Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134302e302f32322d3234203d3e203535363835.roa
File: 3135302e3130372e3134302e302f32322d3234203d3e203535363835.roa (raw, json)
Hash identifier: jJpjUL/seb0VeETNc9DvvWdXEXkkKr8u7ibLKE5Qo2g=
Subject key identifier: 97:6C:40:7B:81:AD:9A:BC:D7:9F:E3:CF:90:BC:C4:25:51:76:DC:B2
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 0679732F66C76E4E46AEBE8C50A8DB79A4FD14E6
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134302e302f32322d3234203d3e203535363835.roa
Signing time: Mon 31 Jul 2023 00:13:03 +0000
ROA not before: Mon 31 Jul 2023 00:08:03 +0000
ROA not after: Mon 29 Jul 2024 00:13:03 +0000
asID: 55685
IP address blocks: 150.107.140.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 12:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:79:73:2f:66:c7:6e:4e:46:ae:be:8c:50:a8:db:79:a4:fd:14:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Jul 31 00:08:03 2023 GMT
Not After : Jul 29 00:13:03 2024 GMT
Subject: CN=976C407B81AD9ABCD79FE3CF90BCC4255176DCB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fb:6b:a7:dd:a5:5c:fe:f4:78:d8:3d:11:27:
32:28:af:ff:dd:de:f3:1b:df:e7:8e:68:e7:be:f2:
57:0b:a1:ac:dd:e2:a6:35:69:b5:f7:c2:4f:d6:9f:
18:53:4a:6d:55:21:13:08:f1:8a:e4:c7:9c:19:04:
64:71:e0:72:29:af:95:c5:12:2d:68:9c:37:1b:5c:
63:bb:a6:c1:bc:5b:b3:69:17:31:23:01:48:5e:0b:
ef:d6:dd:ea:94:3d:d1:04:b4:59:b3:c8:7b:2c:9b:
fe:d0:0d:34:b5:60:af:c4:c9:6a:21:6e:11:04:8a:
24:a3:45:4c:7c:83:b5:31:5c:20:22:8b:78:d4:93:
82:05:03:fa:da:d3:52:b3:a7:4d:37:c0:84:f0:3e:
4a:ec:78:45:59:17:ab:99:cc:d9:46:c7:00:f3:4a:
e6:a4:7d:c9:73:39:82:11:fa:be:66:6c:9e:07:4a:
c3:b1:86:85:3c:1c:f9:a4:68:a8:87:88:c2:fd:9d:
56:bc:ac:5d:44:60:be:7c:a5:99:5e:8c:d7:13:02:
b7:69:0b:e6:50:77:49:ff:2e:63:c7:6b:43:08:0e:
28:ce:91:fd:be:89:c6:76:50:9a:8f:27:dd:de:41:
90:b6:06:7a:8c:2d:0c:49:9a:92:28:4e:8d:e7:54:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6C:40:7B:81:AD:9A:BC:D7:9F:E3:CF:90:BC:C4:25:51:76:DC:B2
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134302e302f32322d3234203d3e203535363835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.140.0/22
Signature Algorithm: sha256WithRSAEncryption
72:8b:60:d9:b0:45:f4:d7:33:63:97:40:c7:cc:40:8a:92:2e:
2e:3e:b5:99:96:50:62:5f:ef:17:f2:fc:95:b1:0a:de:2e:cc:
2b:e2:3f:e1:39:58:98:bd:10:ee:f1:a1:af:7d:7b:6e:2e:e8:
a0:d7:3b:81:92:ea:53:ec:c6:bb:f0:5a:1a:3c:8b:1d:93:85:
df:7c:47:dd:08:04:23:8e:7a:03:19:4a:66:a0:e8:24:60:7e:
f1:50:e8:36:a7:10:c2:ff:95:50:48:6d:a7:5d:b9:24:b6:7a:
ee:49:8a:22:0f:c3:e2:7b:a9:66:81:53:c6:70:7a:c3:a0:bb:
9e:a6:fe:17:6a:a3:32:e3:06:58:ba:93:48:19:7c:68:47:24:
4e:e9:37:32:4a:a1:b9:9a:32:ef:e8:df:e6:be:36:21:d0:ca:
3a:33:ef:1a:a2:17:31:d1:32:6e:3b:f7:9b:b5:14:8b:0d:bf:
5d:74:d9:27:4e:a1:4e:2f:9f:a9:18:71:e8:a9:39:d7:ba:e0:
5e:7d:e0:61:2b:e0:bb:51:05:c1:14:4b:76:bb:6d:38:65:18:
22:93:86:98:5d:ea:b2:bb:f9:a0:07:ab:d7:a3:c6:df:51:fb:
e9:7e:d6:eb:c6:a1:1b:5f:be:a4:23:28:89:96:22:03:27:57:
ee:8c:7d:07
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBnlzL2bHbk5Grr6MUKjbeaT9FOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4
MTFBNzA0RDAeFw0yMzA3MzEwMDA4MDNaFw0yNDA3MjkwMDEzMDNaMDMxMTAvBgNV
BAMTKDk3NkM0MDdCODFBRDlBQkNENzlGRTNDRjkwQkNDNDI1NTE3NkRDQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp+2un3aVc/vR42D0RJzIor//d
3vMb3+eOaOe+8lcLoazd4qY1abX3wk/WnxhTSm1VIRMI8Yrkx5wZBGRx4HIpr5XF
Ei1onDcbXGO7psG8W7NpFzEjAUheC+/W3eqUPdEEtFmzyHssm/7QDTS1YK/EyWoh
bhEEiiSjRUx8g7UxXCAii3jUk4IFA/ra01Kzp003wITwPkrseEVZF6uZzNlGxwDz
SuakfclzOYIR+r5mbJ4HSsOxhoU8HPmkaKiHiML9nVa8rF1EYL58pZlejNcTArdp
C+ZQd0n/LmPHa0MIDijOkf2+icZ2UJqPJ93eQZC2BnqMLQxJmpIoTo3nVFRRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUl2xAe4GtmrzXn+PPkLzEJVF23LIwHwYDVR0j
BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw
RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB
NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04
ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzUzMDJlMzEzMDM3MmUzMTM0MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmuMMA0GCSqG
SIb3DQEBCwUAA4IBAQByi2DZsEX01zNjl0DHzECKki4uPrWZllBiX+8X8vyVsQre
Lswr4j/hOViYvRDu8aGvfXtuLuig1zuBkupT7Ma78FoaPIsdk4XffEfdCAQjjnoD
GUpmoOgkYH7xUOg2pxDC/5VQSG2nXbkktnruSYoiD8Pie6lmgVPGcHrDoLuepv4X
aqMy4wZYupNIGXxoRyRO6TcySqG5mjLv6N/mvjYh0Mo6M+8aohcx0TJuO/ebtRSL
Db9ddNknTqFOL5+pGHHoqTnXuuBefeBhK+C7UQXBFEt2u204ZRgik4aYXeqyu/mg
B6vXo8bfUfvpftbrxqEbX76kIyiJliIDJ1fujH0H
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org