Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
File: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (raw, json)
Hash identifier: j2JOZJmUR6qUetcjdxo0y1gPFus3kq00Ml/ej1kinGs=
Subject key identifier: C4:79:3A:3D:CF:24:60:07:50:AE:AB:7D:12:1D:17:92:33:6B:A2:15
Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial: 2A675DF2082F42A3F97216CB4889F529D28D8A72
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
Signing time: Thu 29 Aug 2024 16:00:01 +0000
ROA not before: Thu 29 Aug 2024 15:55:01 +0000
ROA not after: Thu 28 Aug 2025 16:00:01 +0000
asID: 142395
IP address blocks: 103.172.118.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 12:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:67:5d:f2:08:2f:42:a3:f9:72:16:cb:48:89:f5:29:d2:8d:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Validity
Not Before: Aug 29 15:55:01 2024 GMT
Not After : Aug 28 16:00:01 2025 GMT
Subject: CN=C4793A3DCF24600750AEAB7D121D1792336BA215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:68:24:0d:9b:09:0e:20:ae:40:88:73:e7:
02:88:fa:4c:fb:57:de:a7:41:ed:e6:e3:02:4c:d3:
ec:ee:de:48:25:7f:b7:f7:f0:f7:f1:87:d1:e7:6a:
a0:11:78:0c:6b:69:17:aa:7f:95:20:ac:c0:d8:b8:
a0:d6:ea:64:6a:e9:cc:98:19:97:1b:2e:d1:63:cc:
5c:da:ea:93:7a:8d:b8:64:49:cb:b6:c0:fb:87:dc:
1c:4c:b9:7e:33:81:ae:24:de:c4:db:ac:c8:4a:b6:
91:d6:18:ce:19:f5:af:bf:0f:f4:ca:0a:62:07:52:
c0:fc:22:c1:a6:d5:81:10:31:7f:02:66:24:80:6e:
f2:a3:75:d3:9b:71:36:77:b1:62:0f:7d:04:dc:ac:
f6:e1:9e:f0:2d:6f:60:99:9b:a4:5d:80:ef:63:7c:
da:aa:bc:4e:4d:d5:a8:96:09:4b:3a:ea:04:3a:f2:
3b:49:33:46:10:64:1b:68:ce:b7:0a:88:fd:63:6c:
75:97:b9:ff:e4:b0:05:95:ff:e2:00:b3:7b:41:2d:
ee:16:f9:fe:9e:e2:43:18:c6:3b:e1:60:ae:01:ba:
37:91:14:92:69:dd:90:6a:f5:a6:99:b3:cd:77:2a:
7c:70:d8:1c:5f:d9:74:94:2b:81:3e:ed:2f:47:66:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:79:3A:3D:CF:24:60:07:50:AE:AB:7D:12:1D:17:92:33:6B:A2:15
X509v3 Authority Key Identifier:
keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.118.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:b1:67:ec:41:7c:11:93:90:6d:72:97:b5:f6:0b:22:4f:ec:
18:67:3b:a4:bf:74:2a:e8:e0:d8:bb:ae:dc:e0:10:51:b2:cd:
2c:b1:7d:28:f8:17:0f:7a:3b:5a:eb:68:a7:98:e7:96:92:a5:
88:ea:76:6c:0b:42:bd:df:75:d8:91:cd:59:39:60:1f:7e:6e:
d9:58:38:e5:5e:93:bd:97:32:f6:21:61:4a:2f:bc:8b:7f:c0:
41:e3:8b:ad:d4:13:29:85:5e:b2:81:7a:29:8b:0c:0f:fd:a3:
eb:0b:52:1c:67:cf:9e:cd:28:b1:f0:09:af:b7:f2:16:bd:97:
6a:7a:7f:c3:82:83:72:8e:50:a3:32:c0:ec:58:b0:fa:d1:64:
f0:d0:bd:0c:38:38:b9:0b:6e:92:87:27:4c:fa:1b:68:de:f4:
aa:0d:ca:f0:35:39:b8:24:af:3e:4f:f1:7d:07:65:ee:b3:ef:
82:23:60:cc:97:c0:8f:8b:78:1f:54:d7:ac:cb:91:28:0c:02:
28:5a:1b:e9:fc:d7:30:a5:06:6e:97:67:a0:e7:9f:92:b4:cc:
01:3f:29:01:d7:1d:e4:7b:9c:60:b3:0f:18:e1:e5:c2:99:2b:
28:db:f7:16:ef:b1:3c:b1:12:a5:c2:2d:73:56:f3:22:af:38:
b4:28:65:47
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUKmdd8ggvQqP5chbLSIn1KdKNinIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4
OTI1RkY2RTAeFw0yNDA4MjkxNTU1MDFaFw0yNTA4MjgxNjAwMDFaMDMxMTAvBgNV
BAMTKEM0NzkzQTNEQ0YyNDYwMDc1MEFFQUI3RDEyMUQxNzkyMzM2QkEyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAmgkDZsJDiCuQIhz5wKI+kz7
V96nQe3m4wJM0+zu3kglf7f38Pfxh9HnaqAReAxraReqf5UgrMDYuKDW6mRq6cyY
GZcbLtFjzFza6pN6jbhkScu2wPuH3BxMuX4zga4k3sTbrMhKtpHWGM4Z9a+/D/TK
CmIHUsD8IsGm1YEQMX8CZiSAbvKjddObcTZ3sWIPfQTcrPbhnvAtb2CZm6RdgO9j
fNqqvE5N1aiWCUs66gQ68jtJM0YQZBtozrcKiP1jbHWXuf/ksAWV/+IAs3tBLe4W
+f6e4kMYxjvhYK4BujeRFJJp3ZBq9aaZs813Knxw2Bxf2XSUK4E+7S9HZnTDAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUxHk6Pc8kYAdQrqt9Eh0XkjNrohUwHwYDVR0j
BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx
QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1
RkY2RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwNGU5N2QzLTcxYzMtNGQwYS04
YjA0LTcwODhmZTM4MmJjMy8wLzMxMzAzMzJlMzEzNzMyMmUzMTMxMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrHYwDQYJ
KoZIhvcNAQELBQADggEBAE2xZ+xBfBGTkG1yl7X2CyJP7BhnO6S/dCro4Ni7rtzg
EFGyzSyxfSj4Fw96O1rraKeY55aSpYjqdmwLQr3fddiRzVk5YB9+btlYOOVek72X
MvYhYUovvIt/wEHji63UEymFXrKBeimLDA/9o+sLUhxnz57NKLHwCa+38ha9l2p6
f8OCg3KOUKMywOxYsPrRZPDQvQw4OLkLbpKHJ0z6G2je9KoNyvA1Obgkrz5P8X0H
Ze6z74IjYMyXwI+LeB9U16zLkSgMAihaG+n81zClBm6XZ6Dnn5K0zAE/KQHXHeR7
nGCzDxjh5cKZKyjb9xbvsTyxEqXCLXNW8yKvOLQoZUc=
-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:08 2024 by rpki-client on console-ams.rpki-client.org