Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141912.roa
File: AS141912.roa (raw, json)
Hash identifier: HAvCxtdSY+g2/vsuj0CYvToEyLHLQut1ZdmWCS0uWZs=
Subject key identifier: B3:AF:5C:F1:5D:C8:2E:8C:30:66:37:AB:57:97:C1:94:C4:56:9D:DF
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 38AE08C7DB2898FF357EC41AD6034A2D0276744D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141912.roa
Signing time: Mon 13 Nov 2023 02:37:53 +0000
ROA not before: Mon 13 Nov 2023 02:32:53 +0000
ROA not after: Mon 11 Nov 2024 02:37:53 +0000
asID: 141912
IP address blocks: 103.161.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 08:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ae:08:c7:db:28:98:ff:35:7e:c4:1a:d6:03:4a:2d:02:76:74:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 13 02:32:53 2023 GMT
Not After : Nov 11 02:37:53 2024 GMT
Subject: CN=B3AF5CF15DC82E8C306637AB5797C194C4569DDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4f:62:e4:36:1c:3f:2c:dc:a8:4b:66:69:b7:
69:89:1a:15:e7:c7:82:90:df:40:b5:73:e6:54:0d:
4a:b0:99:35:ff:bd:3f:fa:67:6d:e1:e9:fc:b6:65:
0d:bd:10:76:91:19:8d:63:27:2c:13:fc:4e:8c:d6:
83:55:34:c6:ac:76:59:c3:21:ab:1d:42:de:ee:95:
f5:65:ef:ef:8f:42:b3:66:d1:48:82:29:b4:41:b7:
49:ad:9a:15:6c:ba:43:4f:7e:1c:12:92:58:02:f8:
32:a3:ad:6f:ec:88:00:a2:6c:a5:f9:da:c2:ed:fb:
45:a3:2f:41:c6:3e:d8:fa:8e:73:f7:e6:1c:48:53:
aa:e1:03:3c:26:20:03:b7:c9:bb:e9:32:f7:77:a1:
f4:42:72:49:36:ee:cb:10:4e:d2:fc:dd:66:88:94:
6d:02:d2:75:62:97:27:36:94:c3:d4:64:45:9f:c1:
30:26:ab:0a:81:88:94:7e:34:6a:3d:2e:1e:b2:ea:
82:19:cd:ca:80:c8:d4:a5:98:c3:6a:6d:6d:be:a8:
58:4e:fa:7e:7f:46:55:ea:6e:50:35:1f:fe:3b:8a:
68:22:21:69:b8:cf:64:e3:f7:27:b6:9e:65:bd:f1:
fd:cc:fc:83:70:3a:28:1b:12:35:c8:45:ac:74:58:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AF:5C:F1:5D:C8:2E:8C:30:66:37:AB:57:97:C1:94:C4:56:9D:DF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.161.108.0/24
Signature Algorithm: sha256WithRSAEncryption
49:05:62:25:34:84:cc:76:c6:15:b8:d2:0d:37:ad:95:dd:7a:
28:bc:86:8d:17:2c:d1:c9:b5:2f:7b:60:7f:dc:25:61:db:40:
12:d8:f5:dd:12:78:c3:b3:f5:10:74:90:58:c9:53:2d:73:7e:
a1:2c:88:31:5d:cd:e5:54:a4:ce:6b:2c:7e:f1:6f:80:5f:59:
63:ef:06:d8:91:8b:b5:2f:bc:64:af:9e:6f:4a:7c:85:e7:cb:
17:f4:09:b8:62:7a:c5:69:92:1d:cb:f5:35:71:4b:37:3e:06:
b4:43:9a:b2:40:23:e9:c0:9e:c1:0e:d4:e0:ae:99:0e:a1:41:
4a:a0:33:f8:ae:9c:42:55:6f:02:41:6b:43:e3:c3:fc:b2:24:
91:b8:42:6e:be:1b:5a:a2:30:cb:f6:69:23:c0:06:62:f9:68:
d0:9a:10:51:ee:e1:65:5b:94:30:cd:b2:90:b0:5f:21:c2:5a:
73:b1:73:ad:2f:2c:c3:2d:b4:ec:8e:ff:e4:7c:69:49:89:b4:
0b:8a:76:ba:5c:b5:42:3a:1f:9a:f8:ad:ee:f2:5c:80:2c:49:
2f:51:9e:8d:e7:f1:b3:c8:80:ee:c7:14:6a:f4:af:55:ea:dc:
c1:92:e6:6d:4e:21:b9:56:25:37:e3:ea:d5:c3:60:21:22:57:
c0:2a:a0:08
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUOK4Ix9somP81fsQa1gNKLQJ2dE0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExMzAyMzI1M1oX
DTI0MTExMTAyMzc1M1owMzExMC8GA1UEAxMoQjNBRjVDRjE1REM4MkU4QzMwNjYz
N0FCNTc5N0MxOTRDNDU2OURERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANlPYuQ2HD8s3KhLZmm3aYkaFefHgpDfQLVz5lQNSrCZNf+9P/pnbeHp/LZl
Db0QdpEZjWMnLBP8TozWg1U0xqx2WcMhqx1C3u6V9WXv749Cs2bRSIIptEG3Sa2a
FWy6Q09+HBKSWAL4MqOtb+yIAKJspfnawu37RaMvQcY+2PqOc/fmHEhTquEDPCYg
A7fJu+ky93eh9EJySTbuyxBO0vzdZoiUbQLSdWKXJzaUw9RkRZ/BMCarCoGIlH40
aj0uHrLqghnNyoDI1KWYw2ptbb6oWE76fn9GVepuUDUf/juKaCIhabjPZOP3J7ae
Zb3x/cz8g3A6KBsSNchFrHRYvwsCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBSzr1zx
XcgujDBmN6tXl8GUxFad3zAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTkxMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGehbDANBgkqhkiG9w0BAQsFAAOCAQEASQViJTSEzHbGFbjSDTet
ld16KLyGjRcs0cm1L3tgf9wlYdtAEtj13RJ4w7P1EHSQWMlTLXN+oSyIMV3N5VSk
zmssfvFvgF9ZY+8G2JGLtS+8ZK+eb0p8hefLF/QJuGJ6xWmSHcv1NXFLNz4GtEOa
skAj6cCewQ7U4K6ZDqFBSqAz+K6cQlVvAkFrQ+PD/LIkkbhCbr4bWqIwy/ZpI8AG
Yvlo0JoQUe7hZVuUMM2ykLBfIcJac7FzrS8swy207I7/5HxpSYm0C4p2uly1Qjof
mvit7vJcgCxJL1Gejefxs8iA7scUavSvVercwZLmbU4huVYlN+Pq1cNgISJXwCqg
CA==
-----END CERTIFICATE-----
Generated at Tue May 7 10:45:47 2024 by rpki-client on console-ams.rpki-client.org