Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/3130332e3138302e3132322e302f32342d3234203d3e20313439333630.roa
File: 3130332e3138302e3132322e302f32342d3234203d3e20313439333630.roa (raw, json)
Hash identifier: 5IAstmj12+PNnnpmnDC37ey1qzdvjyQ/ZuhlbsZ51l4=
Subject key identifier: 1A:34:98:0F:4A:13:70:87:17:BA:1F:BC:25:F6:03:38:59:49:23:FC
Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF
Certificate serial: 675552A01A0F73ED5B6B25601F90203DD27A837D
Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/3130332e3138302e3132322e302f32342d3234203d3e20313439333630.roa
Signing time: Tue 04 Jun 2024 06:48:21 +0000
ROA not before: Tue 04 Jun 2024 06:43:21 +0000
ROA not after: Tue 03 Jun 2025 06:48:21 +0000
asID: 149360
IP address blocks: 103.180.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Apr 2025 23:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:55:52:a0:1a:0f:73:ed:5b:6b:25:60:1f:90:20:3d:d2:7a:83:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF
Validity
Not Before: Jun 4 06:43:21 2024 GMT
Not After : Jun 3 06:48:21 2025 GMT
Subject: CN=1A34980F4A13708717BA1FBC25F60338594923FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:85:4b:91:44:b5:76:dd:d9:73:7b:c9:63:
72:fe:59:b8:c1:76:72:c9:7b:67:7f:ed:0b:9c:46:
c4:58:05:98:bb:d7:b4:37:34:aa:f6:07:d5:22:ee:
a3:28:00:41:2d:a1:eb:f0:8a:32:a3:db:07:1e:c6:
c7:b3:a7:32:5c:f8:05:c2:01:8d:29:48:d9:12:ee:
68:df:f1:ee:11:13:e7:89:0b:e5:41:5e:dd:55:1b:
7f:4e:b6:44:ee:94:17:6a:7b:41:b8:93:e7:f9:96:
70:0a:d3:02:2c:e2:3f:d5:8f:95:fb:1d:1d:bc:39:
4c:0e:40:96:0c:f7:70:2d:0e:70:12:51:0c:b8:37:
0e:7d:83:95:48:df:1c:ac:c8:98:9b:51:24:ad:ec:
ec:9f:7e:85:e3:4b:8c:95:fb:a4:04:59:0c:ca:18:
a6:60:9e:fe:6d:33:0a:9e:9d:8a:ef:9c:32:40:76:
a5:32:8d:c8:6d:30:83:32:ed:6b:d7:7f:57:28:56:
ff:1f:ac:d1:a8:5e:fa:d6:c1:55:50:d7:87:bb:a2:
67:b9:70:14:34:70:be:c1:ca:d7:0a:e1:94:cc:ba:
0a:75:48:89:e5:02:78:1d:12:06:e1:07:a5:26:ad:
fc:77:5b:f5:8c:97:9f:67:7e:bd:c2:ce:34:58:2d:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:34:98:0F:4A:13:70:87:17:BA:1F:BC:25:F6:03:38:59:49:23:FC
X509v3 Authority Key Identifier:
keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/3130332e3138302e3132322e302f32342d3234203d3e20313439333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.180.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:65:58:e2:70:3a:df:2e:0f:23:8c:12:b4:8c:78:61:26:f6:
4b:cc:dc:59:d2:6c:77:c8:bc:54:0f:72:d6:52:8c:4a:6e:4e:
f5:4e:3a:de:5f:39:d5:ee:1f:59:04:0b:72:c4:f1:17:92:d9:
c5:88:28:b0:93:2b:dd:7d:59:60:d4:47:ae:6c:34:c6:ec:ce:
86:33:67:8c:cd:e1:47:65:3e:c0:19:27:18:4f:dd:15:5c:d8:
72:99:27:e4:9c:87:fb:a3:33:f5:a4:dc:cd:ed:a9:f0:37:2a:
5a:7c:f3:09:58:6d:f0:51:5b:cd:0c:49:8a:67:d7:95:4e:1d:
f7:31:a9:09:1f:80:9a:c6:a0:36:93:cb:09:92:77:45:18:34:
0a:79:44:15:2c:04:f6:88:5e:a1:42:06:64:a5:b1:93:33:01:
47:89:b7:8d:75:89:18:98:1c:0a:af:66:be:03:b6:72:80:d5:
a5:25:69:fb:5c:c1:35:7e:0c:ec:87:8e:1a:a6:2e:05:8c:2a:
21:24:ac:9b:79:77:8e:03:b6:91:5f:f4:bf:d2:36:c1:c5:75:
c0:58:5d:e8:25:16:08:19:ef:a5:0f:41:9a:c3:b2:16:70:eb:
85:50:1a:b8:bf:f9:59:cd:98:0c:5b:91:10:a9:0d:05:05:49:
08:e0:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:37 2025 by rpki-client