Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32342d3234203d3e20313531303032.roa
File: 3130332e3231302e36382e302f32342d3234203d3e20313531303032.roa (raw, json)
Hash identifier: KCV75XaYax1qKnnlMRzejaPuAmV6NsW11tE9eoER9gA=
Subject key identifier: 17:03:20:D7:72:63:0E:1B:8A:CE:35:34:29:7D:61:61:F6:B0:10:FB
Certificate issuer: /CN=358F4D417A1317CB220BBDC982D7F35D1540D51A
Certificate serial: 4EE45EB6A8F41103BDABE7303161343D47587C63
Authority key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32342d3234203d3e20313531303032.roa
Signing time: Fri 09 Jun 2023 06:48:43 +0000
ROA not before: Fri 09 Jun 2023 06:43:43 +0000
ROA not after: Fri 07 Jun 2024 06:48:43 +0000
asID: 151002
IP address blocks: 103.210.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jun 2024 15:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e4:5e:b6:a8:f4:11:03:bd:ab:e7:30:31:61:34:3d:47:58:7c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A
Validity
Not Before: Jun 9 06:43:43 2023 GMT
Not After : Jun 7 06:48:43 2024 GMT
Subject: CN=170320D772630E1B8ACE3534297D6161F6B010FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:43:f5:43:c7:28:71:41:f2:81:a6:05:29:
89:23:69:da:7d:36:28:bd:ff:32:e4:06:c3:bc:c4:
a5:ad:5e:d3:5f:57:6d:40:be:39:20:99:8a:87:12:
bf:37:6a:31:c0:94:09:4c:aa:36:a4:ab:f6:36:27:
12:46:86:61:89:2c:d6:b2:a1:15:ff:4d:bc:19:02:
12:cc:e5:1a:81:cc:ec:f2:9a:19:40:32:c1:39:09:
8b:8a:46:9b:2a:da:82:da:3a:71:5b:05:7d:45:0c:
b9:96:5d:27:a1:43:47:4a:b8:10:6f:98:78:86:f7:
cd:d3:d1:16:4e:e9:0f:c0:1c:24:0a:3f:e5:05:c2:
63:0f:7d:b5:9f:25:f7:bf:26:53:7d:b4:e2:39:36:
9a:d7:29:0a:1d:48:3a:6a:91:67:2c:2e:d0:6e:a5:
28:1d:15:8e:ed:2e:e3:3b:86:f4:0f:6d:98:08:26:
0e:cd:3e:0c:e6:fb:64:89:2e:1f:fc:19:ca:e0:6b:
e3:57:9b:47:24:92:95:91:28:24:5e:f1:2d:cf:ff:
62:bb:85:54:21:2a:81:6b:98:fd:6c:77:08:b6:a0:
67:6f:d3:fe:d3:4e:7d:4c:16:bd:9f:a7:c5:39:62:
42:43:ce:fe:69:63:bf:d8:21:92:2f:80:32:3f:02:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:03:20:D7:72:63:0E:1B:8A:CE:35:34:29:7D:61:61:F6:B0:10:FB
X509v3 Authority Key Identifier:
keyid:35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32342d3234203d3e20313531303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.210.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e3:10:46:56:43:c9:76:51:ea:a4:0e:e9:b8:6b:7b:c1:f9:
3d:2e:db:dd:39:b2:e9:19:87:e8:a0:d1:27:6e:22:f6:98:3a:
e4:d3:c5:f9:25:cf:72:36:6e:34:cc:cc:a6:58:b8:6b:7f:36:
f2:0c:3f:75:dc:9f:72:4b:06:25:ac:a4:c4:f1:bf:fd:89:30:
51:63:65:38:97:e4:ff:67:ff:cb:46:3c:bf:95:9e:8e:b9:44:
d6:5c:e1:4d:5e:90:d3:2b:ca:85:6c:f9:9a:56:91:4c:5a:57:
6f:3c:1a:c8:8f:de:00:19:32:fa:18:e2:5d:e4:c8:c0:fb:f3:
da:a6:b7:1b:e8:c4:ac:b7:80:de:4f:3a:25:71:d8:25:88:c7:
9d:0d:b6:6a:62:c4:85:fa:77:7d:ad:fc:32:f4:9f:23:d0:82:
ce:2a:21:67:2b:1f:a4:ff:4c:a5:20:39:85:ad:17:61:f8:a7:
46:ca:b8:c3:53:ca:39:94:72:5c:15:81:99:05:e7:7c:8c:68:
4a:ff:6e:50:14:65:8d:4e:8a:53:e5:dc:40:2d:b8:70:f6:4a:
69:7f:71:b2:06:de:45:73:c4:ad:ba:45:12:97:47:24:0c:db:
77:9a:2a:fc:ef:d7:ca:85:b0:f7:d8:69:c4:07:d3:1b:7a:7b:
bf:59:26:c0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTuRetqj0EQO9q+cwMWE0PUdYfGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQx
NTQwRDUxQTAeFw0yMzA2MDkwNjQzNDNaFw0yNDA2MDcwNjQ4NDNaMDMxMTAvBgNV
BAMTKDE3MDMyMEQ3NzI2MzBFMUI4QUNFMzUzNDI5N0Q2MTYxRjZCMDEwRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKW0P1Q8cocUHygaYFKYkjadp9
Nii9/zLkBsO8xKWtXtNfV21AvjkgmYqHEr83ajHAlAlMqjakq/Y2JxJGhmGJLNay
oRX/TbwZAhLM5RqBzOzymhlAMsE5CYuKRpsq2oLaOnFbBX1FDLmWXSehQ0dKuBBv
mHiG983T0RZO6Q/AHCQKP+UFwmMPfbWfJfe/JlN9tOI5NprXKQodSDpqkWcsLtBu
pSgdFY7tLuM7hvQPbZgIJg7NPgzm+2SJLh/8Gcrga+NXm0ckkpWRKCRe8S3P/2K7
hVQhKoFrmP1sdwi2oGdv0/7TTn1MFr2fp8U5YkJDzv5pY7/YIZIvgDI/AhEvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFwMg13JjDhuKzjU0KX1hYfawEPswHwYDVR0j
BBgwFoAUNY9NQXoTF8siC73JgtfzXRVA1RowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMC8zNThGNEQ0MTdB
MTMxN0NCMjIwQkJEQzk4MkQ3RjM1RDE1NDBENTFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzU4RjRENDE3QTEzMTdDQjIyMEJCREM5ODJEN0YzNUQxNTQw
RDUxQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0MzhjMTk1LTQ5NGEtNDZhMi1i
OTNjLThlMTU2NjhmMDViMi8wLzMxMzAzMzJlMzIzMTMwMmUzNjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzAzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9JEMA0GCSqG
SIb3DQEBCwUAA4IBAQA+4xBGVkPJdlHqpA7puGt7wfk9LtvdObLpGYfooNEnbiL2
mDrk08X5Jc9yNm40zMymWLhrfzbyDD913J9ySwYlrKTE8b/9iTBRY2U4l+T/Z//L
Rjy/lZ6OuUTWXOFNXpDTK8qFbPmaVpFMWldvPBrIj94AGTL6GOJd5MjA+/Paprcb
6MSst4DeTzolcdgliMedDbZqYsSF+nd9rfwy9J8j0ILOKiFnKx+k/0ylIDmFrRdh
+KdGyrjDU8o5lHJcFYGZBed8jGhK/25QFGWNTopT5dxALbhw9kppf3GyBt5Fc8St
ukUSl0ckDNt3mir879fKhbD32GnEB9Mbenu/WSbA
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org