Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/3130332e3135322e3233332e302f32342d3234203d3e20313430343436.roa
File: 3130332e3135322e3233332e302f32342d3234203d3e20313430343436.roa (raw, json)
Hash identifier: 9yGmBzk1WFcgJUyFJQJQ5SAz5ukKde4bcN/vhMsnyO8=
Subject key identifier: E8:B3:DC:4B:60:10:A0:21:D7:BC:41:11:CE:9D:F0:1F:14:63:42:CF
Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF
Certificate serial: 5B2328DC1692A60728C00280CF67A58F9D8C3FB8
Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/3130332e3135322e3233332e302f32342d3234203d3e20313430343436.roa
Signing time: Mon 03 Mar 2025 10:25:19 +0000
ROA not before: Mon 03 Mar 2025 10:20:19 +0000
ROA not after: Mon 02 Mar 2026 10:25:19 +0000
asID: 140446
IP address blocks: 103.152.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:23:28:dc:16:92:a6:07:28:c0:02:80:cf:67:a5:8f:9d:8c:3f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF
Validity
Not Before: Mar 3 10:20:19 2025 GMT
Not After : Mar 2 10:25:19 2026 GMT
Subject: CN=E8B3DC4B6010A021D7BC4111CE9DF01F146342CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:1c:cc:7e:3f:5e:d9:39:78:f4:f4:12:1e:
2a:78:69:f7:80:01:bd:e7:2b:c7:ca:54:6a:e2:55:
47:c1:f0:05:3d:62:98:ca:dc:8c:18:fb:78:c9:c0:
6f:14:04:29:85:98:66:3c:4e:1c:69:72:8d:0a:b2:
68:4b:ba:39:8f:1f:58:12:55:00:70:2a:23:3e:30:
df:e8:fc:67:42:f5:ec:3e:65:da:77:83:68:17:b9:
ff:33:f4:e9:ee:26:64:78:b4:e4:bb:f8:39:bf:27:
1b:d6:de:bd:72:90:58:18:70:27:19:09:ec:2b:3a:
aa:b6:6d:67:b5:15:7e:69:cc:04:ec:ab:29:e8:ae:
3a:33:8b:a1:33:bc:ce:8c:d3:13:cb:c1:c1:f2:36:
dd:b9:63:fd:0c:6b:a6:d3:c2:bf:a9:05:68:1f:ca:
9b:ea:3a:21:40:12:82:a4:63:a4:0b:17:67:8c:3a:
bd:dc:13:40:b6:ee:ff:e6:1d:28:06:4e:b0:b3:b9:
45:f6:25:09:c7:94:58:a3:2f:54:eb:0e:71:56:43:
77:44:57:46:f3:a7:9c:42:d1:43:82:d9:fd:d7:e9:
69:93:71:8f:95:e3:8b:64:a3:b5:33:19:04:2e:9b:
d8:00:7e:7f:b0:9a:ad:e7:c5:99:78:7e:4e:4a:e7:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:DC:4B:60:10:A0:21:D7:BC:41:11:CE:9D:F0:1F:14:63:42:CF
X509v3 Authority Key Identifier:
keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/3130332e3135322e3233332e302f32342d3234203d3e20313430343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.152.233.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:57:bc:8c:e4:76:91:ff:e3:50:e4:98:1b:3e:d9:97:8e:2e:
2f:90:a6:27:39:56:5d:9a:89:d0:17:7a:79:5b:08:55:ac:45:
a3:af:92:84:42:61:d5:e7:8f:02:6c:47:91:8d:55:e1:8a:e4:
0b:6e:a2:54:8b:d4:80:f9:04:99:11:69:3d:9a:da:78:d7:10:
50:4a:97:33:f4:78:b4:0b:2f:a4:0a:b9:b8:f6:49:c1:d0:8b:
4a:c0:33:ca:4a:12:b2:0c:65:f2:f5:7e:1a:82:96:ce:26:2f:
d0:f9:c4:90:d7:8d:c8:20:7e:71:53:61:9c:34:60:c4:a0:2e:
45:84:33:bb:a0:11:58:51:b0:38:a4:ce:4d:52:5e:2d:78:75:
63:ef:46:14:e2:03:5f:a3:b4:e0:52:01:ac:2e:4a:09:17:99:
48:f7:49:65:a4:e2:ed:93:0b:16:93:2e:c5:e7:c0:b2:53:8f:
a9:21:a2:45:1a:97:bd:96:2b:28:6a:2b:58:15:ab:ff:84:9c:
56:63:43:08:ed:c9:77:87:12:85:62:8c:b9:f2:84:8b:00:f4:
82:64:31:ee:b4:5e:dc:f5:03:c8:f6:69:83:aa:8e:43:d5:6e:
b2:69:36:a3:b4:f6:a3:8c:09:c3:d3:d2:65:2c:ba:f1:bb:c2:
ba:0b:68:f1
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWyMo3BaSpgcowAKAz2elj52MP7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF
Q0RFRURFRjAeFw0yNTAzMDMxMDIwMTlaFw0yNjAzMDIxMDI1MTlaMDMxMTAvBgNV
BAMTKEU4QjNEQzRCNjAxMEEwMjFEN0JDNDExMUNFOURGMDFGMTQ2MzQyQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBxzMfj9e2Tl49PQSHip4afeA
Ab3nK8fKVGriVUfB8AU9YpjK3IwY+3jJwG8UBCmFmGY8Thxpco0KsmhLujmPH1gS
VQBwKiM+MN/o/GdC9ew+Zdp3g2gXuf8z9OnuJmR4tOS7+Dm/JxvW3r1ykFgYcCcZ
CewrOqq2bWe1FX5pzATsqynorjozi6EzvM6M0xPLwcHyNt25Y/0Ma6bTwr+pBWgf
ypvqOiFAEoKkY6QLF2eMOr3cE0C27v/mHSgGTrCzuUX2JQnHlFijL1TrDnFWQ3dE
V0bzp5xC0UOC2f3X6WmTcY+V44tko7UzGQQum9gAfn+wmq3nxZl4fk5K58EfAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU6LPcS2AQoCHXvEERzp3wHxRjQs8wHwYDVR0j
BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB
OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF
RURFRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0ZjA3OTg3LWI4ZWMtNDQ0YS05
YjQ0LTI5MTAxMWZmNDZhNi8wLzMxMzAzMzJlMzEzNTMyMmUzMjMzMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM0MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmOkwDQYJ
KoZIhvcNAQELBQADggEBAEpXvIzkdpH/41DkmBs+2ZeOLi+Qpic5Vl2aidAXenlb
CFWsRaOvkoRCYdXnjwJsR5GNVeGK5AtuolSL1ID5BJkRaT2a2njXEFBKlzP0eLQL
L6QKubj2ScHQi0rAM8pKErIMZfL1fhqCls4mL9D5xJDXjcggfnFTYZw0YMSgLkWE
M7ugEVhRsDikzk1SXi14dWPvRhTiA1+jtOBSAawuSgkXmUj3SWWk4u2TCxaTLsXn
wLJTj6khokUal72WKyhqK1gVq/+EnFZjQwjtyXeHEoVijLnyhIsA9IJkMe60Xtz1
A8j2aYOqjkPVbrJpNqO09qOMCcPT0mUsuvG7wroLaPE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:22 2025 by rpki-client