Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3130332e3136392e362e302f32332d3234203d3e20313432333736.roa
File: 3130332e3136392e362e302f32332d3234203d3e20313432333736.roa (raw, json)
Hash identifier: OuG5neMrhAJc08FlT572ccc8qpelj89hO8y36z6l/xI=
Subject key identifier: 2C:B3:EA:F7:F3:E3:CC:0D:F4:DE:B8:F6:83:5A:76:81:B2:2D:B6:0E
Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0
Certificate serial: 7B7D11B32C0A1470904AE744A66185CACAA32EDB
Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3130332e3136392e362e302f32332d3234203d3e20313432333736.roa
Signing time: Mon 28 Aug 2023 08:01:02 +0000
ROA not before: Mon 28 Aug 2023 07:56:02 +0000
ROA not after: Mon 26 Aug 2024 08:01:02 +0000
asID: 142376
IP address blocks: 103.169.6.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 00:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7d:11:b3:2c:0a:14:70:90:4a:e7:44:a6:61:85:ca:ca:a3:2e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0
Validity
Not Before: Aug 28 07:56:02 2023 GMT
Not After : Aug 26 08:01:02 2024 GMT
Subject: CN=2CB3EAF7F3E3CC0DF4DEB8F6835A7681B22DB60E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:26:2d:bc:f0:bf:df:24:6d:85:dc:a4:b1:4c:
fc:d7:93:7f:81:e3:ab:fe:28:2d:59:e7:55:40:2b:
88:6a:1f:a3:be:04:8c:8b:ba:4a:a1:1c:f7:aa:22:
2f:54:56:d1:a0:dc:2a:76:14:d5:bc:6c:c0:a1:2b:
0e:fe:8b:c9:8d:5c:7d:09:e0:ee:03:00:fb:ea:e9:
74:a0:db:8c:a0:01:05:0a:9f:ab:b5:49:34:bc:b6:
21:63:90:a3:e0:3e:f5:88:f1:d4:c0:c8:71:d6:f7:
3c:a1:e8:8d:31:aa:f7:d2:d0:44:ee:e1:1a:90:e5:
1c:cd:7d:d3:1d:41:16:35:e7:46:c4:8f:1a:97:82:
74:f2:f3:11:c0:e5:c2:4b:94:d3:5a:4e:61:c3:2a:
81:d7:a2:10:c6:75:92:6f:0a:1f:17:5c:d2:2f:5f:
63:74:44:6a:78:8a:69:c9:e5:36:6f:dc:7f:19:f9:
2d:2d:7c:2e:ee:5e:a0:c0:92:60:24:42:34:33:31:
4d:1d:97:eb:e8:d8:e3:17:2f:f7:b1:03:e3:9e:cf:
19:e0:0b:17:a0:e2:4e:83:fb:b6:fa:d4:ef:cd:9b:
da:16:86:a7:94:ff:e4:5b:b5:9e:f6:c8:07:cd:f1:
76:b6:fa:60:92:46:d0:bd:2f:f1:40:59:cd:96:80:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:EA:F7:F3:E3:CC:0D:F4:DE:B8:F6:83:5A:76:81:B2:2D:B6:0E
X509v3 Authority Key Identifier:
keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/3130332e3136392e362e302f32332d3234203d3e20313432333736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.169.6.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:be:02:92:dc:a9:1c:cf:20:63:9d:f9:08:ec:dd:5c:d8:1f:
2e:c4:8b:21:de:1c:15:d1:e6:4d:ee:71:3d:2e:5a:0b:0f:33:
c0:43:a1:72:82:fb:df:10:97:30:ba:22:59:ed:a1:14:db:e8:
8a:94:00:c6:44:a4:c0:4c:86:ad:5d:5f:99:ce:58:17:29:94:
27:71:14:4c:56:31:67:b4:fa:14:88:16:fe:77:c9:9a:fa:9e:
30:d3:fc:9e:5a:03:74:74:a1:d2:8b:bd:bd:23:09:a3:5a:5b:
d5:c0:23:3e:ff:98:ca:4d:07:b2:da:d2:c9:e4:1c:de:57:4e:
ca:a3:0c:18:10:f2:80:6b:e9:61:1d:e6:67:45:b0:59:14:6f:
f0:17:71:fd:94:e7:fd:50:2f:99:62:f5:20:d8:ce:0d:5f:a5:
0b:ea:49:91:05:f7:5e:a9:a4:91:71:8c:92:df:5c:eb:90:fe:
03:67:3b:84:e7:13:e1:08:b2:9f:e5:28:c3:1b:0b:c0:c3:ae:
ee:89:9b:67:61:24:53:c6:d8:67:5d:e9:99:0f:80:2c:8b:ff:
d3:93:34:f5:31:68:48:9a:37:57:f8:a6:58:d8:25:e7:2e:30:
f7:bc:08:29:e2:4e:ae:e5:88:df:ad:24:f8:8b:8a:47:2b:73:
0c:da:09:9c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUe30RsywKFHCQSudEpmGFysqjLtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3
OEM2MTJEMDAeFw0yMzA4MjgwNzU2MDJaFw0yNDA4MjYwODAxMDJaMDMxMTAvBgNV
BAMTKDJDQjNFQUY3RjNFM0NDMERGNERFQjhGNjgzNUE3NjgxQjIyREI2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJi288L/fJG2F3KSxTPzXk3+B
46v+KC1Z51VAK4hqH6O+BIyLukqhHPeqIi9UVtGg3Cp2FNW8bMChKw7+i8mNXH0J
4O4DAPvq6XSg24ygAQUKn6u1STS8tiFjkKPgPvWI8dTAyHHW9zyh6I0xqvfS0ETu
4RqQ5RzNfdMdQRY150bEjxqXgnTy8xHA5cJLlNNaTmHDKoHXohDGdZJvCh8XXNIv
X2N0RGp4imnJ5TZv3H8Z+S0tfC7uXqDAkmAkQjQzMU0dl+vo2OMXL/exA+Oezxng
Cxeg4k6D+7b61O/Nm9oWhqeU/+RbtZ72yAfN8Xa2+mCSRtC9L/FAWc2WgJpvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQULLPq9/PjzA303rj2g1p2gbIttg4wHwYDVR0j
BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy
RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2
MTJEMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1M2U0YWY1LWFhZjUtNDZjZS1i
MTE5LWQ3ZTc2ZGFlMjBiOC8wLzMxMzAzMzJlMzEzNjM5MmUzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzQzMjMzMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWepBjANBgkqhkiG
9w0BAQsFAAOCAQEAm74CktypHM8gY535COzdXNgfLsSLId4cFdHmTe5xPS5aCw8z
wEOhcoL73xCXMLoiWe2hFNvoipQAxkSkwEyGrV1fmc5YFymUJ3EUTFYxZ7T6FIgW
/nfJmvqeMNP8nloDdHSh0ou9vSMJo1pb1cAjPv+Yyk0HstrSyeQc3ldOyqMMGBDy
gGvpYR3mZ0WwWRRv8Bdx/ZTn/VAvmWL1INjODV+lC+pJkQX3XqmkkXGMkt9c65D+
A2c7hOcT4Qiyn+UowxsLwMOu7ombZ2EkU8bYZ13pmQ+ALIv/05M09TFoSJo3V/im
WNgl5y4w97wIKeJOruWI360k+IuKRytzDNoJnA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org