Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150485.roa
File: AS150485.roa (raw, json)
Hash identifier: leGphWuLUE6D78urW1ersFj5KlmhJqkOHKlScAfL4OU=
Subject key identifier: C2:9D:C9:E6:0A:D6:E9:24:67:E4:BF:08:43:24:17:9D:BA:04:16:DF
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0811F7F80A31ED9684BE6936F3894317FDAAAF7F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150485.roa
Signing time: Thu 07 Dec 2023 03:00:00 +0000
ROA not before: Thu 07 Dec 2023 02:55:00 +0000
ROA not after: Thu 05 Dec 2024 03:00:00 +0000
asID: 150485
IP address blocks: 103.56.136.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 08:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:11:f7:f8:0a:31:ed:96:84:be:69:36:f3:89:43:17:fd:aa:af:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Dec 7 02:55:00 2023 GMT
Not After : Dec 5 03:00:00 2024 GMT
Subject: CN=C29DC9E60AD6E92467E4BF084324179DBA0416DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:6f:29:be:b7:4d:e4:e2:38:9a:ca:e3:d1:
35:30:32:de:fa:51:4b:75:9c:1c:bc:13:18:2d:69:
35:99:e8:68:9c:d1:d9:4b:b6:0e:38:de:96:1e:d5:
c2:0c:69:ea:fe:41:35:5e:ff:01:6a:6c:0a:87:a7:
3b:42:84:cc:26:6e:a3:29:74:8c:d1:97:d6:05:ec:
64:e6:d2:4c:b2:24:3d:82:7c:82:ae:c3:ed:21:99:
1f:4f:74:59:f2:97:43:6b:9a:f1:2f:92:f5:8c:fe:
de:ac:d1:16:ab:d4:25:e6:b5:ba:a6:42:53:a8:fe:
e5:f6:1b:fb:db:b3:72:86:e7:19:4b:a6:f2:ff:af:
4f:96:60:74:35:c9:a6:67:76:6f:f3:46:62:a6:dd:
7b:41:17:12:d7:bd:f8:71:96:7b:0e:f3:67:b6:e8:
95:2e:e5:df:8a:52:b8:fe:3e:39:c8:9e:c3:3a:90:
f2:45:d6:e0:b6:6b:83:77:b2:71:bc:d2:fa:cf:39:
14:b2:3d:ce:3a:05:89:a3:df:d9:ff:cc:7a:72:22:
fa:f3:21:ae:13:ef:fe:6f:4a:22:fa:cc:80:3d:eb:
65:a2:97:76:04:93:f3:eb:a9:b4:38:f9:89:fa:c2:
b5:cb:16:b2:10:34:5d:fc:dd:9e:c1:b6:84:9f:d1:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9D:C9:E6:0A:D6:E9:24:67:E4:BF:08:43:24:17:9D:BA:04:16:DF
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.136.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:ba:ec:a8:1c:83:6e:23:b2:5f:11:37:a2:b6:d5:e1:8b:0d:
7c:32:ef:c3:0b:07:8a:5b:3a:a7:b6:07:bd:44:05:cc:42:e6:
7e:ef:61:0b:6a:ae:a0:8d:36:46:92:ae:fa:4e:58:1b:7c:8b:
b6:3b:78:a1:8c:f0:05:67:c1:b8:6c:ac:df:4e:76:a4:29:10:
41:5b:c3:83:9f:4e:64:fd:bc:b9:b6:df:e1:31:95:19:1b:c1:
4d:4b:f6:1e:31:7d:b5:e7:dd:53:99:59:0d:b1:9e:72:04:04:
fa:5c:9a:0c:96:d8:77:98:00:e6:e3:d8:78:36:d9:68:f4:7f:
de:c6:bd:91:b3:18:ef:3f:4d:ec:2a:dc:d1:ae:08:4c:e9:5b:
3d:2b:06:9e:ed:b8:6a:69:53:45:4d:ff:bb:0b:4b:c8:32:70:
c6:21:20:fb:80:72:31:ad:d2:a2:0a:22:33:b3:46:35:e4:fb:
71:2f:e6:05:88:de:e0:a5:9e:55:ab:a2:3e:d9:e6:43:67:c6:
58:b6:2f:9f:bf:29:85:fc:8e:0e:b9:93:14:12:61:14:4a:49:
7e:b7:8b:6f:e2:6b:e9:02:6d:a6:48:dc:41:a0:8b:da:17:32:
db:ac:59:54:1e:db:ed:7d:7a:d5:85:31:f3:12:ca:7f:52:77:
b4:b4:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:45:48 2024 by rpki-client on console-ams.rpki-client.org