b:c1:19:
9a:0b:3f:1f:2e:fe:f9:3f:b1:3e:dd:48:b4:c0:9b:
54:f5:22:0d:c6:26:d3:e4:7a:b2:73:d0:1b:b1:f3:
80:f2:a7:68:eb:72:30:45:70:a1:16:7e:1f:a9:5e:
db:f8:99:08:db:cf:d1:df:80:1a:b8:bc:7b:9d:a1:
9d:2a:22:1c:0c:2a:5a:b1:f8:72:7f:92:7b:34:73:
cc:77:98:38:00:b4:74:6a:bd:ba:14:9c:e3:58:eb:
8a:4e:60:53:63:7e:c4:7a:89:98:e8:fa:e9:f5:9a:
dd:8d:ca:28:9c:95:c3:97:4d:f1:21:49:92:77:16:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:25:C6:FC:D8:E5:E9:FF:65:0C:52:70:D5:ED:CC:D3:F3:A8:5F
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3130332e382e39382e302f32342d3234203d3e203137343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ae:54:aa:eb:7e:78:80:01:45:56:a0:b9:c7:1d:02:e5:4e:
a4:7e:c1:5c:a8:fa:7e:08:37:b6:0f:d0:e1:d7:ca:15:71:e4:
a7:fa:c3:a7:1a:81:2b:74:97:e7:62:52:4e:0d:e7:49:b4:9e:
d0:ed:cd:96:64:57:ea:eb:60:81:fc:5c:94:51:39:bf:50:0b:
eb:07:f8:12:f0:dd:f9:9d:2f:82:0f:71:e2:94:f2:d6:61:db:
79:15:b8:45:ee:b6:5a:2c:0f:b9:07:3e:65:7a:b3:db:2c:bc:
0f:d8:8d:9f:a7:24:66:b2:4f:64:c7:45:53:a6:ae:50:07:8b:
36:0b:c8:07:b9:99:45:6c:8c:b5:47:3b:b2:c2:43:6a:f1:2f:
b2:d9:69:44:d3:49:73:42:e1:62:69:67:68:3b:80:66:4e:b1:
b5:64:18:c5:c4:02:fc:0b:7e:00:7e:dc:f7:76:59:a1:4b:92:
7a:f0:20:fe:46:3b:24:c9:33:6c:8b:fb:da:6c:2b:fc:ca:c1:
8c:3a:75:d5:7e:a1:79:d7:bc:7f:ed:cb:09:48:7e:58:a6:d9:
3c:d8:f7:6a:79:99:2e:d3:49:56:b5:c8:3a:b6:0d:ed:d6:8a:
17:f5:bf:bc:3a:60:ac:1d:8c:80:57:f8:97:43:9d:6f:e8:ae:
19:15:4f:6f
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUJSY6QBxmy8y7W3dC6kn478IetFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx
NjM4QTcwNzAeFw0yMzA5MDgwODM0MzJaFw0yNDA5MDYwODM5MzJaMDMxMTAvBgNV
BAMTKDA5QzMyNUM2RkNEOEU1RTlGRjY1MEM1MjcwRDVFRENDRDNGM0E4NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBIBhoi/5Jthl3GFdckdJbQbW
kDd/9KOx7H20aQ9VEtjxn3hBFe5C8FqfWBjXemj3/FH+U39PatSlv9ons4X7//Ri
cev165CaS9R2nf2+wulFJPMxvQcxyg4H3aBCcyfdPvd5mVtq1jvFJx2uPgGtA3gf
cYIVzQlJmFNY2wDAaZKU4HvBGZoLPx8u/vk/sT7dSLTAm1T1Ig3GJtPkerJz0Bux
84Dyp2jrcjBFcKEWfh+pXtv4mQjbz9HfgBq4vHudoZ0qIhwMKlqx+HJ/kns0c8x3
mDgAtHRqvboUnONY64pOYFNjfsR6iZjo+un1mt2NyiiclcOXTfEhSZJ3FmsTAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUCcMlxvzY5en/ZQxScNXtzNPzqF8wHwYDVR0j
BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC
MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4
QTcwNy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx
YTAtMmVjNjcwODM2YzQyLzAvMzEzMDMzMmUzODJlMzkzODJlMzAyZjMyMzQyZDMy
MzQyMDNkM2UyMDMxMzczNDM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCGIwDQYJKoZIhvcNAQEL
BQADggEBAKOuVKrrfniAAUVWoLnHHQLlTqR+wVyo+n4IN7YP0OHXyhVx5Kf6w6ca
gSt0l+diUk4N50m0ntDtzZZkV+rrYIH8XJRROb9QC+sH+BLw3fmdL4IPceKU8tZh
23kVuEXutlosD7kHPmV6s9ssvA/YjZ+nJGayT2THRVOmrlAHizYLyAe5mUVsjLVH
O7LCQ2rxL7LZaUTTSXNC4WJpZ2g7gGZOsbVkGMXEAvwLfgB+3Pd2WaFLknrwIP5G
OyTJM2yL+9psK/zKwYw6ddV+oXnXvH/tywlIflim2TzY92p5mS7TSVa1yDq2De3W
ihf1v7w6YKwdjIBX+JdDnW/orhkVT28=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org