Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134382e302f32332d3233203d3e20313430343831.roa
File: 3131302e37362e3134382e302f32332d3233203d3e20313430343831.roa (raw, json)
Hash identifier: ufdD+Im6FBu68YlM1gLTKXTVv0sAFrKQmByo9H1vtkk=
Subject key identifier: 5C:4D:E2:09:52:2E:F5:E8:30:97:85:92:A3:E8:4D:36:B0:58:A3:FB
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 1F875F8AF2EF317AC0429330FEAF6619F74B5B9F
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134382e302f32332d3233203d3e20313430343831.roa
Signing time: Tue 22 Jul 2025 11:35:42 +0000
ROA not before: Tue 22 Jul 2025 11:30:42 +0000
ROA not after: Tue 21 Jul 2026 11:35:42 +0000
asID: 140481
IP address blocks: 110.76.148.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 23 Jul 2025 05:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:87:5f:8a:f2:ef:31:7a:c0:42:93:30:fe:af:66:19:f7:4b:5b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Jul 22 11:30:42 2025 GMT
Not After : Jul 21 11:35:42 2026 GMT
Subject: CN=5C4DE209522EF5E830978592A3E84D36B058A3FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:3b:b2:4b:bb:fc:f1:31:b7:57:3c:5d:0a:
9f:d3:69:4c:36:5f:a3:d0:b6:1c:ed:67:f8:10:1a:
a9:ca:ab:32:83:f3:a9:24:45:f8:3f:b9:e3:8e:ea:
58:e3:c1:6c:c9:1d:68:3e:a6:c9:d5:24:24:7d:48:
17:eb:df:55:af:34:09:24:c8:76:aa:8a:c7:ff:10:
1b:db:db:d9:55:2b:7e:86:3c:0b:23:09:68:ec:ad:
d9:87:7a:6a:92:54:f6:2f:03:75:7c:7c:5f:97:cd:
20:8f:14:33:5b:15:09:31:ae:e7:62:33:26:95:e1:
6d:9b:54:d9:fd:ea:5a:50:81:88:ad:31:38:57:4d:
a7:1a:63:6e:2d:43:1e:8d:14:f5:0c:2b:0c:22:07:
c3:39:97:04:9e:b9:65:e5:f1:68:10:1a:de:2f:b5:
2a:32:7f:44:4d:fd:5f:65:28:3a:24:86:99:aa:5e:
fe:a5:0e:dc:f7:1e:cc:26:db:06:e5:f6:e2:39:37:
5c:fc:2b:1b:45:cf:55:94:54:5e:b4:2a:56:0e:51:
0c:6c:b5:90:29:94:ce:08:f7:60:d1:9b:3e:d4:0a:
e8:45:69:76:b8:f4:bc:7b:a5:dc:c8:d5:67:75:a6:
ea:28:92:64:6b:f3:1e:c9:a2:d1:7b:02:19:19:57:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4D:E2:09:52:2E:F5:E8:30:97:85:92:A3:E8:4D:36:B0:58:A3:FB
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134382e302f32332d3233203d3e20313430343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.148.0/23
Signature Algorithm: sha256WithRSAEncryption
09:03:b6:c4:14:79:da:2e:f7:70:47:2f:d6:05:0b:91:48:bf:
2e:12:86:18:01:11:57:77:01:aa:84:85:dd:82:fc:b0:bc:87:
48:18:e4:03:1d:1c:0f:b5:e4:ce:bd:77:07:1a:e9:67:63:9d:
6c:4e:39:46:0e:2c:23:c7:5c:99:9f:60:9d:f8:45:59:54:75:
e1:c0:65:2e:c9:44:69:85:66:8e:3f:e3:33:cc:92:b2:14:2a:
6f:c5:fe:3b:05:4f:60:a1:ed:18:a1:6b:96:96:ae:b1:4f:e7:
25:52:8c:aa:d6:88:b1:78:f3:15:08:74:59:30:5c:b1:af:15:
48:e1:d3:1f:2b:14:e0:4f:a9:cf:79:d4:95:7f:9e:f6:24:a2:
64:95:c3:cf:6a:75:2f:c5:7a:61:dc:4b:32:d7:a0:bd:68:01:
3f:08:e0:db:3a:2c:73:96:2f:5b:a9:8a:4d:e4:00:6b:f2:b9:
d2:67:de:e6:45:c0:25:46:e7:41:f5:4d:ab:3a:d7:95:4b:93:
d6:0f:fe:c6:60:f1:c1:e5:f3:c4:39:23:a2:32:8d:cb:69:e9:
93:55:6c:0f:92:04:68:8d:0f:d0:d0:a1:83:28:20:02:b6:21:
4d:78:ca:ac:21:56:41:be:2d:d4:95:25:f8:a1:a9:50:04:73:
f3:04:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:18:25 2025 by rpki-client