Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141601.roa
File: AS141601.roa (raw, json)
Hash identifier: m+Qcb7SuJcn7eH3UFs3RGqkDl0w1fPYtGOQ/+0kuOQU=
Subject key identifier: F7:4F:DD:F3:4E:3F:D7:19:8C:73:AE:3E:D0:FC:16:C6:2C:99:04:46
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 46720F54A8093677AD661B927BEA97346B726AE2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141601.roa
Signing time: Tue 07 Feb 2023 03:00:18 +0000
ROA not before: Tue 07 Feb 2023 02:55:18 +0000
ROA not after: Tue 06 Feb 2024 03:00:18 +0000
asID: 141601
IP address blocks: 103.160.247.0/24 maxlen: 24
103.169.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:72:0f:54:a8:09:36:77:ad:66:1b:92:7b:ea:97:34:6b:72:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 7 02:55:18 2023 GMT
Not After : Feb 6 03:00:18 2024 GMT
Subject: CN=F74FDDF34E3FD7198C73AE3ED0FC16C62C990446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:41:71:47:fc:91:f5:43:f4:11:45:40:d4:
cf:d5:6d:87:21:d1:56:2b:0a:ae:b0:2a:2a:68:1f:
8f:f6:4f:75:7c:4d:8a:6f:51:96:a7:d7:03:dd:5b:
99:e9:fc:38:49:0e:09:d4:fa:8c:fe:95:7c:d2:db:
52:ed:36:b9:ad:74:e1:47:1b:e1:ac:00:07:5b:10:
e6:25:dc:1e:e9:b9:9a:d1:aa:c8:c6:05:d3:a5:82:
d4:68:4e:b8:d6:ed:cd:7d:f2:40:7b:2a:6b:22:06:
b3:1e:b8:b3:38:48:95:20:ba:99:0b:cf:d0:8f:eb:
75:7e:de:d9:d5:8f:fd:51:ba:88:bf:c0:18:8a:73:
fc:ea:a5:6b:95:2b:f5:b6:b7:1a:3c:e5:a9:05:92:
ec:ee:9c:1f:3e:92:f5:99:ec:d6:bc:79:4a:7a:c5:
3b:43:2a:d9:28:69:86:50:d1:1e:cf:b2:8b:0d:b1:
b5:78:1a:9e:fd:da:45:47:3d:47:22:b8:7a:39:04:
8c:f7:8d:eb:5b:c2:07:e1:b9:4b:93:bc:e5:d0:94:
44:1c:85:16:cf:76:51:c3:03:d7:02:68:06:6f:89:
46:87:f6:ee:20:1a:5d:1c:94:19:33:d8:f1:92:ac:
5d:23:b5:35:95:27:b0:88:14:76:b0:24:24:d9:d7:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4F:DD:F3:4E:3F:D7:19:8C:73:AE:3E:D0:FC:16:C6:2C:99:04:46
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141601.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.247.0/24
103.169.70.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9e:90:04:18:f3:5a:66:f9:1b:91:16:b9:37:1f:77:01:54:
ed:ca:3e:85:ad:7b:ac:3a:85:2a:61:b1:da:c7:b3:bb:7a:44:
75:61:0f:98:1f:cb:cd:95:77:81:d0:8d:ed:b4:d6:1f:2e:55:
46:c3:3d:90:19:ed:62:37:51:66:6b:51:13:9c:3d:5b:03:72:
c6:5c:c6:d6:46:93:54:4b:43:5f:19:36:0c:6c:4b:0a:b7:4b:
ce:02:9d:e9:67:99:e8:a0:e4:25:eb:26:20:15:47:12:72:1f:
72:56:c2:8d:37:d0:1a:8f:e8:9a:30:4c:3e:c0:48:19:59:a1:
aa:4e:9e:c3:c8:96:70:21:7e:cd:5f:43:51:48:c7:79:01:ed:
17:2f:f2:62:54:e1:09:e7:15:29:bb:0f:8c:df:10:bc:51:c7:
9a:72:42:25:34:14:11:37:0b:a0:81:c0:40:67:66:ca:2c:7e:
01:45:14:92:b8:3f:9a:e8:8c:4b:cc:0f:a4:42:12:ea:24:91:
99:3f:58:60:95:b6:f1:06:ce:8b:07:8a:e8:47:35:40:55:05:
28:70:c1:7d:b0:d2:e9:55:eb:f2:28:79:9f:56:ed:eb:57:fe:
7b:86:3e:4a:24:e8:ee:79:9b:2c:5f:ca:3d:a8:8c:d1:9f:98:
c5:01:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 09:11:16 2023 by rpki-client on console-fra.rpki-client.org