Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134392e302f32342d3234203d3e20313430343831.roa
File: 3131302e37362e3134392e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier: 9cg6xhztei2M6HnlLX5F0VATjbPs39UtFTwUizMELtc=
Subject key identifier: B9:14:B4:90:71:DC:B7:3B:90:EC:63:E6:AB:2D:E3:9F:23:2E:44:93
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 7398CE51F27DB9A42A1FA0AA1A8E3C51F99B46CB
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134392e302f32342d3234203d3e20313430343831.roa
Signing time: Tue 22 Jul 2025 11:36:08 +0000
ROA not before: Tue 22 Jul 2025 11:31:08 +0000
ROA not after: Tue 21 Jul 2026 11:36:08 +0000
asID: 140481
IP address blocks: 110.76.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Jul 2025 05:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:98:ce:51:f2:7d:b9:a4:2a:1f:a0:aa:1a:8e:3c:51:f9:9b:46:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Jul 22 11:31:08 2025 GMT
Not After : Jul 21 11:36:08 2026 GMT
Subject: CN=B914B49071DCB73B90EC63E6AB2DE39F232E4493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:f7:bd:4e:cd:9e:56:9e:84:b9:7c:6d:f8:
c3:94:aa:40:dc:7e:c3:08:46:e3:f5:9d:57:64:dc:
b9:4e:ab:fb:58:28:24:dd:d2:a3:c3:a4:b9:96:fb:
7b:e8:25:ed:f9:89:96:cf:14:a8:a2:a4:8f:9e:62:
39:4f:a8:ad:9c:df:bf:24:7f:7a:fd:28:a1:b3:2e:
cb:91:e7:10:75:09:ba:f9:2c:7f:83:87:8f:8c:36:
69:2e:cc:59:fc:64:e6:c0:ae:8f:00:ad:10:55:9d:
42:21:e7:3e:38:b8:c3:50:79:75:7a:de:72:9b:e0:
dd:90:4e:8b:3e:ed:5a:8a:69:4d:ff:c9:2d:e4:05:
7b:11:45:96:59:bf:dd:77:28:1d:3b:e2:7e:d7:f7:
eb:9f:01:af:ff:98:28:05:a5:6d:50:88:da:22:49:
4b:f0:5c:34:0d:01:4e:39:7f:6d:94:58:da:5e:3d:
b1:20:00:5b:bb:44:64:a8:03:a0:0a:d9:37:cb:3b:
13:a0:90:b8:99:4b:e1:7b:05:b2:36:cf:c8:f9:d4:
f1:53:52:40:e4:d4:7e:cd:90:d9:ca:4b:7c:e2:00:
68:0c:62:0f:c8:9a:0e:bf:d0:8d:8b:33:97:d5:f2:
5a:ff:7e:47:e5:5a:45:40:a6:62:4d:7d:51:ae:dc:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:14:B4:90:71:DC:B7:3B:90:EC:63:E6:AB:2D:E3:9F:23:2E:44:93
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134392e302f32342d3234203d3e20313430343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a1:4a:4c:59:fb:82:4f:d8:4a:c4:b4:99:13:35:74:a6:19:
de:02:7d:23:1b:3b:3b:45:10:a4:be:57:6a:89:38:a0:8f:b0:
4e:58:06:24:77:e6:0c:66:c8:32:35:20:8d:ef:3b:6e:80:66:
33:f7:00:d5:b9:aa:f2:76:01:a4:45:39:d4:cb:01:54:6b:6e:
f8:7e:63:13:e8:2d:ec:81:06:71:34:f2:0a:af:ff:26:31:e4:
05:bc:0b:cd:80:fe:25:17:16:06:ea:21:12:80:9d:93:d0:92:
1e:eb:9c:15:86:6b:3a:d7:cf:3e:b3:b3:5f:82:72:0f:f2:56:
12:d5:de:f4:e6:b2:ec:a8:d7:4e:fa:5e:1b:c2:8f:ed:e5:06:
ee:0e:b2:3e:da:f7:91:08:0c:82:54:00:1a:d4:12:88:d6:ed:
e1:ad:f2:bc:21:fd:19:c2:ff:df:42:65:5d:c2:d2:71:50:39:
28:13:97:0b:6d:db:a4:80:78:51:44:ab:c1:bd:ea:f9:df:c0:
bd:16:55:82:0a:b1:34:09:1a:06:68:9d:6f:0c:80:66:cd:45:
cb:50:a3:77:20:69:71:4e:bc:d3:e2:85:41:3b:ab:6d:3e:e2:
9c:18:72:0d:ac:6a:88:55:e3:b6:60:61:e6:7b:30:98:0a:86:
05:98:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:18:46 2025 by rpki-client