Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37312e302f32342d3234203d3e20313431393735.roa
File: 3130332e3136372e37312e302f32342d3234203d3e20313431393735.roa (raw, json)
Hash identifier: pXv+5cIndZ4GkZFN1PKa7rmnD8UEqG/wAGAsAH7mUV4=
Subject key identifier: 67:AB:47:33:CA:5A:F1:00:EC:EA:E8:72:18:CA:B3:20:1D:CA:BA:4F
Certificate issuer: /CN=8DA7BD2FB53F2491FB6F3C9319EF347499610E50
Certificate serial: 1904A831F04B13B14741D721988B9DC8F2A7698C
Authority key identifier: 8D:A7:BD:2F:B5:3F:24:91:FB:6F:3C:93:19:EF:34:74:99:61:0E:50
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37312e302f32342d3234203d3e20313431393735.roa
Signing time: Fri 20 Oct 2023 07:00:00 +0000
ROA not before: Fri 20 Oct 2023 06:55:00 +0000
ROA not after: Fri 18 Oct 2024 07:00:00 +0000
asID: 141975
IP address blocks: 103.167.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 01:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:04:a8:31:f0:4b:13:b1:47:41:d7:21:98:8b:9d:c8:f2:a7:69:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8DA7BD2FB53F2491FB6F3C9319EF347499610E50
Validity
Not Before: Oct 20 06:55:00 2023 GMT
Not After : Oct 18 07:00:00 2024 GMT
Subject: CN=67AB4733CA5AF100ECEAE87218CAB3201DCABA4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:9b:29:73:2b:f7:e9:52:72:6f:67:5a:c2:
d0:13:ec:d2:69:69:6c:b1:1f:20:4b:c0:69:50:48:
4d:6f:ee:97:f4:f8:62:fb:95:27:72:9e:41:69:35:
03:f8:cd:85:e4:fd:89:2b:bd:b7:de:49:d3:a7:99:
ca:51:a4:7a:96:c5:65:a0:c4:b9:e0:46:b9:c7:9e:
71:d1:e3:bf:ed:0d:3a:aa:7b:a0:65:21:f0:c3:b3:
68:13:6d:49:08:8b:22:99:6f:35:7c:61:ae:e8:7d:
d5:7f:be:70:4e:78:71:5b:ab:de:e5:b3:16:88:22:
6d:df:90:e5:b7:8b:a6:3a:d5:d3:6e:97:d2:86:83:
bd:4c:7d:14:56:69:0e:94:49:45:f1:8d:fb:2d:59:
bb:a1:ff:7a:a8:3b:e1:07:ae:98:24:fa:18:18:44:
91:27:d2:2f:f0:ff:c5:ad:25:68:fa:ee:39:a0:8d:
60:0f:3f:57:d0:87:f5:67:eb:10:51:67:e1:7a:8a:
2b:44:44:4d:de:0e:bc:fc:25:c5:f8:e2:96:57:30:
5f:ac:e1:e0:49:ac:f9:7f:c1:ef:24:e1:6a:a1:ae:
6a:41:20:49:b7:e3:e8:25:fb:4a:25:f8:2a:64:e4:
64:b0:89:4f:e3:7d:5c:16:43:e4:2e:05:14:f7:6c:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AB:47:33:CA:5A:F1:00:EC:EA:E8:72:18:CA:B3:20:1D:CA:BA:4F
X509v3 Authority Key Identifier:
keyid:8D:A7:BD:2F:B5:3F:24:91:FB:6F:3C:93:19:EF:34:74:99:61:0E:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA7BD2FB53F2491FB6F3C9319EF347499610E50.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/3130332e3136372e37312e302f32342d3234203d3e20313431393735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.167.71.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7a:ef:6f:13:f6:b3:94:8c:75:5b:70:5a:e7:22:aa:0c:d7:
