Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
File: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (raw, json)
Hash identifier: 3g3aSv1Hn+X1Tawj1mhjbRek2PJ/87NvS7Vgq6TLld4=
Subject key identifier: 34:73:74:9D:E4:70:CD:7F:11:03:A9:65:AF:63:72:8C:FA:91:03:1F
Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Certificate serial: 133F1CD50F6356589BA18C6CD1387C899995B5F2
Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
Signing time: Wed 19 Feb 2025 21:46:45 +0000
ROA not before: Wed 19 Feb 2025 21:41:45 +0000
ROA not after: Wed 18 Feb 2026 21:46:45 +0000
asID: 142395
IP address blocks: 103.172.118.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 13:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3f:1c:d5:0f:63:56:58:9b:a1:8c:6c:d1:38:7c:89:99:95:b5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E
Validity
Not Before: Feb 19 21:41:45 2025 GMT
Not After : Feb 18 21:46:45 2026 GMT
Subject: CN=3473749DE470CD7F1103A965AF63728CFA91031F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:37:a0:87:48:97:24:78:6e:f7:4a:97:0b:
8b:a5:81:d9:f2:a9:10:0e:0a:d2:07:96:cf:1f:2c:
c8:c8:54:29:16:e2:ef:de:1e:14:02:3f:2e:18:dc:
75:a4:e3:90:0e:f2:63:39:ae:5d:b3:d4:31:3f:5e:
c5:ea:84:56:3d:a4:1e:b5:24:19:0a:21:fb:67:5a:
f2:73:89:6e:0d:46:79:05:5a:bf:f6:77:04:e8:64:
5a:07:06:f2:f8:cc:7f:bd:15:a5:33:0d:5e:2c:7c:
75:e5:ba:24:7c:56:2e:1c:2d:52:04:df:b5:9e:b8:
8a:6f:0d:e7:52:9d:10:fb:6e:f6:93:4b:23:03:cc:
4d:f7:34:bb:d1:6d:cb:bf:18:6f:8b:4f:bf:96:89:
bd:da:bd:14:87:3f:0f:cd:c9:34:05:93:c8:74:e1:
df:25:9f:40:8e:f2:ba:7c:91:f4:4b:3c:20:20:33:
6a:94:49:c5:7c:7b:1f:8b:f7:88:91:a8:88:ab:c7:
18:68:a8:af:df:4d:c6:68:8e:18:a0:55:ea:29:20:
c1:cc:8b:62:9d:5d:dc:18:3c:a6:a0:d7:1c:92:98:
d1:15:6e:05:bf:9c:26:9c:b9:f2:8d:7b:3a:c2:dc:
b1:8d:e5:b6:e9:71:0c:37:8a:3c:00:c7:63:87:10:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:73:74:9D:E4:70:CD:7F:11:03:A9:65:AF:63:72:8C:FA:91:03:1F
X509v3 Authority Key Identifier:
keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.172.118.0/23
Signature Algorithm: sha256WithRSAEncryption
86:1c:ab:16:9e:a4:3e:e5:ff:40:d0:95:9e:e9:b5:66:54:fa:
c9:0c:f7:b9:57:1e:57:50:95:bd:36:fe:f4:f2:b8:66:e5:70:
b6:ee:30:bd:cf:ca:16:c5:56:7b:1c:75:d1:dd:13:01:30:44:
42:f4:15:7b:36:c1:54:0f:63:89:8a:53:74:21:cd:a0:c8:66:
b6:82:78:b0:00:9f:f3:a0:2a:18:1d:28:34:2f:a2:9f:61:20:
ea:48:c8:b5:31:9f:b1:f0:b6:76:0d:cc:b5:84:25:2f:a6:d9:
0d:b0:1e:62:40:47:0e:74:df:ae:ff:0c:16:b5:26:f2:a6:b7:
c2:17:01:7f:eb:d2:68:65:5d:4b:91:4e:72:31:b0:33:d7:56:
8b:f9:55:c7:04:94:55:7e:d9:c5:a2:37:15:71:f4:6b:b5:20:
51:ac:7b:44:da:2e:13:ab:ec:cd:64:d1:0b:7c:38:eb:a0:d5:
88:54:ee:06:e3:a1:5c:0e:92:d9:bc:da:79:ae:78:9b:94:01:
3a:34:c2:93:32:98:16:9e:da:ad:6e:79:10:ef:38:34:10:f0:
33:2e:15:f1:b6:8e:ed:8c:5b:0a:41:f7:72:84:9a:c6:48:a0:
e1:3f:1a:b4:ab:9a:1f:1e:49:dc:3b:99:4e:40:d2:51:b4:24:
c6:07:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:11 2025 by rpki-client