Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130392e302f32342d3234203d3e20313430343233.roa
File: 3130332e3235352e3130392e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier: PJchV209KXhP7PKz9TUbAJFg5KCpBACencptsnhmFU8=
Subject key identifier: 84:E6:54:E6:55:97:CF:A7:64:41:4A:75:ED:F9:8E:02:25:73:2E:18
Certificate issuer: /CN=802B50E70791398C3EA43DDCECAA739EA01A638B
Certificate serial: 180C8C7B5254483DE2C91383F8CBAB947CE3AFA4
Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130392e302f32342d3234203d3e20313430343233.roa
Signing time: Fri 18 Jul 2025 05:55:35 +0000
ROA not before: Fri 18 Jul 2025 05:50:35 +0000
ROA not after: Fri 17 Jul 2026 05:55:35 +0000
asID: 140423
IP address blocks: 103.255.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Jul 2025 17:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0c:8c:7b:52:54:48:3d:e2:c9:13:83:f8:cb:ab:94:7c:e3:af:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B
Validity
Not Before: Jul 18 05:50:35 2025 GMT
Not After : Jul 17 05:55:35 2026 GMT
Subject: CN=84E654E65597CFA764414A75EDF98E0225732E18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:cf:17:95:41:5b:45:09:eb:14:ed:26:b4:
b7:68:be:4a:63:13:d7:1d:bd:9c:cb:cb:9b:a6:12:
b8:c8:87:b3:66:b6:53:82:41:4d:62:f1:ec:fe:65:
2a:b7:31:ef:b3:4b:bd:6a:10:10:69:44:89:99:fb:
f1:41:9e:62:a7:50:37:02:51:01:4f:85:ae:7a:05:
7d:45:bd:17:e4:9e:ba:f3:94:38:73:4d:a3:2d:c4:
91:d9:15:7d:38:6d:86:cb:c3:15:65:af:7e:ed:40:
75:02:d5:11:bc:a7:4f:cd:88:86:cb:f0:83:b1:68:
ae:3d:d4:c8:b9:d7:5b:c7:7b:3d:56:9d:25:f0:23:
ca:34:2c:c1:c6:43:7a:80:94:51:36:d8:c6:2b:cf:
76:72:d7:cb:d2:df:bb:83:fd:1b:93:67:e9:cd:87:
6d:6c:5d:59:95:89:11:7a:89:56:48:c2:0f:c1:7a:
88:e0:7c:5d:d4:d0:97:5e:8b:65:6b:08:8f:88:2f:
66:48:60:9f:ea:a7:54:b4:4e:68:7e:f0:c9:7c:ab:
f1:bf:29:72:46:5f:29:bc:98:74:02:8e:df:3a:ed:
ca:df:46:6d:5a:24:40:e7:8b:e6:49:bd:c0:02:7e:
6a:0a:3f:57:76:94:9e:20:39:b9:3c:ee:8e:14:da:
8f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E6:54:E6:55:97:CF:A7:64:41:4A:75:ED:F9:8E:02:25:73:2E:18
X509v3 Authority Key Identifier:
keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130392e302f32342d3234203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.255.109.0/24
Signature Algorithm: sha256WithRSAEncryption
19:02:95:b6:6e:c5:29:06:b0:c7:1f:eb:81:ab:50:a8:1b:6e:
81:09:73:67:ec:b9:e2:3f:ef:83:bd:a1:17:ab:26:d2:25:57:
0b:ce:48:8c:48:b6:e5:cf:ed:53:d7:8f:09:09:2c:f3:e7:83:
80:9d:3c:d7:66:85:c9:09:b1:c4:04:94:54:06:50:3c:39:99:
45:33:06:d8:4c:84:5e:79:f9:c1:8b:b0:57:24:e2:b0:d2:70:
05:f2:ab:57:8e:e2:24:7c:2e:e7:c3:be:a5:2f:11:8b:89:b3:
00:a8:86:26:1e:cc:00:df:76:59:93:66:8f:2d:d4:82:a8:43:
f2:af:c3:0f:b7:1f:16:56:07:79:eb:e3:34:96:50:6c:a4:41:
22:d2:56:39:cd:36:16:10:f3:86:72:f9:6e:8c:7e:af:cc:16:
17:78:e2:25:0b:4f:50:50:cc:a0:eb:40:5d:8e:72:6c:30:8c:
7b:30:30:1a:79:81:44:35:bb:52:5f:32:b6:63:2c:4b:74:2b:
89:a5:ac:5c:05:ec:23:1e:59:5d:54:0e:52:00:a9:d4:c4:d5:
59:19:d4:dc:61:90:65:c3:a5:89:4a:9b:2a:ff:eb:e2:99:08:
e1:75:5a:ed:d9:28:be:b7:a7:1c:61:bb:9d:69:1c:8b:c1:48:
85:af:84:33
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUGAyMe1JUSD3iyROD+MurlHzjr6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVB
MDFBNjM4QjAeFw0yNTA3MTgwNTUwMzVaFw0yNjA3MTcwNTU1MzVaMDMxMTAvBgNV
BAMTKDg0RTY1NEU2NTU5N0NGQTc2NDQxNEE3NUVERjk4RTAyMjU3MzJFMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8c8XlUFbRQnrFO0mtLdovkpj
E9cdvZzLy5umErjIh7NmtlOCQU1i8ez+ZSq3Me+zS71qEBBpRImZ+/FBnmKnUDcC
UQFPha56BX1FvRfknrrzlDhzTaMtxJHZFX04bYbLwxVlr37tQHUC1RG8p0/NiIbL
8IOxaK491Mi511vHez1WnSXwI8o0LMHGQ3qAlFE22MYrz3Zy18vS37uD/RuTZ+nN
h21sXVmViRF6iVZIwg/BeojgfF3U0Jdei2VrCI+IL2ZIYJ/qp1S0Tmh+8Ml8q/G/
KXJGXym8mHQCjt867crfRm1aJEDni+ZJvcACfmoKP1d2lJ4gObk87o4U2o+FAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUhOZU5lWXz6dkQUp17fmOAiVzLhgwHwYDVR0j
BBgwFoAUgCtQ5weROYw+pD3c7KpznqAaY4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YTExZTZkNy01N2ExLTQ5MzYtYjdhNy1kZTA5MzUyNWNiMjcvMC84MDJCNTBFNzA3
OTEzOThDM0VBNDNERENFQ0FBNzM5RUEwMUE2MzhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVBMDFB
NjM4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhMTFlNmQ3LTU3YTEtNDkzNi1i
N2E3LWRlMDkzNTI1Y2IyNy8wLzMxMzAzMzJlMzIzNTM1MmUzMTMwMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/20wDQYJ
KoZIhvcNAQELBQADggEBABkClbZuxSkGsMcf64GrUKgbboEJc2fsueI/74O9oRer
JtIlVwvOSIxItuXP7VPXjwkJLPPng4CdPNdmhckJscQElFQGUDw5mUUzBthMhF55
+cGLsFck4rDScAXyq1eO4iR8LufDvqUvEYuJswCohiYezADfdlmTZo8t1IKoQ/Kv
ww+3HxZWB3nr4zSWUGykQSLSVjnNNhYQ84Zy+W6Mfq/MFhd44iULT1BQzKDrQF2O
cmwwjHswMBp5gUQ1u1JfMrZjLEt0K4mlrFwF7CMeWV1UDlIAqdTE1VkZ1NxhkGXD
pYlKmyr/6+KZCOF1Wu3ZKL63pxxhu51pHIvBSIWvhDM=
-----END CERTIFICATE-----
Generated at Tue Jul 22 11:18:26 2025 by rpki-client