28:1a:a1:50:44:29:b4:f6:fb:2b:20:a2:c1:2e:22:e1:66:36:
14:27:96:b3:c0:1a:77:86:68:3f:8d:d7:6e:ff:83:18:d1:13:
1d:bd:9e:d3:ee:1b:42:40:ed:89:30:c4:8c:51:0b:67:c2:a2:
24:ee:b2:c3:6d:bd:e5:b3:6c:1a:5b:f6:6a:6c:3d:93:31:f5:
08:d7:b2:a2:c5:d7:2c:ce:8d:5c:5a:43:1e:5f:c4:b4:29:0e:
80:94:3a:fb:16:a3:3d:ed:2b:22:24:54:95:21:80:0d:06:e7:
0e:1f:84:c2:f1:56:6d:58:7a:5b:56:66:a6:22:33:0e:b9:16:
78:37:28:2e:2c:90:be:f8:1f:b2:3e:51:ca:bf:fd:f2:d7:7e:
6e:83:f6:3e:0a:a4:e9:eb:bd:42:6a:d6:48:84:98:55:9e:d7:
a1:e2:3d:7d:22:d8:17:e1:5b:92:c4:a6:40:99:60:54:c3:a0:
b4:97:c0:41:e6:93:5c:7b:37:a5:88:be:1b:64:71:a7:36:71:
b2:73:34:47:5c:d0:fc:f5:0b:98:b4:a1:59:df:8e:a2:14:28:
14:3e:89:9f:5f:4c:e1:f3:16:c9:3b:7d:38:71:1c:08:01:ed:
ef:9c:37:e2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGQSoMfBLE7FHQdchmIudyPKnaYwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERBN0JEMkZCNTNGMjQ5MUZCNkYzQzkzMTlFRjM0NzQ5
OTYxMEU1MDAeFw0yMzEwMjAwNjU1MDBaFw0yNDEwMTgwNzAwMDBaMDMxMTAvBgNV
BAMTKDY3QUI0NzMzQ0E1QUYxMDBFQ0VBRTg3MjE4Q0FCMzIwMURDQUJBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCguJspcyv36VJyb2dawtAT7NJp
aWyxHyBLwGlQSE1v7pf0+GL7lSdynkFpNQP4zYXk/YkrvbfeSdOnmcpRpHqWxWWg
xLngRrnHnnHR47/tDTqqe6BlIfDDs2gTbUkIiyKZbzV8Ya7ofdV/vnBOeHFbq97l
sxaIIm3fkOW3i6Y61dNul9KGg71MfRRWaQ6USUXxjfstWbuh/3qoO+EHrpgk+hgY
RJEn0i/w/8WtJWj67jmgjWAPP1fQh/Vn6xBRZ+F6iitERE3eDrz8JcX44pZXMF+s
4eBJrPl/we8k4WqhrmpBIEm34+gl+0ol+Cpk5GSwiU/jfVwWQ+QuBRT3bBZRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZ6tHM8pa8QDs6uhyGMqzIB3Kuk8wHwYDVR0j
BBgwFoAUjae9L7U/JJH7bzyTGe80dJlhDlAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
OGY5ZTg3ZC1lNTA5LTQ3YmEtYmU5ZC04OTU1NmY1MzBlYTgvMC84REE3QkQyRkI1
M0YyNDkxRkI2RjNDOTMxOUVGMzQ3NDk5NjEwRTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOERBN0JEMkZCNTNGMjQ5MUZCNkYzQzkzMTlFRjM0NzQ5OTYx
MEU1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4ZjllODdkLWU1MDktNDdiYS1i
ZTlkLTg5NTU2ZjUzMGVhOC8wLzMxMzAzMzJlMzEzNjM3MmUzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6dHMA0GCSqG
SIb3DQEBCwUAA4IBAQA5eu9vE/azlIx1W3Ba5yKqDNcoGqFQRCm09vsrIKLBLiLh
ZjYUJ5azwBp3hmg/jddu/4MY0RMdvZ7T7htCQO2JMMSMUQtnwqIk7rLDbb3ls2wa
W/ZqbD2TMfUI17Kixdcszo1cWkMeX8S0KQ6AlDr7FqM97SsiJFSVIYANBucOH4TC
8VZtWHpbVmamIjMOuRZ4NyguLJC++B+yPlHKv/3y135ug/Y+CqTp671CatZIhJhV
nteh4j19ItgX4VuSxKZAmWBUw6C0l8BB5pNcezeliL4bZHGnNnGyczRHXND89QuY
tKFZ346iFCgUPomfX0zh8xbJO304cRwIAe3vnDfi
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org