Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/3130332e35372e382e302f32322d3234203d3e20313439393436.roa
File: 3130332e35372e382e302f32322d3234203d3e20313439393436.roa (raw, json)
Hash identifier: 4C8lWmRY4oVVAMXFxhTRjh/LjBJZKl7ZGRpjwsl3Mac=
Subject key identifier: A3:A2:23:21:2F:3F:D5:1C:46:D8:14:3A:E1:3A:2D:25:B2:44:E0:BC
Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71
Certificate serial: 30EF127308F3A1E33C76591A14CA0EE065C9CCE2
Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/3130332e35372e382e302f32322d3234203d3e20313439393436.roa
Signing time: Tue 11 Mar 2025 08:23:02 +0000
ROA not before: Tue 11 Mar 2025 08:18:02 +0000
ROA not after: Tue 10 Mar 2026 08:23:02 +0000
asID: 149946
IP address blocks: 103.57.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 18:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ef:12:73:08:f3:a1:e3:3c:76:59:1a:14:ca:0e:e0:65:c9:cc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71
Validity
Not Before: Mar 11 08:18:02 2025 GMT
Not After : Mar 10 08:23:02 2026 GMT
Subject: CN=A3A223212F3FD51C46D8143AE13A2D25B244E0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:0d:c5:4b:3d:8e:a8:69:8a:e8:78:f5:bf:
4f:97:15:66:62:31:0f:85:3d:db:95:6c:20:60:3d:
c8:65:e7:72:ea:b2:9c:b6:5d:11:64:50:9b:d0:93:
f9:9f:be:64:3d:65:50:c0:4a:a4:56:c5:7b:bf:99:
45:f3:4f:fb:12:a4:5b:0a:29:27:c4:5b:41:41:d7:
69:ba:5e:11:fe:88:67:68:1a:dd:76:4d:55:1f:87:
9f:ff:48:5b:6b:94:bb:ec:d0:a2:1a:91:5a:17:47:
e4:e2:9b:b3:80:61:a8:cb:08:7d:ad:32:c4:58:f5:
26:ba:50:f3:13:7d:bc:17:d8:90:d2:74:52:3a:c7:
84:8a:72:ff:79:3b:3a:d4:8c:76:b0:51:6c:0c:84:
49:27:2f:ab:c3:26:32:63:df:38:20:09:a0:c6:da:
37:2b:ba:89:72:16:67:1a:bc:48:12:c1:91:a2:10:
88:9c:3c:74:2c:ce:24:f4:ef:e3:58:ba:af:93:18:
3b:d1:b2:c3:0c:f3:69:10:d2:09:ef:ac:b1:d9:eb:
d6:b4:a9:0c:4e:ab:8e:ec:81:85:1d:8f:03:7e:3e:
44:63:05:3e:36:2a:da:63:12:cf:61:5c:74:21:02:
cf:48:e6:ad:b5:73:85:b7:bc:e4:92:4f:51:3b:b5:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A2:23:21:2F:3F:D5:1C:46:D8:14:3A:E1:3A:2D:25:B2:44:E0:BC
X509v3 Authority Key Identifier:
keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/3130332e35372e382e302f32322d3234203d3e20313439393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.57.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:19:a1:ff:ae:7e:c1:89:11:26:37:88:4a:12:63:23:8d:21:
2e:36:93:40:90:d4:f8:01:05:f3:89:83:25:e8:2c:d8:8c:a5:
ed:b7:04:8e:a2:10:0e:54:1c:33:4e:a5:e6:4b:b7:ee:e6:60:
b3:36:4b:d3:bb:68:5c:3a:67:ba:39:89:b1:29:63:45:99:84:
04:45:7e:31:d9:ef:2e:e8:0c:66:ab:4d:2d:26:50:3f:4b:d3:
f8:64:40:43:61:07:5e:01:8b:90:ea:f0:82:b6:68:af:a1:94:
41:ab:a8:8f:8b:e4:2b:0f:8d:d1:a9:e2:59:1d:b8:30:31:05:
ff:9e:82:b2:57:e2:5c:99:5b:b5:76:78:ca:02:33:0f:0c:fe:
9e:d8:5b:2b:22:11:f1:2a:e6:b6:c9:10:18:4c:08:36:d6:86:
69:77:94:4e:4d:0d:d7:ef:7d:f9:e4:2a:07:04:85:72:79:2c:
91:77:cf:d7:19:9c:fb:6f:8f:7d:49:c7:94:7a:11:58:06:6f:
1c:ee:ba:02:1c:a4:98:37:01:c9:6f:67:95:fb:28:8c:7e:52:
6f:31:1d:36:b4:f5:f0:33:0d:cc:77:12:16:77:0d:5b:7a:a8:
12:de:a7:a1:53:c4:30:ee:11:96:89:b7:90:67:b8:d8:00:2a:
6a:9e:d9:5f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUMO8ScwjzoeM8dlkaFMoO4GXJzOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx
QjgwNkM3MTAeFw0yNTAzMTEwODE4MDJaFw0yNjAzMTAwODIzMDJaMDMxMTAvBgNV
BAMTKEEzQTIyMzIxMkYzRkQ1MUM0NkQ4MTQzQUUxM0EyRDI1QjI0NEUwQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPg3FSz2OqGmK6Hj1v0+XFWZi
MQ+FPduVbCBgPchl53Lqspy2XRFkUJvQk/mfvmQ9ZVDASqRWxXu/mUXzT/sSpFsK
KSfEW0FB12m6XhH+iGdoGt12TVUfh5//SFtrlLvs0KIakVoXR+Tim7OAYajLCH2t
MsRY9Sa6UPMTfbwX2JDSdFI6x4SKcv95OzrUjHawUWwMhEknL6vDJjJj3zggCaDG
2jcruolyFmcavEgSwZGiEIicPHQsziT07+NYuq+TGDvRssMM82kQ0gnvrLHZ69a0
qQxOq47sgYUdjwN+PkRjBT42KtpjEs9hXHQhAs9I5q21c4W3vOSST1E7teqNAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUo6IjIS8/1RxG2BQ64TotJbJE4LwwHwYDVR0j
BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4
MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw
NkM3MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyOWNjZWI2LWE0ZTctNGU4Mi04
OGJlLWJiOTY5N2JkMWQwMS8wLzMxMzAzMzJlMzUzNzJlMzgyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzMTM0MzkzOTM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnOQgwDQYJKoZIhvcN
AQELBQADggEBAE8Zof+ufsGJESY3iEoSYyONIS42k0CQ1PgBBfOJgyXoLNiMpe23
BI6iEA5UHDNOpeZLt+7mYLM2S9O7aFw6Z7o5ibEpY0WZhARFfjHZ7y7oDGarTS0m
UD9L0/hkQENhB14Bi5Dq8IK2aK+hlEGrqI+L5CsPjdGp4lkduDAxBf+egrJX4lyZ
W7V2eMoCMw8M/p7YWysiEfEq5rbJEBhMCDbWhml3lE5NDdfvffnkKgcEhXJ5LJF3
z9cZnPtvj31Jx5R6EVgGbxzuugIcpJg3AclvZ5X7KIx+Um8xHTa09fAzDcx3EhZ3
DVt6qBLep6FTxDDuEZaJt5BnuNgAKmqe2V8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:05 2025 by rpki-client