Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32332d3234203d3e20313430343233.roa
File: 3130332e3235352e3130382e302f32332d3234203d3e20313430343233.roa (raw, json)
Hash identifier: TddGySLoZVS5efjD3Eq5UIRu0ZXVDtu3svu8AuhNBhs=
Subject key identifier: 0A:CF:A7:91:5C:BF:BC:C5:A9:81:BC:3E:62:C2:48:74:5A:FF:5A:42
Certificate issuer: /CN=802B50E70791398C3EA43DDCECAA739EA01A638B
Certificate serial: 122550F7E99D4A187B40F8015F8B527D65DCC770
Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32332d3234203d3e20313430343233.roa
Signing time: Fri 18 Jul 2025 05:55:13 +0000
ROA not before: Fri 18 Jul 2025 05:50:13 +0000
ROA not after: Fri 17 Jul 2026 05:55:13 +0000
asID: 140423
IP address blocks: 103.255.108.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Jul 2025 17:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:25:50:f7:e9:9d:4a:18:7b:40:f8:01:5f:8b:52:7d:65:dc:c7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B
Validity
Not Before: Jul 18 05:50:13 2025 GMT
Not After : Jul 17 05:55:13 2026 GMT
Subject: CN=0ACFA7915CBFBCC5A981BC3E62C248745AFF5A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:7d:9f:35:87:76:2b:0e:1f:4f:19:3c:42:
ce:a1:fd:4c:8b:b9:3a:82:f7:01:15:11:49:f6:cd:
45:2d:e3:c5:35:e6:09:40:9e:1e:25:c4:b6:ff:62:
2c:df:a7:d9:a1:5c:f9:02:29:2d:a5:8b:77:97:f4:
46:aa:d2:2f:f9:7d:ac:3f:6c:d8:5d:4c:c1:26:10:
bd:67:fb:b5:71:c1:8f:64:99:8b:74:f5:7d:64:ba:
aa:ff:c1:5c:96:3d:a7:fb:85:41:30:7d:aa:64:c9:
d8:10:e2:9c:6f:60:58:10:7e:d9:40:fe:04:a6:83:
41:d0:ea:45:10:9e:d7:89:3b:ee:f5:a0:dc:0f:54:
30:d6:1d:53:e0:05:5e:a9:95:f5:54:9d:dc:13:e7:
cb:32:7a:09:9c:71:de:89:78:2f:db:45:9a:6d:2b:
8e:45:59:55:eb:e7:af:8e:1c:0a:1f:31:5d:a7:76:
f3:eb:6b:7e:96:10:ba:93:8a:d8:bd:67:69:d6:59:
37:17:75:d2:f7:e9:1f:b5:93:08:06:b3:af:29:dd:
09:10:8f:35:e1:e4:b3:fd:a2:b3:93:8b:69:76:db:
2a:29:57:43:5f:d7:71:54:fb:6d:1d:51:6b:06:1b:
db:99:22:12:6c:9c:cd:01:3b:ea:2a:9c:aa:8c:27:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CF:A7:91:5C:BF:BC:C5:A9:81:BC:3E:62:C2:48:74:5A:FF:5A:42
X509v3 Authority Key Identifier:
keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130382e302f32332d3234203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.108.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:3a:54:73:22:b1:64:a0:bc:18:e3:19:cd:99:48:ea:52:d4:
7b:9a:6b:bf:21:c8:f1:4b:70:d5:cd:e0:68:29:b7:91:8c:ba:
52:90:64:6d:a7:a1:dc:bf:e8:c9:ab:a9:4c:60:13:24:42:db:
78:83:d7:e7:d8:78:5e:33:0d:0b:41:56:5b:00:ba:79:76:36:
0b:6a:8a:29:cc:26:4b:ee:7d:74:61:da:d7:8e:a6:10:3b:3e:
82:6b:d9:25:69:4d:9d:33:d9:52:69:cf:ef:9d:94:84:06:71:
37:2f:16:61:9f:23:da:e5:31:38:42:f6:6a:21:02:4c:eb:aa:
f7:d3:f1:72:26:e4:94:c5:65:b9:e0:20:d3:46:c1:39:10:96:
31:27:6a:35:16:71:d3:14:9b:86:a9:e7:c1:7e:72:48:36:e3:
55:7c:ab:f2:68:c8:ca:7c:db:7e:ae:a3:a3:f2:81:ce:47:a0:
0d:d9:e1:73:c7:66:7a:0d:ab:d0:c6:7f:b2:cb:2d:3c:ef:ac:
63:e7:d8:27:50:d4:ab:42:5d:b2:cf:5d:f2:1e:68:d8:77:ee:
2c:75:b0:d7:e6:b5:1e:f3:ec:d7:f6:aa:6e:bf:23:2e:10:54:
27:0d:f4:dd:c8:ca:0e:f2:24:1f:ed:5e:18:a5:dd:f6:4b:ff:
86:3a:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:21:43 2025 by rpki-client