Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138342e302f32342d3234203d3e20313437303837.roa
File: 3130332e3132352e3138342e302f32342d3234203d3e20313437303837.roa (raw, json)
Hash identifier: ehUnODb2NDFUCTAODFUi6Pgvq4mrJ1x3Nctvoc0cVaQ=
Subject key identifier: B3:57:8D:B2:01:4B:1B:EA:BB:ED:2D:22:9C:B6:E0:46:6D:28:2D:4E
Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
Certificate serial: 123AE518B08EDB60DBB66CB84B27CFFD78DB1852
Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138342e302f32342d3234203d3e20313437303837.roa
Signing time: Fri 03 Jan 2025 19:48:49 +0000
ROA not before: Fri 03 Jan 2025 19:43:49 +0000
ROA not after: Fri 02 Jan 2026 19:48:49 +0000
asID: 147087
IP address blocks: 103.125.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 01:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3a:e5:18:b0:8e:db:60:db:b6:6c:b8:4b:27:cf:fd:78:db:18:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
Validity
Not Before: Jan 3 19:43:49 2025 GMT
Not After : Jan 2 19:48:49 2026 GMT
Subject: CN=B3578DB2014B1BEABBED2D229CB6E0466D282D4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:8c:7c:49:e2:2e:15:98:28:04:9b:3f:b3:
27:81:23:30:5c:bc:bc:0e:dc:57:0b:b6:e1:a1:d5:
8f:34:81:b9:cd:36:4c:e6:71:0a:d1:ee:06:71:06:
5b:8f:44:6b:6e:25:c9:9c:29:17:01:a4:c7:94:d5:
0f:0b:6f:01:dc:bf:84:9a:b0:37:54:33:e6:f3:05:
e0:c3:5d:ea:42:27:5d:d8:6c:c5:69:d2:54:eb:f7:
49:a9:69:9f:e9:9d:f2:7f:98:b8:e3:27:ef:d7:2c:
a9:e1:86:bd:72:77:e2:c2:37:1a:9e:3e:83:36:9a:
e6:73:7e:f3:54:1d:2f:66:48:f1:5c:e2:51:3a:a0:
7a:cd:f9:31:99:b2:0a:cb:34:c6:18:c4:a1:c1:12:
dc:02:20:42:df:53:13:37:8a:33:46:66:fc:b3:fb:
bb:ea:c9:4d:be:c5:70:70:51:2c:5c:82:12:5e:e1:
61:89:65:3a:a9:c0:80:83:9b:6d:3e:09:dd:d8:25:
a2:8b:e3:2b:48:15:1e:c8:28:dd:d1:d1:65:c5:3f:
99:87:b1:93:81:4b:47:1e:92:b3:ab:ad:4d:32:15:
2b:b4:38:7f:19:8f:01:f4:24:21:e8:bc:e1:dd:a5:
bd:fd:6b:49:7e:8e:61:86:a6:72:1e:a3:9d:30:21:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:57:8D:B2:01:4B:1B:EA:BB:ED:2D:22:9C:B6:E0:46:6D:28:2D:4E
X509v3 Authority Key Identifier:
keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138342e302f32342d3234203d3e20313437303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.184.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:13:f6:ff:df:30:15:be:de:c6:79:0f:a0:47:17:e2:4f:63:
7d:ad:f7:1b:ab:95:31:a3:50:11:07:b8:0a:3a:33:b0:ec:31:
18:85:15:e4:aa:f8:71:d7:d9:2a:4c:4f:78:67:aa:95:92:9b:
67:c0:e8:77:b1:14:55:4b:50:c8:17:83:ed:1d:0e:e9:d8:8e:
a6:fc:ff:ca:eb:6e:a6:e8:83:17:dc:44:39:9b:9c:6d:6c:33:
49:98:60:23:a8:2e:c1:06:9d:fc:1e:90:2b:94:cb:e8:8d:1e:
3c:d9:24:3a:c0:5d:aa:a2:40:af:54:ac:8b:5b:da:65:00:b8:
55:18:93:4e:14:37:87:ef:75:79:01:b1:ec:6e:e4:e4:18:89:
2e:1f:59:cf:fa:9f:33:3e:55:e9:69:72:0d:63:bb:6c:9e:f5:
fa:ff:ed:da:12:63:f0:e6:25:9f:1f:99:18:16:1e:01:08:44:
e2:a4:b0:e0:fe:80:6d:bf:67:5b:ea:76:ea:b9:86:08:a4:bc:
e5:03:39:95:41:79:7d:db:aa:5d:5d:9f:33:d7:1c:7d:09:c9:
8b:a0:b1:d9:98:fc:ff:dd:df:4a:cf:81:3d:94:c9:7a:8a:07:
bb:27:5c:7d:9c:ed:78:8f:e3:ff:fb:aa:ed:e1:45:10:22:ec:
8e:b4:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:13:40 2025 by rpki-client