Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa
File: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (raw, json)
Hash identifier: gawgR9xVAbrVM408Bsnoy3hk9g0fS6IuJ6kUQ8L/how=
Subject key identifier: B0:B2:CF:E5:74:5B:D8:57:3F:D5:40:04:7B:EB:3D:82:48:9E:0E:20
Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
Certificate serial: 037549DAA3FBC10B35274E4E7AEEAA1516BA2978
Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa
Signing time: Tue 17 Jun 2025 17:28:45 +0000
ROA not before: Tue 17 Jun 2025 17:23:45 +0000
ROA not after: Tue 16 Jun 2026 17:28:45 +0000
asID: 140384
IP address blocks: 103.149.238.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 21 Jul 2025 19:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:75:49:da:a3:fb:c1:0b:35:27:4e:4e:7a:ee:aa:15:16:ba:29:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD
Validity
Not Before: Jun 17 17:23:45 2025 GMT
Not After : Jun 16 17:28:45 2026 GMT
Subject: CN=B0B2CFE5745BD8573FD540047BEB3D82489E0E20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9f:f0:d8:02:d0:ba:e0:d7:27:31:28:5c:86:
99:e2:50:64:1c:aa:8a:6a:6c:40:13:30:78:7f:58:
c1:37:a8:fd:ba:9a:9c:85:8c:4c:25:02:e7:31:5b:
f8:65:0e:fa:b7:19:80:23:01:c0:79:c8:08:d0:8e:
d4:bf:27:27:6b:c8:39:ca:4e:69:1a:47:76:8c:96:
35:27:51:72:3d:67:c0:6b:b0:8a:e2:b9:f0:f4:ce:
76:f1:76:0c:59:cf:05:f7:27:95:d0:9a:05:44:72:
b0:54:09:b5:2a:16:97:16:c0:6e:2e:82:cf:e0:cd:
ba:df:6c:8d:63:e5:c8:f3:e7:c1:fd:3d:cf:f9:f4:
d1:ac:7e:49:77:18:49:b8:38:7a:44:8d:cb:9b:e5:
95:8b:a6:a9:c7:10:dd:85:38:33:43:6c:05:59:3f:
ad:26:5b:db:f0:00:8a:6b:8a:a6:40:83:fe:55:40:
0f:a8:97:bd:2c:7e:02:71:1f:27:13:0a:2d:f5:53:
8c:a8:a9:bd:2d:50:03:d5:ed:c0:71:64:6b:ff:54:
bd:cc:e7:2f:3e:8f:25:85:97:1d:74:6d:3c:fa:b1:
1e:98:93:42:6d:1a:b1:cf:9e:2c:6c:34:9b:e9:60:
d9:d9:c9:ef:7d:0c:67:70:f5:c4:2b:bf:54:a8:0e:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B2:CF:E5:74:5B:D8:57:3F:D5:40:04:7B:EB:3D:82:48:9E:0E:20
X509v3 Authority Key Identifier:
keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.238.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:80:0f:00:51:12:fe:1a:05:a2:df:17:84:4e:cc:eb:f2:dc:
03:7f:a0:ea:93:4d:af:3b:a9:e3:27:82:5e:a5:60:89:ac:7a:
ca:4c:df:40:cd:8c:96:a2:6a:50:cd:fd:f7:cf:45:3b:03:5c:
de:45:f8:5e:cd:b3:ef:ea:5c:1a:37:c8:e2:bd:9f:99:95:ab:
53:8c:72:29:40:32:4c:ee:94:1c:4c:88:14:80:ca:eb:73:f7:
97:a2:fb:15:70:fb:49:be:f3:fd:2c:de:79:16:d3:4d:4a:ee:
21:84:17:52:d1:f0:c0:af:11:c8:d1:f7:76:5b:43:93:26:98:
8b:b4:38:38:d1:5f:8f:47:ce:ba:ca:93:b2:94:2e:f5:1f:56:
73:16:0f:9a:55:65:f7:fa:55:9e:fc:9f:10:5f:7d:c3:b7:0a:
de:c8:e3:24:0d:3d:47:3e:18:6d:fc:9e:69:4d:ad:c8:e6:ce:
0c:33:a2:1e:dd:e0:42:5c:b1:b9:71:00:6f:e6:0b:4e:64:65:
d8:bc:ab:c5:f8:fe:37:42:33:6e:e8:4a:a7:2f:88:bd:e7:05:
f3:f9:be:9d:42:76:5e:c5:30:d5:d6:4d:64:37:14:ff:5a:71:
e6:e1:76:33:a1:02:7c:a9:b0:bf:f5:0a:2f:12:24:a9:49:de:
74:d1:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:28:07 2025 by rpki-client