Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139954.roa
File: AS139954.roa (raw, json)
Hash identifier: 6MRoEJIQUlQQnINt8EppAgxI3F5Et2cytNiqKRXk1Tc=
Subject key identifier: F2:01:D1:48:42:C7:C5:F1:E0:87:B5:B4:18:0D:B6:B3:81:A0:A6:B8
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 55733303A89BEDA0F333991A19F0133393B13CC9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139954.roa
Signing time: Fri 05 Jan 2024 09:18:30 +0000
ROA not before: Fri 05 Jan 2024 09:13:30 +0000
ROA not after: Fri 03 Jan 2025 09:18:30 +0000
asID: 139954
IP address blocks: 45.127.204.0/22 maxlen: 24
103.78.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 05:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:73:33:03:a8:9b:ed:a0:f3:33:99:1a:19:f0:13:33:93:b1:3c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 5 09:13:30 2024 GMT
Not After : Jan 3 09:18:30 2025 GMT
Subject: CN=F201D14842C7C5F1E087B5B4180DB6B381A0A6B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:57:2a:9f:2d:bf:f0:64:fe:1a:59:ea:22:
54:29:8c:82:99:e9:bb:9f:24:cb:ec:60:96:a4:01:
fd:cd:f0:06:da:23:1a:de:61:56:03:fb:eb:be:4f:
57:28:e5:c2:13:87:a3:62:7b:33:82:c1:5c:51:22:
ca:b5:27:75:13:35:27:28:63:f7:b0:34:84:af:5c:
46:02:f9:29:5f:fd:b6:da:18:82:14:65:5a:82:9b:
d2:5b:25:2a:75:d8:ba:ef:fb:a4:4a:cf:46:75:1c:
fe:82:18:17:4c:af:07:26:15:7e:2e:2f:d5:da:c7:
f3:34:fb:4a:6a:1b:2b:d1:c4:52:1a:4a:dd:9f:29:
19:91:ef:c5:d8:ca:5b:57:93:6c:2d:77:c8:e9:b2:
06:6c:e0:fe:a0:f2:33:0d:77:9c:04:6c:c4:6d:82:
6a:51:14:1c:58:91:a0:0d:7d:d4:44:d0:fe:2e:31:
dd:00:d8:06:24:93:cb:8c:f2:de:33:64:ff:f6:59:
2f:ed:e6:82:c5:fe:06:70:6a:bb:79:36:e0:21:21:
7b:35:e6:a1:9d:10:25:6a:b5:1d:13:87:87:1d:7c:
3d:63:e6:64:89:cd:1c:9f:6e:1e:cb:89:62:2d:4a:
e6:59:e1:35:a5:96:10:d0:db:96:b0:cc:4e:b8:e2:
ad:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:01:D1:48:42:C7:C5:F1:E0:87:B5:B4:18:0D:B6:B3:81:A0:A6:B8
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.204.0/22
103.78.216.0/22
Signature Algorithm: sha256WithRSAEncryption
78:56:03:b4:ff:78:d2:9e:cd:dc:93:fe:ba:28:d9:d2:c9:54:
4a:49:7b:0e:0d:2b:33:78:2d:0d:4a:1e:c9:da:68:bd:06:85:
37:d5:c3:89:ce:53:1b:e1:72:37:7b:7b:51:4c:d1:26:70:55:
ab:b1:59:0e:46:92:c7:5c:39:e7:0f:51:71:c5:f3:7b:52:27:
a8:96:6e:4e:88:4e:f6:1e:6d:fc:4a:90:42:f1:f3:54:b9:bf:
39:4e:6f:bd:59:07:54:e2:f3:ad:c8:27:0d:5b:8e:f2:af:9d:
ef:04:76:22:9a:cb:cc:f6:61:06:64:d5:5c:f5:cd:83:d2:50:
83:6f:84:f8:18:27:51:27:d7:55:b6:3a:c5:33:23:19:8d:23:
3b:e4:13:09:72:45:ad:de:a1:b9:ee:85:0e:18:5e:dd:2c:ea:
fe:ec:10:08:0c:8d:ba:a1:ff:4a:16:b1:03:a7:57:8f:f9:d0:
f8:d3:ab:5e:77:eb:ea:c1:00:e6:f6:a6:3b:77:b4:00:b8:b6:
96:53:e6:1c:2f:66:1d:af:1e:0a:0a:69:32:ec:7f:74:5d:2d:
d1:3e:4a:8a:c5:ce:dd:cd:bb:84:77:82:19:c3:82:84:f9:1f:
35:71:43:06:6c:b8:ae:cb:65:a0:68:a5:71:48:cf:a0:4c:bf:
56:48:34:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org