Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32382e302f32332d3234203d3e20313530343837.roa
File: 3130332e35352e32382e302f32332d3234203d3e20313530343837.roa (raw, json)
Hash identifier: DGigKoxqwkkadVjQa2bt3pKvPEwZEclhUTPnKFDKapk=
Subject key identifier: 2C:E0:AA:19:FA:E3:5B:E4:86:A2:CE:C9:C3:DA:B0:8D:63:16:F2:55
Certificate issuer: /CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Certificate serial: 7BEDF540F999FAB840A3E85897BDB4EED82341BF
Authority key identifier: FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32382e302f32332d3234203d3e20313530343837.roa
Signing time: Sun 01 Dec 2024 05:00:02 +0000
ROA not before: Sun 01 Dec 2024 04:55:02 +0000
ROA not after: Sun 30 Nov 2025 05:00:02 +0000
asID: 150487
IP address blocks: 103.55.28.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Jan 2025 23:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ed:f5:40:f9:99:fa:b8:40:a3:e8:58:97:bd:b4:ee:d8:23:41:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA86E23853549D2EF1D9F9C9222147A550E36A38
Validity
Not Before: Dec 1 04:55:02 2024 GMT
Not After : Nov 30 05:00:02 2025 GMT
Subject: CN=2CE0AA19FAE35BE486A2CEC9C3DAB08D6316F255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:11:2d:9e:fc:3c:ae:59:85:96:06:a2:24:
4a:52:3f:81:29:44:a6:dd:0d:e7:68:1e:d4:22:6e:
21:19:90:f3:c2:4f:85:81:20:4d:d6:c8:97:13:f0:
2b:66:f1:a6:1a:fb:a8:a9:78:0c:f8:a2:ae:9b:5e:
32:bc:f9:5c:fa:01:09:df:22:27:67:96:4e:c8:3c:
8a:0d:0d:28:06:8f:ca:14:e1:b0:14:46:54:f8:31:
08:9d:ba:8c:37:39:22:71:19:ba:ca:86:37:1d:4d:
7f:4c:90:79:41:b6:dd:ed:07:6a:dd:d4:84:56:bb:
30:78:1f:19:2d:b2:d5:f9:ce:21:f4:01:94:08:26:
3e:6f:93:c1:90:f8:ec:d0:71:ad:27:ce:c3:99:0b:
6a:eb:1c:5e:79:bf:fb:87:72:ca:b4:0d:ac:59:f9:
e0:76:68:41:34:4b:56:32:8b:0e:9a:d2:3c:f2:22:
4c:79:c0:db:be:67:6c:66:e3:77:2d:c4:94:c9:2d:
56:96:33:11:5a:01:35:98:39:22:82:a6:7a:78:ae:
c0:b0:d4:72:97:ad:ea:16:b9:bd:23:f3:5c:6e:7e:
d1:36:86:5f:e8:bb:55:76:9f:cd:2a:24:41:62:a5:
f2:ef:0d:4b:29:65:79:35:3b:c1:6f:9f:81:c8:17:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E0:AA:19:FA:E3:5B:E4:86:A2:CE:C9:C3:DA:B0:8D:63:16:F2:55
X509v3 Authority Key Identifier:
keyid:FA:86:E2:38:53:54:9D:2E:F1:D9:F9:C9:22:21:47:A5:50:E3:6A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/FA86E23853549D2EF1D9F9C9222147A550E36A38.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA86E23853549D2EF1D9F9C9222147A550E36A38.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e504793c-c209-469a-8e3c-eb3f5a83863f/0/3130332e35352e32382e302f32332d3234203d3e20313530343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.28.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:0c:5c:97:73:8e:1a:25:e2:cc:ff:f1:25:fc:0d:ec:28:c7:
