Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
File: 3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (raw, json)
Hash identifier: nW3JNANF4FCq+oAvZH69DZ96CNyMvm7EWyA/t/tXxhk=
Subject key identifier: 10:AF:A5:A1:9E:B9:52:A2:1A:F5:4E:00:19:98:B8:8F:CF:AB:79:E8
Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Certificate serial: 08E34325A7B5012C32831699A2AC49BEF647FA15
Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
Signing time: Mon 07 Jul 2025 17:33:19 +0000
ROA not before: Mon 07 Jul 2025 17:28:19 +0000
ROA not after: Mon 06 Jul 2026 17:33:19 +0000
asID: 139393
IP address blocks: 103.143.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 07:40:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e3:43:25:a7:b5:01:2c:32:83:16:99:a2:ac:49:be:f6:47:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Validity
Not Before: Jul 7 17:28:19 2025 GMT
Not After : Jul 6 17:33:19 2026 GMT
Subject: CN=10AFA5A19EB952A21AF54E001998B88FCFAB79E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ba:52:d6:02:90:e6:1b:9e:f9:ae:29:8e:17:
f8:07:51:d3:9d:09:cc:92:71:31:e6:e1:c5:52:19:
8d:2b:16:6e:72:75:57:0c:59:4e:1c:23:2b:7a:e8:
d9:53:c3:2e:f3:85:25:01:e6:83:1b:5f:47:61:e5:
7c:2c:d9:d3:cf:7d:d4:af:bc:80:22:59:2f:c3:14:
94:53:d1:fa:cf:5d:01:6e:24:fa:cb:61:81:be:7e:
0c:1b:77:e1:95:f0:77:8f:de:5d:df:58:aa:f9:06:
39:88:b2:9d:06:f7:98:fd:a0:20:a0:25:3f:a2:e1:
5f:80:ba:c8:5e:1d:7a:82:29:a6:9e:0c:97:cd:6b:
86:20:c8:d6:cb:e3:40:de:cd:44:43:c4:ab:83:96:
f5:35:ad:00:2e:27:0e:81:c8:de:3d:85:13:40:cf:
75:26:c7:d9:07:a8:5b:e6:fb:59:d0:36:65:a7:77:
53:d2:3d:43:c8:82:e5:68:f6:6f:53:de:fc:4f:4b:
3d:0e:fb:62:d6:f6:1d:4c:3c:9f:fa:e0:b3:6a:ce:
88:75:30:58:27:9a:7d:08:c0:b2:59:5a:68:d6:53:
71:3f:1a:01:7e:39:a4:ee:92:d8:76:bd:7b:d4:8f:
e3:fd:96:16:08:59:ee:79:2b:64:67:1e:4f:fa:63:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AF:A5:A1:9E:B9:52:A2:1A:F5:4E:00:19:98:B8:8F:CF:AB:79:E8
X509v3 Authority Key Identifier:
keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:32:ef:8a:c0:1e:69:3e:9c:a7:48:24:d7:4d:d9:4c:ec:0a:
08:cc:a6:5f:e4:9d:c5:41:8b:1d:d0:44:86:6f:3f:9f:ce:ec:
f3:22:36:f8:0f:bb:b0:8b:db:2f:47:50:38:17:a5:5b:0d:93:
79:02:3f:88:38:f7:1b:0d:8b:ef:70:62:4c:9e:66:06:4d:b8:
74:a0:a5:15:69:ba:a0:4b:0b:66:44:18:b1:23:af:30:93:7d:
b6:49:60:78:30:c6:87:a8:f2:72:40:c4:46:f3:cb:ee:8c:ed:
31:72:10:7d:4b:71:6f:dd:b6:4a:14:60:58:5d:10:8c:3b:e1:
14:a8:61:25:5b:b3:ce:24:c5:79:f8:03:4b:00:26:e1:2e:b7:
cb:fa:29:ec:a7:6e:13:af:aa:be:01:ed:de:2a:b3:25:2c:e7:
87:1a:9f:39:8a:21:02:ed:a8:8d:61:18:e9:b8:f6:1e:79:47:
cd:49:b4:81:fb:bb:aa:b3:97:3b:8d:d9:57:ec:c2:67:3e:a6:
2d:94:d6:a4:5e:c2:66:da:83:63:b5:67:95:a5:0a:e7:c5:8f:
9c:e0:7e:a0:d9:a5:47:ae:08:dd:1c:40:61:2b:ae:dd:81:cd:
44:f3:8f:f3:04:db:e1:08:3d:3c:5d:6e:e8:d3:47:ed:98:8f:
7f:2a:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:14:09 2025 by rpki-client