Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313531353832.roa
File: 3130332e38302e3233312e302f32342d3234203d3e20313531353832.roa (raw, json)
Hash identifier: ssuFbz9PA4SHbaWgNHOg0PW3wCgLc2ZPXaAOSBMp7kQ=
Subject key identifier: 46:9D:EB:C3:C1:C9:C7:A8:9A:C8:F6:C1:C4:F5:91:E7:FD:8B:68:64
Certificate issuer: /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Certificate serial: 33C39DA1FDFE64B150D85954A154320D67716E21
Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313531353832.roa
Signing time: Thu 26 Dec 2024 05:01:50 +0000
ROA not before: Thu 26 Dec 2024 04:56:50 +0000
ROA not after: Thu 25 Dec 2025 05:01:50 +0000
asID: 151582
IP address blocks: 103.80.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 19:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c3:9d:a1:fd:fe:64:b1:50:d8:59:54:a1:54:32:0d:67:71:6e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Validity
Not Before: Dec 26 04:56:50 2024 GMT
Not After : Dec 25 05:01:50 2025 GMT
Subject: CN=469DEBC3C1C9C7A89AC8F6C1C4F591E7FD8B6864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:40:f0:44:ca:2a:37:ff:9f:45:1f:0a:1b:
5b:3d:df:16:e1:1c:fb:ae:5a:5c:f7:32:18:5b:fb:
fe:29:ae:05:c0:c2:a4:b6:bb:71:23:7b:f1:52:b3:
d5:c1:f1:0c:89:3a:e1:54:ab:17:79:0f:51:48:cb:
35:28:64:b1:53:53:8e:bd:0c:58:1c:af:9c:31:f2:
53:ca:71:c3:92:9f:86:30:d5:4c:54:fc:4f:1a:2f:
68:be:d5:ce:57:0a:39:ef:b1:a6:28:5a:97:dc:79:
66:6c:27:b6:66:93:ac:b2:19:24:62:b8:db:c6:99:
82:df:44:ec:67:07:97:5a:aa:cd:1d:f7:6f:06:eb:
3c:89:10:d1:71:df:da:db:34:33:cb:5b:fd:9b:ae:
ae:a0:4e:7c:2a:81:6d:32:5e:0e:83:5a:d2:c3:9a:
96:86:1a:ed:a5:12:7f:ff:4a:34:1e:0d:64:d3:43:
c4:6b:80:cd:4b:1f:3e:c7:85:b6:ef:19:7c:f4:d5:
1c:1b:46:31:ec:41:44:7a:51:cf:dd:01:70:96:9a:
ee:ff:d0:7c:c6:7d:a9:02:9e:cc:77:bc:d2:fa:4a:
6e:07:72:5b:8e:00:96:8e:8c:c4:87:6f:75:ea:44:
a8:c5:1d:31:69:1e:a7:64:49:20:99:f3:fd:a5:25:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9D:EB:C3:C1:C9:C7:A8:9A:C8:F6:C1:C4:F5:91:E7:FD:8B:68:64
X509v3 Authority Key Identifier:
keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313531353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.231.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ad:cf:ba:8a:3f:1f:18:67:8b:e7:36:5a:cd:74:6b:97:77:
33:36:67:ce:a3:0c:eb:ed:e2:92:52:0c:6d:94:61:ad:87:e0:
b7:cc:d7:9b:32:15:60:6d:98:92:a6:59:36:df:51:ed:1c:9c:
1e:c7:af:3e:62:77:33:e7:dd:1d:2e:5d:59:90:87:28:4e:82:
45:a1:25:36:e4:95:d8:aa:bd:ac:28:ca:84:d6:aa:37:54:95:
e7:50:cd:f2:f7:56:31:db:fe:fb:7e:e2:98:c3:9a:cd:d7:66:
5d:4b:2c:7f:d1:46:b4:7e:5c:5a:4b:3e:2d:73:13:26:65:34:
d8:ed:95:74:3a:19:a1:40:ee:74:51:bd:30:5e:0a:f4:4d:ae:
d7:e5:fe:bb:da:5b:37:b1:ea:34:73:55:b7:e0:d8:78:b3:f1:
11:ef:dd:e8:88:d4:df:85:e2:98:e4:85:02:7b:35:67:9e:4a:
9f:8e:5a:0a:79:b3:8b:71:95:39:8a:70:cf:17:c8:fe:56:6e:
bb:98:a5:58:28:83:6e:7e:5d:09:8b:95:3f:e8:66:54:b2:5f:
e0:59:28:79:85:fb:9a:90:d3:c8:bb:6a:aa:c0:ab:aa:26:63:
18:97:ca:70:88:38:3c:3a:5c:26:3c:e6:f0:e6:15:f1:0d:a1:
f9:65:aa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:24 2025 by rpki-client