Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134382e302f32342d3234203d3e20313430343831.roa
File: 3131302e37362e3134382e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier: /1IUIc0pZ+PpGidju9BO3whsa1ZpQcKadByu9w9VgHQ=
Subject key identifier: 19:A5:19:FF:A3:0B:B0:1C:BE:55:6F:71:F2:74:B8:C9:2F:34:2B:C7
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 57697DD384FAFBDB6FFF81808B3B8A778A0D8736
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134382e302f32342d3234203d3e20313430343831.roa
Signing time: Tue 22 Jul 2025 11:35:56 +0000
ROA not before: Tue 22 Jul 2025 11:30:56 +0000
ROA not after: Tue 21 Jul 2026 11:35:56 +0000
asID: 140481
IP address blocks: 110.76.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Jul 2025 05:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:69:7d:d3:84:fa:fb:db:6f:ff:81:80:8b:3b:8a:77:8a:0d:87:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Jul 22 11:30:56 2025 GMT
Not After : Jul 21 11:35:56 2026 GMT
Subject: CN=19A519FFA30BB01CBE556F71F274B8C92F342BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:78:f5:0a:80:57:38:b7:ba:99:bb:22:fd:
6e:14:53:0e:0c:2a:ba:e3:ef:10:c0:b0:cd:d3:d7:
3c:81:07:d9:e0:c4:8a:c0:19:15:ff:a6:6e:c5:9d:
96:ae:74:91:fc:82:ad:fb:59:c9:77:8a:f6:44:b9:
5e:20:24:b8:98:69:09:a5:54:15:54:8c:94:3b:28:
9e:a1:1b:ee:e6:fa:97:61:b4:15:ae:ee:d9:86:4b:
a5:6f:28:5a:84:a8:ee:e2:c6:de:7f:35:bf:c0:2e:
ed:d6:29:46:76:d2:42:c6:f0:d6:fc:c9:14:1e:de:
97:6d:61:d3:d3:39:48:35:24:1f:b6:81:b2:bd:b7:
23:8d:73:2f:0c:ff:23:ed:15:51:8b:03:bd:b0:08:
c3:a7:78:b7:1e:18:5b:c6:02:0a:07:2b:19:33:80:
5b:9b:91:38:85:0d:17:0f:76:91:5d:75:63:8c:c0:
ec:bd:a2:c2:6d:6d:75:52:1c:24:05:b8:d1:59:ec:
83:81:d7:95:3e:17:70:ee:0f:c6:af:04:00:17:f2:
71:3c:83:b0:1e:f4:cc:22:51:7b:f8:b9:ef:15:c6:
2a:0f:d8:95:54:88:c0:a1:18:a9:8b:f0:81:f7:09:
a2:ec:06:15:dc:91:5a:b2:9a:b8:32:2f:2b:fa:50:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:19:FF:A3:0B:B0:1C:BE:55:6F:71:F2:74:B8:C9:2F:34:2B:C7
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134382e302f32342d3234203d3e20313430343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.148.0/24
Signature Algorithm: sha256WithRSAEncryption
89:45:3a:d8:de:8a:60:86:15:fa:b3:f4:43:c0:31:20:b5:05:
0f:4f:5d:35:6c:ed:1d:c3:d3:cd:17:f2:e4:5f:e8:ab:d8:69:
e5:67:25:1f:18:e1:9f:be:7b:06:6c:1f:9d:c8:61:b3:de:de:
92:53:91:c2:55:3f:f1:a9:5b:66:94:42:61:22:d7:70:b4:53:
f8:1b:f3:f0:2a:9b:8f:4a:12:86:46:7f:d5:27:79:7c:7e:ca:
8a:8b:92:ca:4e:d0:be:b4:db:5c:ea:78:4a:a6:b7:55:0f:16:
b7:9a:e5:70:b8:63:63:44:e2:f2:79:0a:24:57:61:6f:41:78:
d8:3e:9a:cf:6c:fe:1a:fe:1d:ea:a5:3f:2e:7e:71:47:bb:3e:
4b:bc:af:49:60:4d:ad:0c:f7:40:51:6c:6b:ff:6d:b9:bd:64:
8d:5a:f8:18:e3:52:89:e0:58:27:c7:5f:a5:5f:7d:8c:6b:df:
e7:eb:d9:78:19:1a:d8:73:58:c5:2e:c0:cf:34:6c:c7:58:ed:
b8:05:9b:2a:5e:34:f3:38:4c:af:80:a5:cd:8b:94:5d:05:b6:
04:22:64:87:f5:a8:bd:2e:54:d4:da:4f:6f:e8:ae:4d:cb:1b:
46:40:b2:b1:da:93:f8:e5:0d:47:5c:e1:58:31:19:b1:60:c9:
86:8f:dc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:19:16 2025 by rpki-client