Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136824.roa
File: AS136824.roa (raw, json)
Hash identifier: 1EgOYalSDzTQW9zO98mUZWci2W2LjHp899tSe/r+XJg=
Subject key identifier: 34:E6:23:10:54:CB:D4:A3:C5:57:06:55:14:5A:EF:34:21:40:51:A5
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 2F7A11206F618E62287AD91356734F4537B45F81
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136824.roa
Signing time: Fri 26 Jul 2024 05:00:00 +0000
ROA not before: Fri 26 Jul 2024 04:55:00 +0000
ROA not after: Fri 25 Jul 2025 05:00:00 +0000
asID: 136824
IP address blocks: 103.52.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 23:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7a:11:20:6f:61:8e:62:28:7a:d9:13:56:73:4f:45:37:b4:5f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jul 26 04:55:00 2024 GMT
Not After : Jul 25 05:00:00 2025 GMT
Subject: CN=34E6231054CBD4A3C5570655145AEF34214051A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:d2:f8:0b:d9:f9:71:f7:ef:ab:90:b6:d8:
f0:71:b5:7c:d9:b6:ad:b2:5e:39:f5:b9:7b:8e:17:
56:24:79:c7:3f:aa:9f:74:b3:93:8a:e9:8d:ef:75:
ef:72:19:1b:a3:d7:a9:21:2f:54:c2:8c:f1:72:63:
ca:e4:d3:4e:1f:f4:55:c6:36:4d:52:f8:8a:06:33:
7a:67:66:00:50:0e:c9:10:f6:59:a3:11:ef:22:32:
e2:1b:8e:68:cb:a6:59:03:1a:dc:27:f7:f0:25:fe:
78:30:30:bd:48:0a:9a:67:d0:d2:56:d7:83:3a:0d:
5a:0f:24:d8:ee:bf:c5:7c:44:79:58:10:57:e6:9c:
cc:46:00:30:af:67:6f:67:09:69:6e:80:a8:86:60:
97:11:78:80:5f:c8:88:87:36:75:1d:f3:0f:ef:6b:
46:46:ac:fc:43:e1:a4:0a:7e:ea:5c:92:ab:b0:40:
3e:d2:42:c6:58:e1:7a:57:65:3b:9d:6b:1d:c4:05:
8f:3a:95:b6:18:ee:16:3e:4b:83:bf:3d:48:54:9f:
1c:a1:54:2f:0f:2c:2e:76:cf:03:09:44:f2:42:35:
0e:14:13:a6:a7:ad:a5:95:7f:ce:40:c8:32:b7:22:
9f:92:58:cb:de:5a:27:9a:34:8e:9c:d1:1b:ab:0a:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E6:23:10:54:CB:D4:A3:C5:57:06:55:14:5A:EF:34:21:40:51:A5
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136824.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.52.212.0/24
Signature Algorithm: sha256WithRSAEncryption
22:2f:76:3d:51:0e:74:a4:8e:1f:30:ec:2e:01:b0:07:eb:d0:
cf:e6:fe:c2:2a:a0:f5:a3:65:e6:b8:5c:c3:90:58:a6:3f:4d:
54:66:40:11:57:ac:c5:1d:24:3c:e0:44:02:db:b9:27:06:04:
a2:75:f5:c2:0c:ce:41:83:7e:2c:f8:ba:d1:28:76:50:1e:63:
55:d8:88:ca:dd:7b:70:f1:f6:36:b5:00:e4:70:dd:5d:06:a8:
58:ee:40:c1:2d:a7:27:d0:e0:6c:52:e9:2d:64:eb:b9:4d:53:
19:8f:74:62:3a:9a:8c:01:a1:72:ef:7c:a1:fa:0c:33:aa:06:
0c:be:90:3e:bf:da:f0:ff:73:ad:e6:21:e1:1d:89:b0:c2:40:
94:9b:65:cf:bf:30:08:0b:19:a3:24:eb:8a:3b:e0:92:d1:a4:
50:8e:c1:64:63:01:60:3b:57:92:02:be:b7:9e:b7:13:27:91:
cf:ae:be:ef:c3:a7:70:04:c5:6e:26:35:43:8f:08:16:5e:22:
b6:2e:ff:bf:24:71:61:b9:2e:6b:36:d9:ab:df:a3:fa:48:61:
bf:41:8d:77:4c:ff:e4:ed:c3:df:9e:70:1c:a7:dc:ae:a2:69:
0e:d9:31:03:1c:a9:a4:ed:e7:cb:c3:6f:1b:ae:68:be:3d:ff:
3e:79:69:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:35 2025 by rpki-client