Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151998.roa
File: AS151998.roa (raw, json)
Hash identifier: 4xZnWEa9j/ZIaF+DgF7gMvMcyg0ThtZt+4xPBEqJtpo=
Subject key identifier: 5E:AE:E9:BD:8B:86:AB:C7:94:8F:AD:2C:E2:04:2E:AF:87:FB:DD:07
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4EC4AE5839BC9B295781D35B504BFAAA341EED4F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151998.roa
Signing time: Thu 02 Nov 2023 03:37:23 +0000
ROA not before: Thu 02 Nov 2023 03:32:23 +0000
ROA not after: Thu 31 Oct 2024 03:37:23 +0000
asID: 151998
IP address blocks: 103.67.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 05:47:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c4:ae:58:39:bc:9b:29:57:81:d3:5b:50:4b:fa:aa:34:1e:ed:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 2 03:32:23 2023 GMT
Not After : Oct 31 03:37:23 2024 GMT
Subject: CN=5EAEE9BD8B86ABC7948FAD2CE2042EAF87FBDD07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:82:d3:49:25:b7:70:c1:58:37:9f:84:6b:cb:
42:8e:c8:9c:41:e0:87:a1:b6:84:5a:6c:9c:31:03:
7a:ee:ba:5a:af:b0:b1:24:6d:b8:95:30:77:f3:57:
a8:4f:ed:65:34:e8:16:4a:83:d6:95:c0:2f:0a:62:
a5:04:03:99:3d:cf:43:d2:75:d9:a7:5c:62:7b:3d:
e4:6c:09:4f:72:99:01:1a:79:27:e2:90:4e:22:eb:
61:b3:61:79:11:2c:76:91:d8:11:dd:ae:d4:a0:55:
79:a3:72:3a:80:eb:7b:d6:3f:ef:63:f4:b5:88:d1:
6c:31:02:df:fb:db:81:84:d6:0b:b1:8f:a7:ef:ac:
50:a9:a0:ca:be:e3:7f:d2:3e:57:1a:fe:4e:66:d0:
df:36:c4:27:92:d2:4e:98:eb:58:e1:3c:09:77:32:
e3:cf:92:7a:8e:59:9a:3f:00:f2:1b:e0:67:aa:e3:
4d:8d:9d:67:47:9d:d5:77:26:ba:9e:ce:99:6e:98:
58:44:9e:af:36:7e:05:21:37:cd:c5:32:9c:ae:fe:
c5:6c:b6:c0:b3:a5:e0:65:92:00:c2:9e:6a:0b:68:
af:59:0b:f7:67:8c:cf:5e:54:98:d6:c5:16:73:8f:
08:ab:55:f0:28:b0:48:d2:5f:79:43:9b:b3:03:2b:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AE:E9:BD:8B:86:AB:C7:94:8F:AD:2C:E2:04:2E:AF:87:FB:DD:07
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.67.69.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:bc:9b:8f:f3:f1:e2:73:73:dd:c7:78:f0:20:89:eb:67:ae:
8b:ce:32:21:80:e9:54:e2:52:29:e0:e8:78:30:0b:74:08:ea:
26:b6:ba:14:1b:cb:d2:55:56:75:61:60:20:70:d5:49:dc:20:
da:a1:eb:b8:14:62:9e:4e:b9:ce:35:f9:61:6e:31:c8:62:e7:
d1:d7:7d:6d:a5:38:54:84:6a:6b:9f:f9:e7:fe:29:50:80:d0:
99:78:d1:03:2f:5c:48:65:b5:79:99:bd:7d:72:44:ed:ae:a4:
a9:c6:de:57:33:fe:21:bf:ed:df:6b:00:ae:97:04:a8:65:43:
1c:1a:3b:df:34:3a:78:61:c8:1b:8f:8a:f8:37:ab:cd:a3:97:
e6:36:51:ca:a5:a5:f1:77:57:d1:00:a2:49:53:8e:35:72:ef:
54:a3:1e:f2:93:63:0f:fe:4f:1a:c1:98:6f:aa:d1:3c:8a:98:
70:a7:db:48:28:c7:5e:7d:54:83:37:da:a7:44:9d:e5:11:a0:
fb:55:da:67:66:40:ed:a1:c6:e2:c6:d6:cc:ea:c1:d3:c8:88:
5a:ca:52:59:10:b1:7b:a1:aa:aa:80:25:28:bb:53:24:0e:d6:
08:f0:58:ce:a3:1b:fb:22:e7:1e:19:96:9e:79:ff:6f:e5:3f:
75:3f:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org