Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e20333938373730.roa
File: 3130332e3137332e3133332e302f32342d3234203d3e20333938373730.roa (raw, json)
Hash identifier: cUuKHFAMwZFiv2lItMkBhpPzWeb+Qc19IWJo59vHM3o=
Subject key identifier: 6C:53:8E:04:03:FE:35:56:EC:50:BD:C9:AC:E4:CA:3C:44:D1:14:65
Certificate issuer: /CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
Certificate serial: 278934211D743845B1350D693FAA17EB7A182D60
Authority key identifier: 26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e20333938373730.roa
Signing time: Sat 15 Mar 2025 16:14:26 +0000
ROA not before: Sat 15 Mar 2025 16:09:26 +0000
ROA not after: Sat 14 Mar 2026 16:14:26 +0000
asID: 398770
IP address blocks: 103.173.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 05:12:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:89:34:21:1d:74:38:45:b1:35:0d:69:3f:aa:17:eb:7a:18:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26AE16DF2BF0FD5184FEC655250D244739FA9FC4
Validity
Not Before: Mar 15 16:09:26 2025 GMT
Not After : Mar 14 16:14:26 2026 GMT
Subject: CN=6C538E0403FE3556EC50BDC9ACE4CA3C44D11465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:00:85:48:88:83:2c:b0:6d:6b:2f:b2:d8:1b:
de:2f:c0:43:c0:7b:8e:be:36:b4:b6:0e:ca:44:a3:
d2:18:35:89:ea:25:96:12:12:fb:0e:b1:ab:2e:1b:
12:a1:a4:4b:2f:b9:04:35:ff:79:50:d0:ed:a7:a2:
9e:3c:ed:a8:5d:ea:ef:30:56:c6:cc:63:61:75:f8:
58:a4:95:34:c2:58:f0:4b:51:8b:e4:d9:02:da:e4:
26:16:64:44:62:b2:0f:a4:e9:d4:49:f9:85:f6:be:
65:02:44:01:e9:b3:81:29:38:7e:68:3d:78:89:94:
19:fc:9a:52:15:02:09:20:56:6d:06:d2:c5:90:c9:
c9:20:f5:9f:8a:a9:22:b9:02:78:6e:e8:88:81:6c:
ed:3b:1c:3b:62:c4:e3:3a:ad:2d:d9:b9:bb:59:fb:
8f:76:07:b4:4d:e3:2d:ca:cc:e5:50:b6:24:f0:fd:
72:7d:28:01:e1:e0:d3:14:67:9d:b0:34:e1:b1:0b:
ba:0e:8d:27:58:32:e8:88:0c:5f:35:32:ff:8d:7f:
23:b6:b9:6e:68:08:12:38:bd:3d:3f:05:25:44:05:
28:72:9a:ae:83:d4:45:61:e1:bf:7d:35:ed:ed:e6:
33:af:d7:14:78:58:cc:6b:3c:d4:3e:d8:3d:9c:21:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:8E:04:03:FE:35:56:EC:50:BD:C9:AC:E4:CA:3C:44:D1:14:65
X509v3 Authority Key Identifier:
keyid:26:AE:16:DF:2B:F0:FD:51:84:FE:C6:55:25:0D:24:47:39:FA:9F:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26AE16DF2BF0FD5184FEC655250D244739FA9FC4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/3130332e3137332e3133332e302f32342d3234203d3e20333938373730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.173.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8d:6b:02:ee:e6:d5:e2:8a:ac:48:d0:9f:19:39:dd:f7:46:
94:95:22:f0:11:4f:a7:3f:e9:d3:be:7d:e2:dd:fe:c2:4e:6d:
cf:85:c0:23:9b:03:fe:c4:a4:33:05:b0:b0:b9:6e:bb:02:03:
23:73:95:51:0b:82:76:53:43:47:e0:2c:a4:3b:66:ad:c8:83:
d6:a7:a4:7f:61:9a:8d:48:f3:02:d4:23:92:15:76:5b:47:31:
ca:e6:16:66:03:e5:95:e4:73:56:1d:46:d5:4b:81:3b:c3:f3:
1c:e2:bf:6b:5c:df:1a:d6:e4:b0:13:0e:e5:db:1b:8a:e4:26:
9d:41:54:38:3a:89:33:77:a2:05:98:61:ed:96:ab:c1:56:09:
e7:58:db:48:33:ed:08:d8:65:d6:5a:cb:3d:d3:ad:6c:d6:af:
dd:9e:37:d6:b5:2b:3c:72:d8:c2:c2:09:c7:47:aa:66:a5:70:
84:69:52:d8:0c:e4:32:d1:7d:8a:28:59:60:58:89:8a:87:10:
25:95:dc:50:69:db:52:30:cf:98:a0:22:89:90:05:c4:78:cf:
a9:26:d1:62:17:e4:7f:80:00:cb:c4:92:56:fc:56:b1:45:8d:
9a:df:ec:48:3e:4e:12:85:7d:4c:1c:f7:c6:c9:8b:36:0d:b7:
de:0d:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:57 2025 by rpki-client