Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32332d3234203d3e20313531353732.roa
File: 3130332e36302e38382e302f32332d3234203d3e20313531353732.roa (raw, json)
Hash identifier: 3+XBqQH5L/Y8gvwgbN2eJvBeF8DdYy185cwKnGJ8tAU=
Subject key identifier: A9:50:D3:75:2D:BF:5F:35:1E:1F:59:B4:AA:DB:6A:33:52:91:1A:C4
Certificate issuer: /CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE
Certificate serial: 526395A4461FF5B9882DF64E664218D105AF4B3B
Authority key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32332d3234203d3e20313531353732.roa
Signing time: Tue 21 May 2024 09:21:08 +0000
ROA not before: Tue 21 May 2024 09:16:08 +0000
ROA not after: Tue 20 May 2025 09:21:08 +0000
asID: 151572
IP address blocks: 103.60.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 22:51:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:63:95:a4:46:1f:f5:b9:88:2d:f6:4e:66:42:18:d1:05:af:4b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE
Validity
Not Before: May 21 09:16:08 2024 GMT
Not After : May 20 09:21:08 2025 GMT
Subject: CN=A950D3752DBF5F351E1F59B4AADB6A3352911AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:4d:91:41:95:fa:34:a4:0b:0e:04:98:a3:
65:d9:51:cf:56:08:88:98:78:10:f6:36:fa:ac:ae:
86:39:60:f3:3a:b3:8a:df:86:f6:94:ce:37:48:aa:
b3:b3:4d:68:86:d5:d3:18:53:0b:07:7c:a7:d7:18:
81:5c:fd:58:1f:e6:8b:b8:28:1e:ae:f7:9a:bd:23:
25:13:0d:c6:cf:bd:21:c4:24:3d:fd:b7:68:08:58:
9d:c5:8b:dc:16:70:95:f2:19:61:b3:34:a9:05:fc:
d6:8e:7a:48:36:33:28:ba:03:ef:e1:2f:e0:08:dd:
86:4b:a3:7a:6f:ca:2d:0a:bb:10:a7:fd:37:e7:31:
56:ee:16:5b:61:7d:d2:38:4e:b5:b0:d0:75:07:68:
a8:77:44:f3:fa:1d:4a:79:79:d5:f2:cd:5f:12:30:
29:84:e6:7e:21:76:ce:e5:54:ae:f2:0e:4e:6f:63:
9b:dd:b0:fe:f7:c5:51:5c:51:75:fa:95:3a:34:44:
1f:7f:e1:d0:35:42:d1:4f:78:e2:c8:39:a2:4d:c5:
65:6b:e5:9b:8b:74:be:f7:c1:17:ba:c3:eb:89:a9:
42:97:47:10:e3:40:38:77:5d:72:7c:a6:f9:85:98:
c5:77:26:c3:b4:b8:5b:c1:34:5b:2e:61:d2:90:5f:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:50:D3:75:2D:BF:5F:35:1E:1F:59:B4:AA:DB:6A:33:52:91:1A:C4
X509v3 Authority Key Identifier:
keyid:E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32332d3234203d3e20313531353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.88.0/23
Signature Algorithm: sha256WithRSAEncryption
79:fe:2b:62:02:9b:a1:0b:a7:0e:e9:17:55:56:f5:bf:45:fa:
41:47:f1:f2:b9:ee:6c:70:5d:6a:d6:06:8a:ec:96:17:8f:b2:
5c:00:a6:3a:a3:25:ed:22:84:61:84:cd:6c:c6:da:a1:7c:c5:
3d:2d:6e:66:71:bb:24:a0:91:d4:6f:9b:86:40:a0:74:58:16:
ba:7e:76:9b:b6:d4:ba:db:4e:c2:c3:77:19:09:8a:61:39:89:
f5:e0:21:33:5c:59:dd:5e:e6:c6:b6:7f:9f:2c:c7:13:19:b3:
85:5b:6b:61:4b:c2:8d:f3:01:a0:69:af:55:a5:b5:47:29:35:
ec:6b:e5:e9:6a:12:51:cc:4f:73:89:ff:f6:d6:d5:06:37:47:
dc:6b:66:dc:e4:5f:61:61:0c:3b:2f:2b:ba:d7:84:2c:db:05:
7f:88:0e:30:5d:7a:41:92:0d:9e:1e:8d:d1:bd:99:ce:15:fa:
e7:3b:b9:c1:25:13:9b:76:46:83:71:bc:e5:28:4a:a0:de:ae:
54:9f:c6:e8:b6:da:18:41:83:be:6c:90:a2:fa:af:10:c0:48:
dc:59:22:f4:76:94:92:80:eb:d8:af:32:16:9c:e2:cd:b2:db:
0d:1e:3b:0e:ea:4e:6d:48:0f:ae:2c:c8:6e:eb:e8:86:bd:d4:
62:6a:48:32
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUmOVpEYf9bmILfZOZkIY0QWvSzswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZF
ODIxMkRERTAeFw0yNDA1MjEwOTE2MDhaFw0yNTA1MjAwOTIxMDhaMDMxMTAvBgNV
BAMTKEE5NTBEMzc1MkRCRjVGMzUxRTFGNTlCNEFBREI2QTMzNTI5MTFBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZE2RQZX6NKQLDgSYo2XZUc9W
CIiYeBD2NvqsroY5YPM6s4rfhvaUzjdIqrOzTWiG1dMYUwsHfKfXGIFc/Vgf5ou4
KB6u95q9IyUTDcbPvSHEJD39t2gIWJ3Fi9wWcJXyGWGzNKkF/NaOekg2Myi6A+/h
L+AI3YZLo3pvyi0KuxCn/TfnMVbuFlthfdI4TrWw0HUHaKh3RPP6HUp5edXyzV8S
MCmE5n4hds7lVK7yDk5vY5vdsP73xVFcUXX6lTo0RB9/4dA1QtFPeOLIOaJNxWVr
5ZuLdL73wRe6w+uJqUKXRxDjQDh3XXJ8pvmFmMV3JsO0uFvBNFsuYdKQX/KtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUqVDTdS2/XzUeH1m0qttqM1KRGsQwHwYDVR0j
BBgwFoAU58nk5cjqmJ8P99b+bb1qT+ghLd4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMC9FN0M5RTRFNUM4
RUE5ODlGMEZGN0Q2RkU2REJENkE0RkU4MjEyRERFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTdDOUU0RTVDOEVBOTg5RjBGRjdENkZFNkRCRDZBNEZFODIx
MkRERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTFhYTQ2LWYyOGUtNGM1NS1i
OWJhLTdkNWJkYzk1YjRmNi8wLzMxMzAzMzJlMzYzMDJlMzgzODJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMTM1MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc8WDANBgkqhkiG
9w0BAQsFAAOCAQEAef4rYgKboQunDukXVVb1v0X6QUfx8rnubHBdatYGiuyWF4+y
XACmOqMl7SKEYYTNbMbaoXzFPS1uZnG7JKCR1G+bhkCgdFgWun52m7bUuttOwsN3
GQmKYTmJ9eAhM1xZ3V7mxrZ/nyzHExmzhVtrYUvCjfMBoGmvVaW1Ryk17Gvl6WoS
UcxPc4n/9tbVBjdH3Gtm3ORfYWEMOy8ruteELNsFf4gOMF16QZINnh6N0b2ZzhX6
5zu5wSUTm3ZGg3G85ShKoN6uVJ/G6LbaGEGDvmyQovqvEMBI3Fki9HaUkoDr2K8y
FpzizbLbDR47DupObUgPrizIbuvohr3UYmpIMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org