Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59281.roa
File: AS59281.roa (raw, json)
Hash identifier: h8pgShDEpRNcS8d/0uK2tHemua5YN32Kc8NsylN8j2Q=
Subject key identifier: 85:0A:1D:19:6F:BA:38:C2:2B:F7:F5:AD:D4:F5:A7:AD:18:61:CD:BD
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 101B6FB89831CECF8D0685CB6D8788EF1A8B2F3A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59281.roa
Signing time: Fri 01 Mar 2024 06:24:43 +0000
ROA not before: Fri 01 Mar 2024 06:19:43 +0000
ROA not after: Fri 28 Feb 2025 06:24:43 +0000
asID: 59281
IP address blocks: 103.10.58.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 08:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1b:6f:b8:98:31:ce:cf:8d:06:85:cb:6d:87:88:ef:1a:8b:2f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Mar 1 06:19:43 2024 GMT
Not After : Feb 28 06:24:43 2025 GMT
Subject: CN=850A1D196FBA38C22BF7F5ADD4F5A7AD1861CDBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:d8:c6:28:43:81:0e:f1:00:bf:1d:2a:4e:
23:30:80:61:ae:91:a4:38:09:36:3b:c8:df:71:a7:
eb:9c:c0:21:7d:3b:fa:e1:43:2e:07:99:4e:ee:ca:
4e:e1:82:43:bc:ec:ca:61:f5:14:7e:21:5d:a7:ed:
0a:f5:01:c0:6b:7e:f8:44:82:b3:d3:3b:e5:31:de:
b4:ed:05:01:dc:a4:ef:06:11:e1:0c:fa:29:14:2b:
5d:5f:a7:be:38:49:8f:0a:31:ec:6f:fb:b8:8f:b1:
b7:71:8c:63:4a:e4:b0:63:48:d5:8c:50:47:1c:a1:
99:13:4b:81:4f:84:d3:65:56:51:da:c7:48:25:0a:
61:a3:ca:cc:57:60:d3:25:47:55:97:49:6d:ee:4d:
ad:84:f5:0d:74:43:95:61:f7:df:fa:20:51:48:68:
97:68:0b:26:2f:47:31:58:d3:2c:fc:10:b4:19:6a:
2a:ca:7f:87:07:5a:00:de:ad:d3:cf:33:c2:9d:73:
54:e5:a5:da:5d:ed:20:cb:e3:9d:d9:c1:ed:e4:a1:
8d:58:74:c6:98:aa:17:59:3b:bc:09:97:4e:09:42:
77:d6:32:e2:a1:a6:c9:79:e9:77:74:8c:e5:2c:46:
fd:3d:81:72:36:9f:8e:47:84:fd:36:c1:f6:d5:09:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:1D:19:6F:BA:38:C2:2B:F7:F5:AD:D4:F5:A7:AD:18:61:CD:BD
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.58.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:70:df:e9:c3:33:d6:8f:e7:3e:83:43:f1:fc:9b:a9:58:26:
03:21:91:71:86:f9:6b:ab:01:cc:65:26:20:b3:74:8f:14:eb:
f8:af:04:53:94:04:68:c4:c7:ad:4b:41:ee:f7:bf:a9:24:4f:
f6:f3:6b:ef:f9:4d:88:15:a4:da:2d:65:d0:33:07:c2:98:74:
6d:61:c5:5d:b7:fa:6e:25:13:77:2e:16:0b:89:06:d6:f4:ce:
72:12:10:82:0c:62:5d:4c:14:c6:7e:ba:84:09:d5:46:00:35:
01:7c:06:4d:83:6c:61:63:91:d3:90:0f:1c:5f:fa:63:7d:af:
8b:41:35:fa:a5:26:41:67:f6:2e:1e:4f:60:d1:a8:d8:96:49:
40:7b:c6:6c:2c:f5:af:74:63:6a:61:a1:a9:23:81:cb:c6:2e:
a6:ac:14:1f:f3:83:ff:03:73:16:1a:38:c0:68:a9:9d:55:e4:
cf:ca:c7:e1:2d:89:f9:6c:a4:3c:00:3c:0e:ed:8f:c3:7d:de:
b2:ed:3a:d9:78:b5:ff:aa:76:e6:2e:a7:62:ff:d7:72:28:b3:
f3:61:63:6f:06:55:c8:f7:b7:6f:89:99:67:86:46:48:14:4b:
0c:1f:47:5f:79:2d:6b:2e:e0:b5:54:30:9a:30:a6:e3:58:79:
8e:22:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 11:00:40 2024 by rpki-client on console-ams.rpki-client.org