Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32342d3234203d3e203138333933.roa
File: 3130332e39342e3233382e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier: aGknBXKounTfIsfHYzGFX2ryMMvmOOlJfHr9mLb3pxA=
Subject key identifier: C0:79:49:9E:5A:30:B0:B4:D9:18:8C:2E:98:EC:31:10:D6:25:09:1C
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 448CFCF406E357CEF54B103F5425921C4A34B6F5
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32342d3234203d3e203138333933.roa
Signing time: Mon 17 Feb 2025 03:25:04 +0000
ROA not before: Mon 17 Feb 2025 03:20:04 +0000
ROA not after: Mon 16 Feb 2026 03:25:04 +0000
asID: 18393
IP address blocks: 103.94.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8c:fc:f4:06:e3:57:ce:f5:4b:10:3f:54:25:92:1c:4a:34:b6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Feb 17 03:20:04 2025 GMT
Not After : Feb 16 03:25:04 2026 GMT
Subject: CN=C079499E5A30B0B4D9188C2E98EC3110D625091C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:30:ea:b5:a2:b9:d0:7e:04:7a:03:dc:fa:
59:75:e9:27:66:21:ee:d5:39:4b:ff:e2:4d:73:82:
a8:5c:8c:68:de:1e:e9:6b:55:22:27:f9:b7:64:e4:
8e:ba:38:6a:1d:8a:71:b9:3f:2a:2d:f6:d4:ba:e1:
ef:a6:7c:df:2e:53:64:2b:45:73:15:3d:ab:2f:1c:
46:d1:9f:8a:e8:8e:fc:6c:5b:24:a2:82:f1:0f:89:
e7:35:c7:73:72:6e:e2:0a:89:0f:f5:0c:06:98:c4:
26:94:b6:f7:83:60:5f:e5:de:c1:6a:9c:f1:dc:00:
3c:d4:c0:9d:83:5d:89:c8:39:5b:78:3e:34:9e:c8:
2b:8b:1d:66:54:57:59:59:41:2d:13:61:ea:98:09:
5c:d3:db:27:5c:01:df:85:f4:ac:5a:b9:34:97:f3:
3e:21:a9:54:a4:0a:01:1b:24:91:79:37:e8:0f:a8:
3f:07:43:b2:57:34:3f:48:7b:1d:7a:94:a6:15:dc:
92:24:d6:d4:63:c2:d8:04:1d:e6:cf:c3:49:8c:c8:
a4:cf:fc:39:cb:32:17:05:06:19:7f:67:2e:28:59:
c7:7c:0f:bc:25:73:d4:a7:2c:9c:8c:8e:03:d1:f1:
13:49:2f:0d:10:3d:a8:8f:f1:26:5b:fb:b8:c7:4b:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:79:49:9E:5A:30:B0:B4:D9:18:8C:2E:98:EC:31:10:D6:25:09:1C
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32342d3234203d3e203138333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9e:1e:72:31:d2:c4:99:68:37:36:1a:58:60:bb:ef:fd:da:
1e:1a:a5:6c:10:ec:93:ff:dd:37:cb:76:5c:ce:b3:f7:96:3e:
b7:59:33:89:fe:85:26:06:a3:64:69:5b:3f:4e:de:d0:5d:80:
96:51:60:17:46:1b:17:9e:29:0b:7f:c3:e8:ef:98:e8:98:de:
5b:f1:af:08:d8:68:02:31:f0:b6:28:78:90:89:5b:9f:94:a9:
34:38:c6:fd:31:f2:d5:62:31:a8:bb:25:b1:23:ec:20:39:75:
6a:dc:39:c2:4e:3a:57:15:29:7f:30:3e:36:83:6c:e0:7f:72:
03:2d:c9:92:96:28:79:b7:df:ee:05:16:07:5f:f0:c6:6f:73:
68:00:46:6a:2b:32:87:f3:5e:3d:ce:e6:48:5f:6b:08:9f:a7:
9d:2c:e9:dc:e5:19:0a:85:5f:db:26:0d:8c:24:91:66:75:ee:
13:95:20:d1:6e:db:6f:bb:dd:20:de:8d:0c:6c:6d:fc:5c:15:
ac:01:b6:28:61:0f:d3:94:68:c8:d0:31:c5:d5:e4:8f:19:cd:
d2:0a:e6:6b:54:86:a0:30:be:5c:b4:79:c9:36:10:ef:28:ba:
75:52:c8:27:1f:da:ed:df:a2:b0:36:34:68:20:22:8d:9c:dc:
d4:a3:26:b1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURIz89AbjV871SxA/VCWSHEo0tvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3
RTc5RTY0MjAeFw0yNTAyMTcwMzIwMDRaFw0yNjAyMTYwMzI1MDRaMDMxMTAvBgNV
BAMTKEMwNzk0OTlFNUEzMEIwQjREOTE4OEMyRTk4RUMzMTEwRDYyNTA5MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCDDqtaK50H4EegPc+ll16Sdm
Ie7VOUv/4k1zgqhcjGjeHulrVSIn+bdk5I66OGodinG5Pyot9tS64e+mfN8uU2Qr
RXMVPasvHEbRn4rojvxsWySigvEPiec1x3NybuIKiQ/1DAaYxCaUtveDYF/l3sFq
nPHcADzUwJ2DXYnIOVt4PjSeyCuLHWZUV1lZQS0TYeqYCVzT2ydcAd+F9KxauTSX
8z4hqVSkCgEbJJF5N+gPqD8HQ7JXND9Iex16lKYV3JIk1tRjwtgEHebPw0mMyKTP
/DnLMhcFBhl/Zy4oWcd8D7wlc9SnLJyMjgPR8RNJLw0QPaiP8SZb+7jHS93NAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUwHlJnlowsLTZGIwumOwxENYlCRwwHwYDVR0j
BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw
RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5
RTY0Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyYWY4MzUyLWNkNjUtNGRiNy1i
MGNiLTA0OGI0NWU3YTRiZi8wLzMxMzAzMzJlMzkzNDJlMzIzMzM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGde7jANBgkqhkiG
9w0BAQsFAAOCAQEAPJ4ecjHSxJloNzYaWGC77/3aHhqlbBDsk//dN8t2XM6z95Y+
t1kzif6FJgajZGlbP07e0F2AllFgF0YbF54pC3/D6O+Y6JjeW/GvCNhoAjHwtih4
kIlbn5SpNDjG/THy1WIxqLslsSPsIDl1atw5wk46VxUpfzA+NoNs4H9yAy3JkpYo
ebff7gUWB1/wxm9zaABGaisyh/NePc7mSF9rCJ+nnSzp3OUZCoVf2yYNjCSRZnXu
E5Ug0W7bb7vdIN6NDGxt/FwVrAG2KGEP05RoyNAxxdXkjxnN0grma1SGoDC+XLR5
yTYQ7yi6dVLIJx/a7d+isDY0aCAijZzc1KMmsQ==
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:37 2025 by rpki-client