Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32332d3234203d3e20313333383330.roa
File: 3131302e37362e3134362e302f32332d3234203d3e20313333383330.roa (raw, json)
Hash identifier: doIbs8zz9lB7/vkO+u9W5RaBu7bEf1LnEdR5gQfSEj4=
Subject key identifier: FE:E3:7B:79:23:C0:78:8D:06:48:5A:3F:68:AB:7E:48:22:3B:E6:A1
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 369003B782D0C7CA43463F1DE0E44FBF6142012A
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32332d3234203d3e20313333383330.roa
Signing time: Thu 12 Sep 2024 15:15:41 +0000
ROA not before: Thu 12 Sep 2024 15:10:41 +0000
ROA not after: Thu 11 Sep 2025 15:15:41 +0000
asID: 133830
IP address blocks: 110.76.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 18:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:90:03:b7:82:d0:c7:ca:43:46:3f:1d:e0:e4:4f:bf:61:42:01:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Sep 12 15:10:41 2024 GMT
Not After : Sep 11 15:15:41 2025 GMT
Subject: CN=FEE37B7923C0788D06485A3F68AB7E48223BE6A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:5f:da:ac:4e:8b:cb:7f:91:02:68:6f:32:
af:02:d9:d0:35:c3:33:7a:3c:3e:0e:ff:ce:71:14:
14:14:e6:da:d0:2a:5f:a1:96:27:7e:0c:4f:7f:d9:
a7:fb:b0:3a:e4:8f:8e:9b:6d:86:da:88:cb:4c:6e:
a6:e9:cd:02:df:31:9b:43:51:33:2f:76:3b:aa:0a:
61:e2:75:ec:d5:c2:34:8e:1b:ee:33:8a:59:b3:8e:
ff:53:40:72:ad:97:f4:2f:40:79:1d:f1:1c:16:9c:
53:fa:be:d6:a0:31:00:22:29:13:be:e6:db:d8:72:
a7:94:3f:d9:ee:9c:9e:61:bd:25:8f:96:e6:18:ab:
24:b5:65:f8:e3:bc:c0:ab:36:66:e3:4f:a4:5d:fa:
f1:45:b5:6b:25:04:1f:2c:58:86:0f:5f:75:88:af:
01:43:d6:7d:ab:aa:19:1b:c3:74:60:d3:d3:9b:1b:
a9:84:ee:3a:a4:e2:77:8c:ca:9a:69:08:e5:bb:da:
39:bb:96:8d:6e:69:5c:5e:3d:41:8b:0e:3e:59:b7:
8e:19:db:e6:d8:63:cb:1b:61:43:5c:88:d3:84:64:
99:3f:b3:87:ce:f1:46:64:e2:e4:ff:4f:13:33:88:
8a:5f:2b:8d:b9:f2:42:38:97:04:19:74:91:d8:18:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E3:7B:79:23:C0:78:8D:06:48:5A:3F:68:AB:7E:48:22:3B:E6:A1
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32332d3234203d3e20313333383330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.146.0/23
Signature Algorithm: sha256WithRSAEncryption
83:f4:82:cd:8c:5a:e3:b5:a5:e3:2c:ae:d4:39:6a:26:57:df:
99:77:f5:6e:6a:c0:04:1c:b7:fc:3b:50:44:06:d3:22:59:a4:
3d:62:a4:4c:52:15:57:81:91:01:23:a7:cc:7b:07:79:fe:e2:
84:ab:91:bb:48:40:d2:10:e9:28:62:ce:19:71:c7:55:b3:4c:
e8:93:2e:11:1d:7e:67:07:bf:8c:79:3b:9d:ca:8b:db:51:0c:
41:05:83:85:c8:a1:6d:a7:25:b2:e6:70:71:7b:97:31:8f:73:
95:66:ef:46:f4:27:3c:16:4f:c6:4d:cf:0f:a9:31:a0:d9:4e:
69:19:6f:56:48:be:5a:f0:46:1d:4a:6b:0a:f1:b0:fe:1d:c0:
e9:43:18:b1:7b:f6:d8:f6:2e:33:c7:b6:15:0f:33:10:e7:d8:
b2:f7:67:90:c9:22:b1:43:74:a2:33:ce:fb:eb:f6:cf:9b:fc:
7c:49:08:14:fa:2b:ae:40:5e:f1:6f:a6:d4:85:93:71:0e:b6:
e8:61:66:74:ec:85:38:c4:3f:e3:24:e7:41:73:76:96:48:c9:
bc:5a:b6:86:da:f4:2e:4c:c6:01:20:ef:7d:9d:76:f5:d0:48:
4f:d7:5e:fc:71:cb:49:3b:9a:63:16:ba:53:55:cf:ff:84:eb:
d6:54:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:16:43 2025 by rpki-client