Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS14593.roa
File: AS14593.roa (raw, json)
Hash identifier: QzYLCMfua+TdM0Ub89dB9uYlHu+hZQDHWAXnyqYo9HA=
Subject key identifier: B7:4C:E1:64:68:81:BE:19:2F:86:E8:DA:34:0D:72:7C:50:7F:CF:01
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3D2CDA93E1C2F842D4B7F6C52D2E324028624AED
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS14593.roa
Signing time: Fri 09 Feb 2024 00:10:11 +0000
ROA not before: Fri 09 Feb 2024 00:05:11 +0000
ROA not after: Fri 07 Feb 2025 00:10:11 +0000
asID: 14593
IP address blocks: 103.114.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 05:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:2c:da:93:e1:c2:f8:42:d4:b7:f6:c5:2d:2e:32:40:28:62:4a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 9 00:05:11 2024 GMT
Not After : Feb 7 00:10:11 2025 GMT
Subject: CN=B74CE1646881BE192F86E8DA340D727C507FCF01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:ae:09:1b:ff:c3:91:8a:d3:e0:12:7f:cb:
8f:54:0a:b3:7d:ee:58:38:c5:f2:b7:9d:47:a5:9f:
3f:bf:d0:8d:7e:d0:72:b8:08:4d:f7:e2:93:d1:70:
f6:0b:88:57:ba:34:9a:d6:4a:8e:d7:23:1f:57:63:
08:dc:c1:53:32:39:9a:4a:36:aa:b6:e8:fa:5c:ab:
4d:d9:e3:39:64:9e:5f:e3:c5:65:42:6d:57:6e:ec:
22:d0:b7:59:dc:92:68:0a:b0:e9:47:09:2d:7f:6a:
d9:fa:bf:39:7b:a1:15:53:1e:ec:91:19:4b:42:0e:
c0:85:0e:87:53:dd:c6:86:c0:84:6f:1d:90:81:87:
6b:5e:be:62:c5:ca:44:5d:3f:08:90:3f:20:5e:b0:
14:4a:92:2b:f7:1b:b3:78:61:50:cb:a5:1b:c3:ab:
f6:a9:ad:89:56:1a:24:cd:50:91:94:02:b0:08:9e:
d0:cc:f0:00:07:a8:d4:da:9c:bc:86:9e:85:17:53:
e1:1c:1c:42:49:74:5b:1d:10:ce:fd:04:87:5e:91:
88:23:70:18:9b:91:06:43:e6:7b:37:07:44:21:e4:
7a:04:19:d9:7b:59:90:a7:bc:04:c0:1b:f9:87:f9:
36:45:06:d2:46:d7:5e:bf:1a:d5:05:7a:6e:62:96:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4C:E1:64:68:81:BE:19:2F:86:E8:DA:34:0D:72:7C:50:7F:CF:01
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS14593.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:07:10:e0:a4:bc:63:de:68:b6:19:cd:4c:c6:3f:4b:94:6c:
ac:89:3b:3b:19:e8:f2:e7:e1:cc:fa:41:64:4a:bc:37:4d:1c:
27:a5:73:93:c9:32:d6:31:5e:bc:d7:93:40:71:af:f2:a3:28:
e2:9a:38:2e:32:5e:c8:9a:8d:1c:b4:c4:48:9f:e5:30:f6:e3:
01:02:a2:f2:e3:66:2b:7c:2e:ed:e1:ea:cd:a6:b8:43:72:70:
89:38:7a:5d:64:ad:7a:b7:b6:b8:ae:6b:27:64:3c:cd:60:bf:
99:57:2c:7e:9a:e6:fb:ac:29:1b:48:d7:a0:69:0c:92:59:80:
b7:d4:0a:45:b8:05:d3:0f:36:5b:ef:d8:6f:94:e8:80:89:b4:
d2:d8:c5:8e:c1:e5:0d:24:28:8f:38:c1:db:0d:07:e4:e8:53:
a0:e5:7a:16:0f:00:24:dd:6c:95:75:c1:40:78:40:56:17:5b:
ea:97:c7:35:a4:56:48:51:20:33:80:dd:f8:d1:57:c6:b9:cf:
9e:78:33:4b:80:d9:f4:91:19:ce:d0:80:e7:37:9f:ed:9b:be:
12:27:61:87:25:e0:ab:84:f4:c4:2c:4c:52:98:d3:00:bc:04:
71:e1:6d:7d:d7:84:8b:ee:72:51:2b:29:35:e9:3d:85:e2:24:
19:49:05:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org