Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363038.roa
File: 3130332e3135382e32362e302f32342d3234203d3e20313431363038.roa (raw, json)
Hash identifier: MbNhRT2jUd2j2Bo0d3c0eS4JkzkuX15PFVoTL7ki/g4=
Subject key identifier: 1F:3D:61:2A:45:6F:9E:53:7B:D3:60:7A:33:B1:DC:E2:D4:09:0A:90
Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial: 7B68C6FB709BFED019C75D5DAF3BEE43E62668B7
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363038.roa
Signing time: Thu 08 May 2025 03:00:01 +0000
ROA not before: Thu 08 May 2025 02:55:01 +0000
ROA not after: Thu 07 May 2026 03:00:01 +0000
asID: 141608
IP address blocks: 103.158.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 18:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:68:c6:fb:70:9b:fe:d0:19:c7:5d:5d:af:3b:ee:43:e6:26:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Validity
Not Before: May 8 02:55:01 2025 GMT
Not After : May 7 03:00:01 2026 GMT
Subject: CN=1F3D612A456F9E537BD3607A33B1DCE2D4090A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:3f:8a:c4:4f:91:db:36:74:80:2e:4e:6a:
06:ce:83:3c:96:c5:d5:dd:e1:79:a4:60:77:6a:fe:
46:74:60:18:26:50:fc:0a:da:1c:56:c3:5e:0d:41:
01:46:b5:d8:4d:9f:59:4c:62:3d:e7:6a:42:28:47:
e5:cd:22:0d:e9:d0:31:4f:a9:5f:94:61:4b:f0:b3:
3a:b1:b8:d6:02:6a:5d:55:77:d8:38:23:47:f3:ec:
f6:47:11:cd:94:79:03:e4:45:58:4b:4c:cc:2d:e2:
1a:56:cb:5d:f1:0f:31:d0:12:4f:30:78:a3:78:9a:
36:c4:f4:74:ef:bb:36:77:8b:7e:0e:0e:a8:e3:dc:
2f:ed:ce:6b:6e:fd:1e:e8:aa:23:05:c3:bf:16:71:
0e:81:72:3b:46:69:41:1d:6d:9e:ae:bf:05:38:fb:
79:8c:1d:4c:25:8e:e7:30:76:8a:3d:b6:ec:69:45:
f1:e4:ef:80:08:e1:a5:1b:d0:85:9e:68:b9:47:f3:
8c:2f:a0:53:e5:96:84:9f:be:20:19:aa:da:55:5b:
f0:06:9f:c6:3d:77:71:82:f6:e3:32:7f:95:ca:15:
ac:98:4d:e8:e7:bb:03:34:1e:af:6a:41:dc:10:00:
6c:98:91:9c:b8:63:03:75:8e:d7:35:ff:c9:c0:0e:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:61:2A:45:6F:9E:53:7B:D3:60:7A:33:B1:DC:E2:D4:09:0A:90
X509v3 Authority Key Identifier:
keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/3130332e3135382e32362e302f32342d3234203d3e20313431363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.158.26.0/24
Signature Algorithm: sha256WithRSAEncryption
13:83:18:45:4b:3a:f2:cc:ff:a4:00:d3:b6:3a:8b:6e:bf:e4:
c3:26:20:bb:05:d9:24:d6:32:63:94:d2:2f:71:e1:14:2f:89:
1c:fb:38:3b:6a:03:39:a0:20:60:e9:e1:3f:e4:cf:f5:c9:3d:
3f:25:45:27:2f:62:34:22:68:0d:da:8b:76:b2:28:ca:6d:25:
a8:26:8b:49:19:26:8e:c5:3c:11:0b:42:c0:df:83:96:f4:3a:
4c:19:89:1d:2a:4e:dd:ae:f4:4a:0f:4c:86:4c:8f:9e:42:23:
e4:05:88:f7:05:d0:36:0d:ed:79:2f:9f:84:b0:64:86:7d:7e:
31:61:ec:4f:50:2a:31:55:cc:01:a2:8d:c8:67:9a:54:da:e6:
10:62:c8:e5:96:47:59:60:c8:8c:37:a6:81:d1:ae:e9:5a:39:
9a:3b:ed:bd:b7:0d:21:c7:68:01:7b:5d:b1:03:47:45:5e:e5:
fe:07:c8:27:59:01:04:b6:b1:8a:33:1f:36:c1:1e:b2:a7:17:
dd:24:27:a2:21:1b:02:eb:64:8b:64:1a:1e:9a:3a:2c:3c:6b:
73:af:29:c2:93:0b:f0:ce:34:f0:f2:37:10:a5:b6:3d:84:74:
d7:e3:63:a1:1c:79:1b:65:ed:0f:d0:15:d3:d6:fe:0f:87:de:
7b:fb:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:53:35 2025 by rpki-client