Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e203438343635.roa
File: 3130332e3132302e37362e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: 6PN3SDq+0N31bBHipew1XCqZNeHh+ELq10g3dYbT1Mc=
Subject key identifier: EB:30:86:40:C3:9A:DB:4A:88:02:02:E7:AA:EE:0A:EA:07:10:5D:03
Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
Certificate serial: 2C1E4856B500E798DCBEFED744919C2D588D3E6D
Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e203438343635.roa
Signing time: Mon 15 Jul 2024 02:43:10 +0000
ROA not before: Mon 15 Jul 2024 02:38:10 +0000
ROA not after: Mon 14 Jul 2025 02:43:10 +0000
asID: 48465
IP address blocks: 103.120.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 13:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:1e:48:56:b5:00:e7:98:dc:be:fe:d7:44:91:9c:2d:58:8d:3e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58
Validity
Not Before: Jul 15 02:38:10 2024 GMT
Not After : Jul 14 02:43:10 2025 GMT
Subject: CN=EB308640C39ADB4A880202E7AAEE0AEA07105D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d5:5f:c9:12:1a:e0:a9:f1:62:f7:ab:99:04:
c9:20:f3:27:6b:0d:be:d4:3f:36:29:c6:f6:fa:a0:
3a:72:e3:19:4d:2c:87:2a:7e:c9:4e:39:63:96:9b:
61:eb:a5:a6:a3:bc:3b:2a:24:07:70:8a:95:1b:9e:
77:33:b0:ed:39:8b:df:87:7e:89:e7:b0:34:59:90:
27:a7:fd:52:d6:ce:67:37:9a:3b:d7:8c:bd:24:b2:
7b:67:1e:9f:af:3e:8a:0e:5b:26:14:73:c4:ad:05:
54:b3:3e:40:b1:02:34:20:6e:46:81:57:d2:6b:f8:
ca:3c:28:27:20:37:e5:d5:c4:f8:a8:ca:78:43:5b:
36:85:8a:47:4c:2c:12:8e:5a:fb:29:25:71:18:74:
15:b6:2d:2e:21:37:cc:17:bc:ce:92:a4:1c:6d:83:
1d:e8:c0:33:5f:a6:0f:06:6b:04:b3:40:6d:df:96:
75:c2:73:5f:3e:bc:3d:16:4a:43:ae:f5:31:2b:71:
28:0e:96:12:70:58:f2:f5:fb:6f:ed:26:e8:1c:44:
da:47:21:7d:4f:50:27:74:0c:e9:3c:53:2f:b2:70:
8c:21:11:28:08:dc:c0:6c:b0:55:73:cd:20:70:ba:
cf:7e:89:4e:93:32:91:a6:58:1a:c3:41:be:93:70:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:86:40:C3:9A:DB:4A:88:02:02:E7:AA:EE:0A:EA:07:10:5D:03
X509v3 Authority Key Identifier:
keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/3130332e3132302e37362e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.120.76.0/24
Signature Algorithm: sha256WithRSAEncryption
99:06:7f:f0:f8:8f:c0:3d:94:18:a4:63:fa:0c:7b:29:a7:17:
1d:3d:56:33:29:99:77:51:a7:3e:fe:1f:b8:62:60:c0:f3:7a:
7a:5a:b8:54:45:3e:83:0c:1c:8d:5d:34:67:f4:54:db:17:03:
3e:54:ba:dc:de:07:5d:ba:0c:2f:c8:a7:5e:0f:54:eb:21:00:
bb:be:85:a4:eb:a9:f5:c0:53:d1:ef:aa:1e:ab:bf:94:5d:71:
02:a1:c3:30:92:40:e0:5b:a6:79:f2:28:ee:da:ec:ea:4e:8b:
8f:41:07:a1:e5:29:0e:72:cb:f6:f5:cb:77:fb:d3:1c:ae:23:
8d:01:a0:d8:cb:43:28:65:6b:f1:b7:00:9d:ba:5a:fa:f2:fc:
9b:91:07:50:49:2a:63:85:7f:f0:14:4c:71:bd:b4:41:26:0d:
68:2f:57:1d:62:a2:cd:00:e5:3e:3f:7a:25:e9:20:f9:72:b0:
d6:d6:26:0b:06:75:33:6e:f2:1f:07:a7:79:55:1f:e8:b2:82:
e0:8f:0c:62:e6:e3:62:f5:4d:ca:45:50:20:7e:32:fb:64:fe:
d9:5d:e9:97:21:f7:b5:78:26:ea:03:27:04:52:af:57:0d:18:
aa:1a:f5:71:4d:2c:ab:97:6d:5c:91:21:53:e6:b5:a7:7f:e0:
b4:c8:67:b3
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULB5IVrUA55jcvv7XRJGcLViNPm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1
NjEzOEY1ODAeFw0yNDA3MTUwMjM4MTBaFw0yNTA3MTQwMjQzMTBaMDMxMTAvBgNV
BAMTKEVCMzA4NjQwQzM5QURCNEE4ODAyMDJFN0FBRUUwQUVBMDcxMDVEMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl1V/JEhrgqfFi96uZBMkg8ydr
Db7UPzYpxvb6oDpy4xlNLIcqfslOOWOWm2HrpaajvDsqJAdwipUbnnczsO05i9+H
fonnsDRZkCen/VLWzmc3mjvXjL0ksntnHp+vPooOWyYUc8StBVSzPkCxAjQgbkaB
V9Jr+Mo8KCcgN+XVxPioynhDWzaFikdMLBKOWvspJXEYdBW2LS4hN8wXvM6SpBxt
gx3owDNfpg8GawSzQG3flnXCc18+vD0WSkOu9TErcSgOlhJwWPL1+2/tJugcRNpH
IX1PUCd0DOk8Uy+ycIwhESgI3MBssFVzzSBwus9+iU6TMpGmWBrDQb6TcK73AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6zCGQMOa20qIAgLnqu4K6gcQXQMwHwYDVR0j
BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB
MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz
OEY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhZGM3NjVhLWZmOGQtNGIxZi1h
NTlhLTI1ZmY3YmQ0ZjU4YS8wLzMxMzAzMzJlMzEzMjMwMmUzNzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGd4TDANBgkqhkiG
9w0BAQsFAAOCAQEAmQZ/8PiPwD2UGKRj+gx7KacXHT1WMymZd1GnPv4fuGJgwPN6
elq4VEU+gwwcjV00Z/RU2xcDPlS63N4HXboML8inXg9U6yEAu76FpOup9cBT0e+q
Hqu/lF1xAqHDMJJA4FumefIo7trs6k6Lj0EHoeUpDnLL9vXLd/vTHK4jjQGg2MtD
KGVr8bcAnbpa+vL8m5EHUEkqY4V/8BRMcb20QSYNaC9XHWKizQDlPj96Jekg+XKw
1tYmCwZ1M27yHweneVUf6LKC4I8MYubjYvVNykVQIH4y+2T+2V3plyH3tXgm6gMn
BFKvVw0Yqhr1cU0sq5dtXJEhU+a1p3/gtMhnsw==
-----END CERTIFICATE-----
Generated at Mon Jul 15 18:31:49 2024 by rpki-client on console-ams.rpki-client.org