Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313530323638.roa
File: 3130332e3139312e36312e302f32342d3234203d3e20313530323638.roa (raw, json)
Hash identifier: XyCK53pfaTHTsxMHvlTojSVp0jWLW4I2CAUvNIB99sM=
Subject key identifier: 09:2A:E9:75:BD:E6:E9:E1:E0:51:44:CF:D0:FC:BA:8B:FC:2F:82:E1
Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
Certificate serial: 2487C4780FF5881D14B92406B1AF93BFF288A363
Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313530323638.roa
Signing time: Tue 17 Oct 2023 11:01:52 +0000
ROA not before: Tue 17 Oct 2023 10:56:52 +0000
ROA not after: Tue 15 Oct 2024 11:01:52 +0000
asID: 150268
IP address blocks: 103.191.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 18:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:87:c4:78:0f:f5:88:1d:14:b9:24:06:b1:af:93:bf:f2:88:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5
Validity
Not Before: Oct 17 10:56:52 2023 GMT
Not After : Oct 15 11:01:52 2024 GMT
Subject: CN=092AE975BDE6E9E1E05144CFD0FCBA8BFC2F82E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:08:ee:55:5f:10:e7:5c:2c:b1:c1:dd:15:
da:3c:c1:26:14:c4:98:e6:fb:08:17:71:65:0f:f8:
a9:6c:0c:ee:36:94:69:f1:b8:bd:02:5f:97:7f:65:
cd:98:81:27:bc:c9:b8:29:6f:44:d8:93:6c:48:ad:
11:65:1d:c0:67:58:37:f2:db:5b:e2:e6:92:2a:f5:
ce:8a:c8:ae:ec:e7:32:c7:9b:62:d0:73:fd:78:23:
a3:a0:49:38:d8:e9:93:77:e3:bf:0c:e5:72:a3:19:
6d:1c:32:55:4d:e3:61:8e:ff:50:6f:bc:3e:a6:1f:
b0:7c:db:d4:db:7e:54:1c:5d:74:cd:fe:49:fa:04:
08:05:1f:fe:32:ed:2c:ce:ff:e3:cd:a9:2e:18:ff:
c6:61:d6:ee:4a:1a:98:82:10:1c:72:b2:70:47:7a:
15:7d:50:9a:17:a5:8d:5e:e0:b4:ef:a1:6a:b6:39:
71:77:fc:79:b6:42:ba:c0:cb:89:d2:f5:a5:af:06:
23:f3:79:ce:76:2d:4f:73:83:da:d6:1c:90:35:9d:
d1:4b:6f:31:e0:75:bc:03:80:fa:d9:f2:b0:45:1a:
72:8c:24:4e:0a:d4:bb:29:00:01:2c:33:b5:a0:e6:
5a:41:52:a0:8e:06:5a:d3:95:28:b6:c9:de:47:86:
38:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2A:E9:75:BD:E6:E9:E1:E0:51:44:CF:D0:FC:BA:8B:FC:2F:82:E1
X509v3 Authority Key Identifier:
keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/3130332e3139312e36312e302f32342d3234203d3e20313530323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.191.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:60:a1:82:60:2a:89:67:65:88:79:cd:aa:31:92:70:42:b0:
6b:6d:4c:ae:f7:5d:c7:ce:be:82:59:23:73:fc:15:4f:7c:15:
21:cf:96:b3:c7:d6:31:59:fd:36:c8:a8:08:be:fd:1b:24:bf:
9f:04:9b:02:a1:cf:f5:ca:b3:31:d2:45:95:ec:6e:8a:bf:ce:
0a:43:44:50:90:66:a1:09:ee:d7:d8:01:1f:f6:09:ee:d4:32:
52:a6:0c:ff:b0:29:73:90:03:2c:cb:1a:6a:4e:92:80:17:af:
93:a2:a1:3f:d9:9d:8e:a2:f4:c8:4f:71:38:88:99:67:e3:fb:
46:c3:3d:42:ed:c9:d8:ca:96:b4:1d:8e:bd:21:fd:73:0a:0c:
aa:93:0e:cc:00:82:ae:e8:b2:80:4b:63:c4:ec:b8:b1:e5:ec:
c6:94:d6:da:e5:1c:c4:5d:6e:8b:77:ba:d8:68:ae:ea:ed:77:
6f:4b:19:db:76:d2:13:7b:07:27:b8:6b:23:f6:fe:f6:25:5e:
71:d2:35:b7:80:b9:ed:3a:b7:d9:a7:1c:b7:ed:8d:95:51:09:
73:a6:05:8a:f2:bc:40:bc:18:a7:06:2d:6c:2e:ca:dc:41:93:
f3:71:fc:5e:a6:5c:ec:b5:3a:4d:e0:ee:93:ee:e9:ce:4e:82:
69:c7:bb:1c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJIfEeA/1iB0UuSQGsa+Tv/KIo2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1
RjMyQ0VCNTAeFw0yMzEwMTcxMDU2NTJaFw0yNDEwMTUxMTAxNTJaMDMxMTAvBgNV
BAMTKDA5MkFFOTc1QkRFNkU5RTFFMDUxNDRDRkQwRkNCQThCRkMyRjgyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtwjuVV8Q51wsscHdFdo8wSYU
xJjm+wgXcWUP+KlsDO42lGnxuL0CX5d/Zc2YgSe8ybgpb0TYk2xIrRFlHcBnWDfy
21vi5pIq9c6KyK7s5zLHm2LQc/14I6OgSTjY6ZN3478M5XKjGW0cMlVN42GO/1Bv
vD6mH7B829TbflQcXXTN/kn6BAgFH/4y7SzO/+PNqS4Y/8Zh1u5KGpiCEBxysnBH
ehV9UJoXpY1e4LTvoWq2OXF3/Hm2QrrAy4nS9aWvBiPzec52LU9zg9rWHJA1ndFL
bzHgdbwDgPrZ8rBFGnKMJE4K1LspAAEsM7Wg5lpBUqCOBlrTlSi2yd5HhjghAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUCSrpdb3m6eHgUUTP0Py6i/wvguEwHwYDVR0j
BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz
MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy
Q0VCNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMzRkMmQ4LTM0YWYtNDc1Ny04
YWQ5LTkyZGEzNWQ5MjE2OC8wLzMxMzAzMzJlMzEzOTMxMmUzNjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ789MA0GCSqG
SIb3DQEBCwUAA4IBAQAOYKGCYCqJZ2WIec2qMZJwQrBrbUyu913Hzr6CWSNz/BVP
fBUhz5azx9YxWf02yKgIvv0bJL+fBJsCoc/1yrMx0kWV7G6Kv84KQ0RQkGahCe7X
2AEf9gnu1DJSpgz/sClzkAMsyxpqTpKAF6+ToqE/2Z2OovTIT3E4iJln4/tGwz1C
7cnYypa0HY69If1zCgyqkw7MAIKu6LKAS2PE7Lix5ezGlNba5RzEXW6Ld7rYaK7q
7XdvSxnbdtITewcnuGsj9v72JV5x0jW3gLntOrfZpxy37Y2VUQlzpgWK8rxAvBin
Bi1sLsrcQZPzcfxeplzstTpN4O6T7unOToJpx7sc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org