Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3232203d3e2034373837.roa
File: 3130332e36312e3234382e302f32322d3232203d3e2034373837.roa (raw, json)
Hash identifier: 6CoSIMqHUIKByv+RNtr3Rfzs1b2mRZZChEscgNGtoh8=
Subject key identifier: 5A:D3:15:59:E8:DF:02:56:B0:6A:4E:64:92:C0:5C:3B:04:90:42:35
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 248CE22C0A14547221BF35D978B58009DD7E37A2
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3232203d3e2034373837.roa
Signing time: Mon 01 Jul 2024 01:02:15 +0000
ROA not before: Mon 01 Jul 2024 00:57:15 +0000
ROA not after: Mon 30 Jun 2025 01:02:15 +0000
asID: 4787
IP address blocks: 103.61.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8c:e2:2c:0a:14:54:72:21:bf:35:d9:78:b5:80:09:dd:7e:37:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:15 2024 GMT
Not After : Jun 30 01:02:15 2025 GMT
Subject: CN=5AD31559E8DF0256B06A4E6492C05C3B04904235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:87:88:79:54:8a:87:77:96:b5:83:07:03:
03:16:ad:a7:ef:13:7c:5b:47:01:b5:0b:da:3b:65:
77:9e:bf:2f:ec:6c:cc:1e:ef:ea:5f:86:1a:2a:d2:
aa:ad:c3:34:54:1d:d0:fa:ec:26:e9:73:3c:8f:36:
e2:68:fe:83:1c:08:d7:00:ed:c8:93:38:5b:51:85:
a0:e0:98:77:b3:74:2c:7e:01:0e:5b:02:51:59:ba:
01:5e:ad:f8:95:c9:73:61:b2:c7:d6:f3:02:58:b6:
b9:fc:de:8e:f8:63:0b:72:71:52:12:26:fd:bc:93:
8b:96:f7:76:49:36:52:e5:06:8e:68:d8:ce:17:60:
c1:d0:bc:88:4f:b1:c6:32:4a:f4:95:f0:05:d6:ce:
37:00:03:ce:7e:c9:b8:95:3c:96:5d:d6:09:85:7a:
d5:00:57:38:65:46:53:7d:dc:c8:93:88:16:00:3c:
63:66:f6:d0:f3:a2:1e:03:bb:d3:f0:1b:4c:92:db:
45:6e:e7:f1:76:4e:6f:0a:a8:65:f6:1a:91:55:bb:
4e:1e:2c:80:d5:c8:c3:27:7d:c4:2a:14:84:0c:6f:
00:fb:a6:12:f2:b1:51:8f:f2:79:4d:79:be:81:f0:
5d:9f:cb:ab:08:14:c6:b5:ff:10:bf:79:fb:27:fa:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D3:15:59:E8:DF:02:56:B0:6A:4E:64:92:C0:5C:3B:04:90:42:35
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3232203d3e2034373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.61.248.0/22
Signature Algorithm: sha256WithRSAEncryption
96:93:29:0d:37:95:0f:4a:f2:0d:b2:d1:bd:30:e0:d2:81:97:
17:72:c7:30:3b:82:9f:15:ad:72:2d:19:1d:e9:98:96:31:dc:
a0:4d:43:ba:97:70:59:5c:12:48:1a:b8:db:a7:36:5c:d8:9d:
3d:36:fe:ec:66:7a:4b:04:c1:a4:eb:4d:f9:a6:28:90:57:81:
08:95:71:db:ad:70:31:e3:8d:3c:df:da:24:a5:35:10:5b:c5:
40:bd:3a:3c:89:fd:59:0f:4b:07:f4:45:4c:da:a8:88:72:b3:
7e:d3:72:d9:40:c0:c7:21:93:bc:92:3e:76:ed:f9:28:6b:d0:
36:25:29:74:ac:46:15:b7:ce:42:d6:15:5c:bc:c3:03:4e:47:
d5:9c:5a:15:9b:37:78:6c:a4:dd:a5:43:f1:b0:8c:4e:67:50:
23:88:e8:03:3d:b9:94:6d:36:73:91:7e:76:e4:70:c0:82:fd:
6f:4f:8f:bc:2e:d3:2b:69:52:09:51:d0:b1:19:b4:96:e6:0b:
48:48:88:ab:8b:15:4a:32:d9:f4:50:64:4c:86:53:39:10:f5:
56:4c:02:d4:bd:77:51:ec:e4:66:c0:41:24:be:ee:22:20:da:
94:af:ee:5f:7e:ce:d9:5a:54:26:cc:e2:ae:b3:41:fc:a8:69:
f3:6d:04:92
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUJIziLAoUVHIhvzXZeLWACd1+N6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MDEwMDU3MTVaFw0yNTA2MzAwMTAyMTVaMDMxMTAvBgNV
BAMTKDVBRDMxNTU5RThERjAyNTZCMDZBNEU2NDkyQzA1QzNCMDQ5MDQyMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDei4eIeVSKh3eWtYMHAwMWrafv
E3xbRwG1C9o7ZXeevy/sbMwe7+pfhhoq0qqtwzRUHdD67CbpczyPNuJo/oMcCNcA
7ciTOFtRhaDgmHezdCx+AQ5bAlFZugFerfiVyXNhssfW8wJYtrn83o74YwtycVIS
Jv28k4uW93ZJNlLlBo5o2M4XYMHQvIhPscYySvSV8AXWzjcAA85+ybiVPJZd1gmF
etUAVzhlRlN93MiTiBYAPGNm9tDzoh4Du9PwG0yS20Vu5/F2Tm8KqGX2GpFVu04e
LIDVyMMnfcQqFIQMbwD7phLysVGP8nlNeb6B8F2fy6sIFMa1/xC/efsn+kGZAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUWtMVWejfAlawak5kksBcOwSQQjUwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMzJlMzYzMTJlMzIzNDM4MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzQzNzM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnPfgwDQYJKoZIhvcN
AQELBQADggEBAJaTKQ03lQ9K8g2y0b0w4NKBlxdyxzA7gp8VrXItGR3pmJYx3KBN
Q7qXcFlcEkgauNunNlzYnT02/uxmeksEwaTrTfmmKJBXgQiVcdutcDHjjTzf2iSl
NRBbxUC9OjyJ/VkPSwf0RUzaqIhys37TctlAwMchk7ySPnbt+Shr0DYlKXSsRhW3
zkLWFVy8wwNOR9WcWhWbN3hspN2lQ/GwjE5nUCOI6AM9uZRtNnORfnbkcMCC/W9P
j7wu0ytpUglR0LEZtJbmC0hIiKuLFUoy2fRQZEyGUzkQ9VZMAtS9d1Hs5GbAQSS+
7iIg2pSv7l9+ztlaVCbM4q6zQfyoafNtBJI=
-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org