Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e203138333933.roa
File: 3130332e39342e3233392e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier: yHN/GvrfbLo0VCaVCry5XPx/5PHyIuK8RO+vZhQqY1U=
Subject key identifier: 8B:E3:CD:E0:45:BC:B4:66:09:A9:F7:24:32:E9:A0:C6:C4:CB:0F:E3
Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial: 6C272E9FAF041AAA5705E4773E468863D815E5E2
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e203138333933.roa
Signing time: Mon 17 Feb 2025 03:25:20 +0000
ROA not before: Mon 17 Feb 2025 03:20:20 +0000
ROA not after: Mon 16 Feb 2026 03:25:20 +0000
asID: 18393
IP address blocks: 103.94.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Feb 2025 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:27:2e:9f:af:04:1a:aa:57:05:e4:77:3e:46:88:63:d8:15:e5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Validity
Not Before: Feb 17 03:20:20 2025 GMT
Not After : Feb 16 03:25:20 2026 GMT
Subject: CN=8BE3CDE045BCB46609A9F72432E9A0C6C4CB0FE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:52:4b:d2:bd:8c:fb:3d:b1:34:f1:5f:ad:
15:f3:79:77:65:35:d4:ba:1a:ab:84:c8:e7:c4:b9:
ec:a5:f8:19:4f:1b:2b:83:72:83:ca:fd:d6:1c:6d:
ac:cb:84:d6:9b:df:d3:c9:a6:22:80:3b:9c:26:94:
83:44:20:f4:d0:3a:87:bf:17:18:b2:32:ff:8d:fd:
04:26:2c:ab:8a:8b:10:3f:c4:80:75:4d:e2:14:24:
34:a5:a6:8b:24:a6:e2:af:01:3a:a1:d7:4b:db:84:
22:c5:f2:17:4d:2a:f3:d8:64:e6:60:2a:c7:d2:b3:
90:7f:d0:d2:6c:b4:43:18:22:f8:48:57:15:5a:9e:
1d:a0:fc:64:30:c9:e5:b0:be:4d:db:3c:1b:0a:7a:
bd:fa:0e:52:ec:6c:f8:2e:60:3d:15:bd:10:60:12:
48:64:4e:d0:d7:77:8d:2a:f4:1e:80:04:1f:8a:75:
e5:0c:a6:72:69:59:57:0c:4d:8c:a3:b5:50:aa:ac:
98:c4:3d:d3:e1:30:31:5e:7a:60:c9:51:0a:af:3f:
b4:ef:49:75:fc:5a:5e:f1:87:8a:d2:67:5e:df:64:
32:38:af:b3:14:19:83:15:c9:59:2e:20:78:80:da:
96:2e:b2:69:d0:ca:a3:6b:7b:8c:a6:3b:24:80:4a:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E3:CD:E0:45:BC:B4:66:09:A9:F7:24:32:E9:A0:C6:C4:CB:0F:E3
X509v3 Authority Key Identifier:
keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233392e302f32342d3234203d3e203138333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.94.239.0/24
Signature Algorithm: sha256WithRSAEncryption
76:7e:8a:df:80:dd:61:c1:5c:fa:d0:92:b3:7f:8a:83:e3:b4:
ff:dd:db:c3:86:1f:e1:47:f5:df:4d:32:7a:48:71:8f:57:87:
d0:31:c3:24:f0:59:10:b0:45:6b:12:76:41:b6:6c:9a:c5:57:
b9:a7:50:23:bb:86:76:3e:6a:cf:38:21:41:64:2f:a6:3c:e0:
da:75:b0:18:7e:57:95:9a:88:59:bd:71:60:d8:ed:43:99:43:
d7:c6:b9:d5:de:ef:39:29:8f:6f:29:50:29:ac:a6:2e:f5:08:
4b:a3:37:1c:29:c0:0a:5c:62:31:08:fc:48:07:a9:1a:89:e6:
1f:1d:03:21:45:b2:2c:cb:fb:d2:76:70:66:4d:73:e8:ad:fe:
30:1f:e6:f6:4a:b8:a4:b7:e4:cf:74:d0:6d:f9:b8:dd:3b:1a:
86:ff:96:32:0e:93:48:0d:bb:8e:a1:0d:5f:bb:88:bd:8a:c8:
34:b1:88:21:d2:7b:14:f2:50:14:b8:af:c1:09:48:32:63:e7:
f2:1b:aa:15:c1:37:d7:0d:53:53:45:9c:9c:8e:5e:f0:74:bc:
26:a1:03:f2:9d:f1:22:c4:ed:1a:92:c5:ec:c0:b9:a8:0c:ad:
9c:3a:73:32:94:b7:4f:9e:76:6c:b8:53:6b:b3:30:6b:4d:c3:
63:ed:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:13:00 2025 by rpki-client