Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138352e302f32342d3234203d3e20313437303837.roa
File: 3130332e3132352e3138352e302f32342d3234203d3e20313437303837.roa (raw, json)
Hash identifier: iSYh5MG48v0VsvdpcdX15HW1EL+J6ZhbKVq+CMhPT9I=
Subject key identifier: 4E:98:F1:17:36:6A:1C:94:EA:B2:F8:40:31:55:0D:87:33:24:FB:E5
Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
Certificate serial: 0CE29CBE3222CF8551981658B9CDFFA53A2BA1D6
Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138352e302f32342d3234203d3e20313437303837.roa
Signing time: Fri 03 Jan 2025 19:48:17 +0000
ROA not before: Fri 03 Jan 2025 19:43:17 +0000
ROA not after: Fri 02 Jan 2026 19:48:17 +0000
asID: 147087
IP address blocks: 103.125.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 01:20:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e2:9c:be:32:22:cf:85:51:98:16:58:b9:cd:ff:a5:3a:2b:a1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
Validity
Not Before: Jan 3 19:43:17 2025 GMT
Not After : Jan 2 19:48:17 2026 GMT
Subject: CN=4E98F117366A1C94EAB2F84031550D873324FBE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:32:fe:8a:06:c8:26:da:8c:33:3d:87:82:
8c:f1:f7:3a:60:b4:9b:e0:b0:67:93:5b:f0:04:5e:
ca:b7:fb:a1:16:7d:35:4a:71:87:56:fb:3e:1a:d5:
34:7c:c6:fb:93:c6:c1:30:2d:df:d7:40:70:aa:76:
7a:1b:56:f0:d1:59:ea:24:7f:dd:11:97:ba:f4:f6:
16:5e:a1:26:c2:f9:fc:24:ab:7d:bd:6c:ed:50:fa:
1b:d1:99:4b:d3:c4:94:0c:04:7e:62:43:4d:07:f6:
2b:4f:5f:a6:17:e0:f7:ea:63:79:5a:19:85:3a:6c:
c5:90:6a:9a:ba:6e:03:99:d6:bb:19:3c:06:c3:d1:
c3:97:1c:d0:39:63:a3:dc:2b:8f:fe:1b:2b:3e:cb:
cb:6a:de:28:5c:cb:02:bd:4c:51:54:b1:01:c7:18:
d7:77:33:6c:41:4b:5b:34:4f:a2:95:1a:29:64:bd:
40:5b:57:27:19:d8:6f:f2:69:80:23:66:41:5b:c2:
90:a4:a9:f3:f6:3a:24:c9:e3:d2:18:61:23:e0:82:
d9:21:ae:c7:2d:5e:ee:a6:df:c4:c6:10:71:62:d5:
99:93:0b:39:b6:38:cf:42:d9:44:fa:94:c7:4d:8c:
1e:04:9f:d1:66:19:b7:57:e8:79:f2:e6:30:b5:fa:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:F1:17:36:6A:1C:94:EA:B2:F8:40:31:55:0D:87:33:24:FB:E5
X509v3 Authority Key Identifier:
keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138352e302f32342d3234203d3e20313437303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.185.0/24
Signature Algorithm: sha256WithRSAEncryption
32:40:15:33:c7:c9:2c:0c:c3:5c:0c:ba:72:8b:52:b8:f3:62:
6e:df:2c:41:01:3d:7c:86:09:45:d5:b0:ee:f3:82:4e:61:3c:
68:9d:74:02:fd:2a:9b:98:18:62:88:db:c3:ef:0a:a8:ce:e6:
2f:b1:1e:3a:84:2a:77:c8:ac:5a:a8:49:e3:c6:f9:4a:b8:87:
73:a4:59:b3:e9:be:4b:51:29:b1:19:4c:07:e7:cd:a9:a8:a7:
9a:58:da:ac:ae:95:88:52:9f:38:1e:90:8d:c6:32:9d:f7:03:
ce:af:f9:21:ae:c1:fd:f7:6d:ee:6b:9b:06:f5:27:71:dc:34:
a7:e1:c3:25:b2:7c:fe:37:2f:60:28:d5:3d:e1:10:13:f4:d6:
35:77:c7:61:b2:a9:7d:2e:66:b4:db:48:41:9d:0e:90:73:36:
3e:47:28:fc:31:6f:13:60:aa:a6:bc:21:76:9d:c5:38:01:9e:
55:10:94:f0:33:ad:71:00:57:44:82:b0:25:a5:65:30:80:70:
ea:ab:a7:cf:bf:02:b8:6b:e8:9f:4d:5b:7c:c0:e2:aa:8a:02:
84:40:f0:ad:b4:c2:00:f0:f6:dc:6e:5f:6f:43:d8:83:f8:65:
95:39:11:3c:dd:81:91:24:69:96:ae:e8:80:43:c5:fb:55:ae:
2c:53:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:14:16 2025 by rpki-client