Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37362e302f32322d3232203d3e20313336313331.roa
File: 3130332e39372e37362e302f32322d3232203d3e20313336313331.roa (raw, json)
Hash identifier: CEuSN+9p/71cltnnHYROyqOn5DsENUHF7kurIvalcfs=
Subject key identifier: D5:C1:F8:F6:4F:0B:AB:CB:8F:19:D2:BB:AE:BD:CB:4D:0E:85:E8:00
Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Certificate serial: 0CD104210FBAC50560EF932F80134A0BAC99BDA5
Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37362e302f32322d3232203d3e20313336313331.roa
Signing time: Fri 14 Jun 2024 14:00:40 +0000
ROA not before: Fri 14 Jun 2024 13:55:40 +0000
ROA not after: Fri 13 Jun 2025 14:00:40 +0000
asID: 136131
IP address blocks: 103.97.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 04 Apr 2025 18:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d1:04:21:0f:ba:c5:05:60:ef:93:2f:80:13:4a:0b:ac:99:bd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Validity
Not Before: Jun 14 13:55:40 2024 GMT
Not After : Jun 13 14:00:40 2025 GMT
Subject: CN=D5C1F8F64F0BABCB8F19D2BBAEBDCB4D0E85E800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:5f:f4:87:c2:2f:7c:03:4e:cc:65:46:50:
af:66:0f:76:ed:19:99:e4:f3:38:8e:b1:ed:79:73:
92:ab:63:b8:37:c4:b9:ef:da:68:dc:5b:54:e8:6e:
66:6a:3e:13:41:10:92:09:96:a2:73:05:ed:93:18:
85:55:50:9d:c8:d7:5b:18:7a:ab:1e:2a:88:24:0d:
a3:16:e5:07:33:bd:2a:fb:3b:7f:39:b8:62:7e:f1:
fa:16:8b:25:5c:22:e3:bc:4a:e1:fe:3d:11:29:fe:
26:32:49:ce:df:b4:09:96:48:68:15:c5:68:51:2d:
5d:4f:b6:42:34:ea:4f:e4:42:53:68:12:6e:be:30:
e1:d4:11:98:fd:44:7c:cf:8d:7b:80:b7:e7:ff:43:
19:63:9a:92:ea:32:5b:dd:79:6d:71:8c:29:69:45:
90:cd:ea:02:b5:77:cd:20:5b:fb:d2:94:97:61:33:
82:b7:f9:07:38:23:c9:30:00:5c:47:b6:8f:79:1e:
0e:a7:7c:ef:01:10:6e:8c:9c:11:c6:cd:54:ba:e8:
4e:d8:95:99:6a:c1:d4:a7:99:16:79:8d:0a:15:95:
a5:3f:af:ee:2f:52:9e:19:05:cf:44:70:b1:3d:c8:
c1:60:69:94:88:06:c5:08:53:c6:e0:7c:8e:b6:3b:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C1:F8:F6:4F:0B:AB:CB:8F:19:D2:BB:AE:BD:CB:4D:0E:85:E8:00
X509v3 Authority Key Identifier:
keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37362e302f32322d3232203d3e20313336313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.76.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:c4:20:fb:85:a3:9b:63:80:6e:f6:7b:88:08:1e:39:82:db:
02:16:17:40:7c:3e:50:db:e4:8b:3a:58:ba:17:2d:44:45:6c:
a9:2e:61:fe:84:e1:34:2a:d4:26:9a:01:30:d0:1f:15:23:f3:
1c:1c:8f:ae:68:ff:83:30:14:eb:df:45:37:a4:9a:86:1a:21:
71:29:dd:a4:6a:0b:2c:2e:dc:3c:7b:87:94:c0:ed:68:56:fa:
d0:ce:4a:e6:75:46:84:96:de:48:02:84:08:a9:97:f1:c7:84:
6d:39:db:42:82:02:ee:d2:02:90:47:fb:06:26:85:b9:21:b5:
9b:a6:a2:18:2d:c4:c0:50:9d:20:f9:26:e2:ff:a4:60:98:46:
04:58:10:b6:77:9c:1d:d7:c1:b3:0c:13:67:5d:09:1a:9f:49:
9b:4d:47:0e:f6:99:5d:43:5f:54:a1:39:49:9a:77:2b:92:5a:
20:fe:8d:ad:33:b2:6e:8c:16:e3:de:30:73:9e:db:dd:15:ca:
26:29:3e:49:61:db:6c:0d:28:a6:55:19:56:06:ea:a2:09:e1:
b8:70:cf:19:3b:83:15:82:a6:76:30:de:1b:9c:4f:38:27:9d:
49:04:c5:00:52:dd:c3:df:40:60:2c:62:e6:1b:ab:9f:e8:74:
9b:5c:c1:df
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDNEEIQ+6xQVg75MvgBNKC6yZvaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC
QUI5M0Y2NzAeFw0yNDA2MTQxMzU1NDBaFw0yNTA2MTMxNDAwNDBaMDMxMTAvBgNV
BAMTKEQ1QzFGOEY2NEYwQkFCQ0I4RjE5RDJCQkFFQkRDQjREMEU4NUU4MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKl/0h8IvfANOzGVGUK9mD3bt
GZnk8ziOse15c5KrY7g3xLnv2mjcW1TobmZqPhNBEJIJlqJzBe2TGIVVUJ3I11sY
eqseKogkDaMW5QczvSr7O385uGJ+8foWiyVcIuO8SuH+PREp/iYySc7ftAmWSGgV
xWhRLV1PtkI06k/kQlNoEm6+MOHUEZj9RHzPjXuAt+f/QxljmpLqMlvdeW1xjClp
RZDN6gK1d80gW/vSlJdhM4K3+Qc4I8kwAFxHto95Hg6nfO8BEG6MnBHGzVS66E7Y
lZlqwdSnmRZ5jQoVlaU/r+4vUp4ZBc9EcLE9yMFgaZSIBsUIU8bgfI62O0gjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU1cH49k8Lq8uPGdK7rr3LTQ6F6AAwHwYDVR0j
BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG
QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5
M0Y2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h
YjIwLThjN2YyZDViZTY5Zi8wLzMxMzAzMzJlMzkzNzJlMzczNjJlMzAyZjMyMzIy
ZDMyMzIyMDNkM2UyMDMxMzMzNjMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdhTDANBgkqhkiG
9w0BAQsFAAOCAQEAssQg+4Wjm2OAbvZ7iAgeOYLbAhYXQHw+UNvkizpYuhctREVs
qS5h/oThNCrUJpoBMNAfFSPzHByPrmj/gzAU699FN6SahhohcSndpGoLLC7cPHuH
lMDtaFb60M5K5nVGhJbeSAKECKmX8ceEbTnbQoIC7tICkEf7BiaFuSG1m6aiGC3E
wFCdIPkm4v+kYJhGBFgQtnecHdfBswwTZ10JGp9Jm01HDvaZXUNfVKE5SZp3K5Ja
IP6NrTOybowW494wc57b3RXKJik+SWHbbA0oplUZVgbqognhuHDPGTuDFYKmdjDe
G5xPOCedSQTFAFLdw99AYCxi5hurn+h0m1zB3w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:52:02 2025 by rpki-client