Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e20313333383030.roa
File: 3130332e39342e3233392e302f32342d3234203d3e20313333383030.roa (raw, json)
Hash identifier: 8OLvELgdJq/ivJryCYd2O6upxU0J7RYGWYzRV5beYPI=
Subject key identifier: B8:3C:82:2B:10:08:82:31:87:62:CC:D1:53:BE:1B:6F:7A:1F:51:53
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 19D347BAE8EEA72A78955823CF9C21D67888B891
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e20313333383030.roa
Signing time: Tue 18 Feb 2025 04:15:19 +0000
ROA not before: Tue 18 Feb 2025 04:10:19 +0000
ROA not after: Tue 17 Feb 2026 04:15:19 +0000
asID: 133800
IP address blocks: 103.94.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 00:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d3:47:ba:e8:ee:a7:2a:78:95:58:23:cf:9c:21:d6:78:88:b8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Feb 18 04:10:19 2025 GMT
Not After : Feb 17 04:15:19 2026 GMT
Subject: CN=B83C822B100882318762CCD153BE1B6F7A1F5153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:42:68:8e:aa:63:88:2e:b1:99:d8:16:ba:
e3:01:e6:bd:cc:78:f0:55:3e:80:9e:63:23:09:26:
e5:96:64:6a:0e:7e:62:c2:5d:31:dd:7a:7f:53:ca:
ee:cf:59:a1:47:47:40:5f:c6:22:34:61:29:76:e4:
11:f9:38:b1:e9:ba:c3:b6:db:eb:17:86:2b:06:b1:
dd:d2:95:0c:d2:8d:db:03:f9:5e:1d:17:8e:e2:76:
a1:4b:9f:54:36:91:29:79:3a:d7:5d:de:f1:8a:8d:
a0:e1:17:7f:b2:72:f0:f7:5e:6b:64:ad:b7:02:e4:
3f:6d:2f:c4:36:d8:82:74:02:46:b6:0c:33:4f:4a:
b9:bf:ce:23:80:22:96:48:b1:11:20:a0:5f:b1:93:
af:80:99:90:ee:cf:33:92:f0:33:f3:3a:a2:20:a2:
b4:48:af:b2:d3:cf:9f:88:11:0e:cd:c3:95:b4:8b:
4a:74:70:b4:80:b8:95:ed:10:69:e4:ed:c3:ed:55:
4c:57:2a:11:80:18:a7:ac:82:72:0d:ba:70:48:1a:
c0:57:f1:e4:37:c5:2c:04:7d:44:fb:08:38:0f:9f:
4b:44:07:2a:74:d7:44:93:a2:d3:e8:15:42:f6:81:
95:0f:02:a6:88:b0:c1:d6:18:d2:e2:54:0b:cc:39:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:82:2B:10:08:82:31:87:62:CC:D1:53:BE:1B:6F:7A:1F:51:53
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e20313333383030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.239.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9b:e0:8b:af:85:43:5d:dc:ef:bb:cb:8e:16:92:07:6e:73:
dd:6f:01:68:c9:c3:89:b2:29:e2:8e:d1:7d:bd:9f:59:ce:b4:
62:05:18:aa:f5:48:e1:07:0c:d0:d6:1f:c6:71:0a:72:68:29:
e5:fc:a2:1c:49:70:19:17:41:8a:3e:3c:64:c1:a2:14:15:b7:
e6:2b:69:d1:df:d7:47:fc:f5:2d:e8:dc:60:6e:91:86:0e:fc:
92:8e:99:a3:a1:a8:5a:0f:d9:43:a6:e5:12:be:93:9a:bb:e1:
60:85:83:72:07:5e:e8:5d:cc:a3:01:15:49:09:32:9b:6a:42:
f3:74:ef:f8:f2:06:bf:4c:3f:69:9f:bc:5d:08:37:59:6f:c6:
12:63:95:2b:26:e3:6c:c8:62:97:3b:46:5d:c4:5d:f8:1f:56:
d5:14:37:59:17:12:00:4a:90:12:eb:7e:87:54:95:51:27:c5:
fa:81:d3:eb:ec:aa:eb:de:86:c6:e7:79:4c:04:bc:e2:d3:5f:
12:04:ca:1e:ca:6a:79:d0:64:d8:20:1a:c5:14:7e:7e:71:c8:
6d:5d:0a:07:69:ee:94:3f:1c:d3:87:f9:6f:89:04:c1:da:18:
da:65:10:51:73:f5:e6:85:cc:14:a7:3e:a6:6b:47:12:bf:df:
7d:01:f0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:42:35 2025 by rpki-client