Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
File: 3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa (raw, json)
Hash identifier: dc/JbMbDw67KzLs6jS8AcuMUyvOVm39Xbb1sGTpGz/c=
Subject key identifier: A6:6E:F6:1B:85:81:28:A1:8E:1A:B6:65:60:28:77:72:08:DA:3C:97
Certificate issuer: /CN=4F679A207D2588B709C82CDAB000736182F881E1
Certificate serial: 03AEA4E68D25971B543D0B4146A2EE06A8A3EE6D
Authority key identifier: 4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
Signing time: Thu 08 May 2025 05:38:01 +0000
ROA not before: Thu 08 May 2025 05:33:01 +0000
ROA not after: Thu 07 May 2026 05:38:01 +0000
asID: 149971
IP address blocks: 103.194.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Jul 2025 04:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ae:a4:e6:8d:25:97:1b:54:3d:0b:41:46:a2:ee:06:a8:a3:ee:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F679A207D2588B709C82CDAB000736182F881E1
Validity
Not Before: May 8 05:33:01 2025 GMT
Not After : May 7 05:38:01 2026 GMT
Subject: CN=A66EF61B858128A18E1AB6656028777208DA3C97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:88:15:0a:01:50:72:b1:12:35:cc:63:06:
47:21:08:42:a6:93:11:63:32:6a:f2:1f:3d:fa:d0:
64:a8:7b:5d:57:e9:29:af:59:b6:15:f0:6e:24:da:
aa:e2:29:2f:7f:49:47:38:3f:7a:e8:ea:44:04:10:
76:61:d4:03:5e:ec:6e:98:64:71:d9:bd:eb:31:1e:
71:84:56:aa:45:d9:a0:d0:c2:18:ff:27:c7:d1:43:
92:75:d8:3b:af:84:c6:84:d1:6b:e1:76:d8:67:41:
ad:9f:4c:f8:4c:39:d7:ed:b1:fc:be:38:4b:36:50:
53:ed:e6:c9:6c:5f:26:a3:f4:a3:35:e8:bf:09:d1:
06:62:96:23:23:5f:72:73:1d:a1:47:dc:d6:90:6d:
62:7e:c0:da:73:e3:ef:b7:d7:8c:23:fc:ed:d7:31:
bb:b6:95:e4:bd:4f:16:e6:c4:55:2e:64:ba:88:16:
c1:80:f4:eb:eb:77:99:29:6d:ab:9c:d0:c5:93:a6:
76:f9:34:3b:ce:26:79:9f:2f:3a:2d:41:e4:3c:b2:
f2:40:52:65:85:90:47:75:9e:7b:04:11:8d:8b:bc:
0c:0f:7f:04:ee:da:b9:97:35:c3:1e:ab:89:d5:f0:
10:8f:64:eb:3a:9d:56:78:04:5a:5e:9a:a4:3a:8c:
bd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6E:F6:1B:85:81:28:A1:8E:1A:B6:65:60:28:77:72:08:DA:3C:97
X509v3 Authority Key Identifier:
keyid:4F:67:9A:20:7D:25:88:B7:09:C8:2C:DA:B0:00:73:61:82:F8:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/4F679A207D2588B709C82CDAB000736182F881E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F679A207D2588B709C82CDAB000736182F881E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8993a93-5889-4e02-9e95-769cb89e0035/0/3130332e3139342e34362e302f32342d3234203d3e20313439393731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.194.46.0/24
Signature Algorithm: sha256WithRSAEncryption
59:a6:83:4a:7f:a6:6c:62:c2:13:a7:49:76:ea:c6:86:d5:76:
eb:a0:80:50:3c:b9:af:de:ad:68:59:67:eb:f2:65:a0:57:50:
17:35:d6:a4:b9:ef:6f:1b:f7:a7:29:fc:be:c0:5c:3f:a4:d7:
3b:72:23:c4:9b:a3:ff:bf:b5:d5:23:b8:41:e7:b5:d3:34:25:
1e:e7:01:9a:5c:2e:19:9f:b5:33:ef:01:f8:b3:c9:a6:16:c5:
bb:4b:dc:f3:72:40:a1:ea:3b:cc:e9:7c:c3:f7:0d:41:05:6f:
29:38:ac:54:36:a8:c3:97:06:88:2a:29:ab:6d:55:b8:90:37:
3d:38:5a:9c:62:f2:53:91:da:63:6c:b0:2a:76:29:5c:19:58:
58:52:28:04:b5:9a:3b:88:6e:93:16:3d:83:3f:72:36:69:38:
ff:9a:db:c9:ba:e2:3a:3a:26:ed:e4:47:07:f7:32:3a:9b:e1:
8d:b3:89:a9:83:c0:41:19:9b:81:7c:13:f9:93:e1:08:94:08:
4c:ce:4e:34:2c:ad:01:91:92:9e:38:ff:85:80:f0:53:6a:6a:
d7:20:c3:1b:3d:5e:f3:4d:4c:ea:0a:8d:68:3d:2a:e1:5e:d1:
16:1d:8e:b7:46:bd:88:be:ee:55:13:79:e5:6c:c9:9c:dd:96:
14:5f:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:12:20 2025 by rpki-client