64:9d:03:3a:b5:9f:ce:e8:b6:f8:b5:38:cc:74:53:9c:66:64:
40:60:e7:be:89:77:3a:a4:4a:62:9c:65:7e:35:1f:e5:15:be:
87:a0:f9:75:32:0e:d4:b7:19:f3:6a:09:10:3c:16:5e:10:2f:
0c:37:b4:c3:6e:5c:9c:4c:54:84:94:42:3b:48:10:4c:c1:72:
77:f6:5d:17:1d:5f:73:dd:56:3e:8c:16:20:f5:4e:b8:cb:a2:
f9:cb:24:13:cf:1b:e6:d8:60:66:00:7b:b5:ee:7a:45:f8:56:
38:22:ee:66:ec:ac:fc:30:b0:81:1d:5f:d7:09:a9:88:b0:1c:
b8:13:ec:23:14:5b:b8:2f:58:97:8b:5e:22:5c:83:0c:05:5c:
51:44:a7:f6:73:f4:c9:b6:a9:fe:50:a0:ad:92:2b:bf:4d:fa:
0b:e9:bb:f6:b6:96:24:30:e1:c1:bf:1b:63:bb:33:2e:c9:d6:
bb:de:7b:9e:24:f9:6e:94:d1:e1:95:60:3a:a3:c5:30:16:1e:
8f:9d:e7:76:78:54:92:27:2f:eb:c2:ec:af:0a:48:49:58:9d:
0c:8f:6e:37:6f:d5:03:49:73:c9:96:9c:e4:b8:82:06:50:cb:
44:d4:f5:af
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUe+31QPmZ+rhAo+hYl7207tgjQb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1
MEUzNkEzODAeFw0yNDEyMDEwNDU1MDJaFw0yNTExMzAwNTAwMDJaMDMxMTAvBgNV
BAMTKDJDRTBBQTE5RkFFMzVCRTQ4NkEyQ0VDOUMzREFCMDhENjMxNkYyNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu/hEtnvw8rlmFlgaiJEpSP4Ep
RKbdDedoHtQibiEZkPPCT4WBIE3WyJcT8Ctm8aYa+6ipeAz4oq6bXjK8+Vz6AQnf
Iidnlk7IPIoNDSgGj8oU4bAURlT4MQiduow3OSJxGbrKhjcdTX9MkHlBtt3tB2rd
1IRWuzB4HxktstX5ziH0AZQIJj5vk8GQ+OzQca0nzsOZC2rrHF55v/uHcsq0DaxZ
+eB2aEE0S1Yyiw6a0jzyIkx5wNu+Z2xm43ctxJTJLVaWMxFaATWYOSKCpnp4rsCw
1HKXreoWub0j81xuftE2hl/ou1V2n80qJEFipfLvDUspZXk1O8Fvn4HIF8tvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQULOCqGfrjW+SGos7Jw9qwjWMW8lUwHwYDVR0j
BBgwFoAU+obiOFNUnS7x2fnJIiFHpVDjajgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTA0NzkzYy1jMjA5LTQ2OWEtOGUzYy1lYjNmNWE4Mzg2M2YvMC9GQTg2RTIzODUz
NTQ5RDJFRjFEOUY5QzkyMjIxNDdBNTUwRTM2QTM4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkE4NkUyMzg1MzU0OUQyRUYxRDlGOUM5MjIyMTQ3QTU1MEUz
NkEzOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MDQ3OTNjLWMyMDktNDY5YS04
ZTNjLWViM2Y1YTgzODYzZi8wLzMxMzAzMzJlMzUzNTJlMzIzODJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc3HDANBgkqhkiG
9w0BAQsFAAOCAQEAswxcl3OOGiXizP/xJfwN7CjHZJ0DOrWfzui2+LU4zHRTnGZk
QGDnvol3OqRKYpxlfjUf5RW+h6D5dTIO1LcZ82oJEDwWXhAvDDe0w25cnExUhJRC
O0gQTMFyd/ZdFx1fc91WPowWIPVOuMui+cskE88b5thgZgB7te56RfhWOCLuZuys
/DCwgR1f1wmpiLAcuBPsIxRbuC9Yl4teIlyDDAVcUUSn9nP0ybap/lCgrZIrv036
C+m79raWJDDhwb8bY7szLsnWu957niT5bpTR4ZVgOqPFMBYej53ndnhUkicv68Ls
rwpISVidDI9uN2/VA0lzyZac5LiCBlDLRNT1rw==
-----END CERTIFICATE-----
Generated at Fri Jan 10 01:49:30 2025 by rpki-client on console.sobornost.net