Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134302e302f32332d3234203d3e20313336383435.roa
File: 3130332e39372e3134302e302f32332d3234203d3e20313336383435.roa (raw, json)
Hash identifier: KDS+ZQMIIXZVB14IwZz1kh4EMl1w4Upml4wEw22QEt4=
Subject key identifier: 6F:78:C7:F8:76:06:FD:26:7D:99:CC:A7:9C:D9:0C:F5:47:A0:F4:A5
Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Certificate serial: 3F4810307D6DD750C18477457539DA48D1B05E9C
Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134302e302f32332d3234203d3e20313336383435.roa
Signing time: Mon 01 Jul 2024 01:06:04 +0000
ROA not before: Mon 01 Jul 2024 01:01:04 +0000
ROA not after: Mon 30 Jun 2025 01:06:04 +0000
asID: 136845
IP address blocks: 103.97.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Sep 2024 13:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:48:10:30:7d:6d:d7:50:c1:84:77:45:75:39:da:48:d1:b0:5e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1
Validity
Not Before: Jul 1 01:01:04 2024 GMT
Not After : Jun 30 01:06:04 2025 GMT
Subject: CN=6F78C7F87606FD267D99CCA79CD90CF547A0F4A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:91:0f:f4:cb:ce:73:08:ef:47:2f:43:51:
5a:4f:f0:17:58:38:c5:1b:59:a2:6e:21:b4:8f:22:
35:c2:91:ae:0c:b5:b8:38:26:14:c5:24:51:8c:bb:
99:a0:46:73:0d:ad:7c:5d:5e:ef:94:d3:73:de:b5:
42:bf:18:78:c8:ab:5f:cc:36:b8:26:68:e0:ff:68:
a9:96:1a:d2:b5:0b:2d:87:1a:a5:fc:c8:9f:71:2b:
d1:fc:61:d1:a1:d1:04:f8:00:c3:fa:fd:dd:43:1c:
cb:83:99:cb:ee:71:b1:b6:ca:01:92:6a:40:b9:3e:
d5:ca:59:f5:bc:ea:35:46:92:ca:d8:e7:59:01:fb:
63:95:e3:fc:0c:51:3c:bb:8d:06:f6:c8:21:34:50:
be:e1:e6:b2:4f:2b:75:e2:26:23:2d:01:2e:d8:88:
a2:d5:fb:f4:7b:e8:80:a4:69:1e:4a:2a:d4:b5:5c:
3e:30:a8:21:9d:e5:6d:05:ae:49:bb:bb:b8:fe:07:
e1:c1:31:5c:fd:32:96:79:a1:55:69:e6:3a:a2:e1:
b8:16:bb:e5:9e:4b:ab:84:b9:92:f6:c4:fa:9f:1e:
4c:e8:9f:6b:26:8d:77:86:d7:67:e1:93:e9:67:11:
69:bf:2c:65:42:e9:d7:ce:64:33:37:2e:fd:4f:56:
36:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:78:C7:F8:76:06:FD:26:7D:99:CC:A7:9C:D9:0C:F5:47:A0:F4:A5
X509v3 Authority Key Identifier:
keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134302e302f32332d3234203d3e20313336383435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.97.140.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:3c:17:22:52:cc:7d:8a:88:b4:a0:8d:ba:ea:16:8a:2b:95:
df:c9:c5:02:1a:79:0a:e9:93:b4:e6:43:6c:42:fe:12:18:37:
75:36:83:e3:d6:2f:56:54:e7:2f:df:69:68:94:67:c9:de:1b:
27:a9:8b:a8:5d:10:f2:a6:91:be:8a:5c:8b:48:ef:d9:4e:ff:
be:8e:58:21:5b:5c:89:33:b4:80:6d:2d:30:61:5d:15:33:05:
0d:7d:ad:47:32:51:78:c2:0a:3c:ae:6e:a6:f3:4c:f3:69:3b:
4c:80:c6:c5:5a:a9:3c:f0:d9:ad:cd:ae:e2:b6:76:be:72:b5:
bc:d7:63:e8:90:c2:61:ab:5d:f2:d5:af:3c:de:e9:72:a7:a7:
2f:e7:d5:1a:aa:9a:b8:50:4d:38:c6:74:21:0e:45:b5:8c:b0:
02:dd:91:71:ba:71:98:6e:a1:64:6e:a6:70:cc:58:c6:e9:a6:
d3:f6:da:1f:bd:1f:b0:5b:68:02:96:7f:18:fa:15:2c:d9:7e:
a4:2f:eb:20:eb:a8:c8:5e:11:9c:3e:44:c9:2f:27:9b:f2:03:
6c:d7:9f:75:02:de:8f:92:4d:cf:e2:c2:58:82:9c:ea:db:f0:
5c:4d:d0:f1:cd:31:9b:3a:78:41:c6:dc:95:45:d2:bc:3e:64:
14:2e:9f:5f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUP0gQMH1t11DBhHdFdTnaSNGwXpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3
N0JFMTNDMTAeFw0yNDA3MDEwMTAxMDRaFw0yNTA2MzAwMTA2MDRaMDMxMTAvBgNV
BAMTKDZGNzhDN0Y4NzYwNkZEMjY3RDk5Q0NBNzlDRDkwQ0Y1NDdBMEY0QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhYpEP9MvOcwjvRy9DUVpP8BdY
OMUbWaJuIbSPIjXCka4Mtbg4JhTFJFGMu5mgRnMNrXxdXu+U03PetUK/GHjIq1/M
NrgmaOD/aKmWGtK1Cy2HGqX8yJ9xK9H8YdGh0QT4AMP6/d1DHMuDmcvucbG2ygGS
akC5PtXKWfW86jVGksrY51kB+2OV4/wMUTy7jQb2yCE0UL7h5rJPK3XiJiMtAS7Y
iKLV+/R76ICkaR5KKtS1XD4wqCGd5W0Frkm7u7j+B+HBMVz9MpZ5oVVp5jqi4bgW
u+WeS6uEuZL2xPqfHkzon2smjXeG12fhk+lnEWm/LGVC6dfOZDM3Lv1PVjZZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUb3jH+HYG/SZ9mcynnNkM9Ueg9KUwHwYDVR0j
BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4
RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF
MTNDMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0MDE0MzZiLTAyNjctNDY2Yi1h
MzQwLWUyODhkMmU5MzRhOC8wLzMxMzAzMzJlMzkzNzJlMzEzNDMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ2GMMA0GCSqG
SIb3DQEBCwUAA4IBAQC6PBciUsx9ioi0oI266haKK5XfycUCGnkK6ZO05kNsQv4S
GDd1NoPj1i9WVOcv32lolGfJ3hsnqYuoXRDyppG+ilyLSO/ZTv++jlghW1yJM7SA
bS0wYV0VMwUNfa1HMlF4wgo8rm6m80zzaTtMgMbFWqk88Nmtza7itna+crW812Po
kMJhq13y1a883ulyp6cv59Uaqpq4UE04xnQhDkW1jLAC3ZFxunGYbqFkbqZwzFjG
6abT9tofvR+wW2gCln8Y+hUs2X6kL+sg66jIXhGcPkTJLyeb8gNs1591At6Pkk3P
4sJYgpzq2/BcTdDxzTGbOnhBxtyVRdK8PmQULp9f
-----END CERTIFICATE-----
Generated at Sun Sep 29 18:25:06 2024 by rpki-client on console-ams.rpki-client.org