Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e3130322e302f32332d3234203d3e2039333430.roa
File: 3230322e3135392e3130322e302f32332d3234203d3e2039333430.roa (raw, json)
Hash identifier: ffiQsBtUQNOAP3LI1t/7fbSwvyR59L4fJZPf9pQ2t64=
Subject key identifier: 36:2E:D0:AF:8C:5E:B7:9B:A0:0B:91:AA:E0:76:0F:9A:67:B9:9B:F7
Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Certificate serial: 15D4E3413401EDE2814EAFA7B97BAF902097D75A
Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e3130322e302f32332d3234203d3e2039333430.roa
Signing time: Tue 14 Jan 2025 07:57:11 +0000
ROA not before: Tue 14 Jan 2025 07:52:11 +0000
ROA not after: Tue 13 Jan 2026 07:57:11 +0000
asID: 9340
IP address blocks: 202.159.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 13:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d4:e3:41:34:01:ed:e2:81:4e:af:a7:b9:7b:af:90:20:97:d7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308
Validity
Not Before: Jan 14 07:52:11 2025 GMT
Not After : Jan 13 07:57:11 2026 GMT
Subject: CN=362ED0AF8C5EB79BA00B91AAE0760F9A67B99BF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:b9:80:97:e8:5d:38:b6:49:f7:70:dc:04:
b6:00:6b:2f:f4:8d:38:bd:2c:54:0a:74:6a:cc:1f:
cb:23:2e:e8:3b:ea:33:1a:96:8c:17:42:6c:e5:e6:
bd:10:0d:06:c8:dc:73:10:84:e0:0d:72:de:50:a4:
93:e3:5b:41:17:45:f7:26:11:d6:ac:15:3c:bd:25:
bd:ea:e2:28:69:62:80:70:22:87:4b:c3:80:02:ef:
98:11:da:0b:96:90:8b:8d:d6:7a:4d:5e:61:1c:ff:
ec:1b:45:41:4d:f1:ff:61:0c:17:f4:11:10:22:1a:
12:77:6e:77:f3:32:3e:d1:b8:6a:5a:48:17:25:bc:
09:04:09:a8:f5:98:7b:1d:7e:a3:8f:3a:58:e1:b4:
49:b3:98:95:a8:1a:97:26:93:7e:f4:ff:e5:b7:d7:
f3:33:03:64:bf:79:7c:08:f4:c7:70:ce:53:77:ff:
31:3b:3e:54:c0:9e:b7:8b:d2:44:8c:69:71:5d:5d:
67:27:a1:f3:20:f3:95:12:9f:b2:33:77:db:a7:5b:
fc:f0:f5:33:c6:93:e6:57:ea:64:1c:6b:39:17:e3:
c7:19:34:2b:e3:2a:64:03:89:31:94:7c:18:da:d7:
70:ff:56:30:74:3d:7c:7f:6d:d0:4d:b4:b3:a5:d6:
31:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2E:D0:AF:8C:5E:B7:9B:A0:0B:91:AA:E0:76:0F:9A:67:B9:9B:F7
X509v3 Authority Key Identifier:
keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135392e3130322e302f32332d3234203d3e2039333430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.159.102.0/23
Signature Algorithm: sha256WithRSAEncryption
e9:4d:bd:09:4b:40:0d:39:75:57:1a:d5:b1:65:ce:b0:4d:04:
39:1c:a8:e1:78:2c:53:39:51:11:1e:41:75:a4:13:00:7d:3d:
87:40:79:46:84:f6:81:3d:c8:65:2f:62:ec:79:ff:d7:25:1f:
63:f4:d3:75:0c:6e:8d:8e:8b:78:49:16:71:7b:c7:ef:db:23:
56:3e:af:23:b7:ec:44:cd:58:50:76:47:66:a1:a9:ac:44:62:
51:35:56:c7:16:ab:23:51:db:64:65:34:3e:b7:93:bc:cf:80:
24:8f:1f:ae:30:e5:ce:99:f4:3a:3b:d9:a0:62:62:7e:65:5d:
7f:79:c0:8a:97:d8:d6:09:3e:a9:b3:a0:d0:4c:46:19:57:f7:
68:4a:a7:ac:c2:0e:60:73:90:e2:5c:ec:46:f3:6c:ac:88:4d:
47:11:f4:e1:3a:cc:42:0f:9a:0c:dc:d5:97:2e:39:f5:3d:d7:
c7:f8:b6:44:15:03:f9:8a:1e:2e:0c:a4:92:74:69:f3:e4:66:
19:48:4d:d9:d8:c9:20:57:8e:ee:8a:82:85:11:19:ea:37:1f:
e7:15:39:b7:dc:fe:b8:8e:1b:b9:af:47:c1:15:53:d0:8c:eb:
0e:56:05:38:d0:2d:f3:f0:63:6c:7c:16:5f:af:8c:d8:a3:da:
a1:07:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:10 2025 by rpki-client