Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/3130332e38312e3131302e302f32332d3233203d3e20313530393538.roa
File: 3130332e38312e3131302e302f32332d3233203d3e20313530393538.roa (raw, json)
Hash identifier: wnnUQHJYgdVmS9A1pXGIrltL8YOwMOYdBNV2WZQ9E78=
Subject key identifier: CE:C5:34:CA:CF:D1:2F:88:3B:8E:B5:82:D6:A9:4B:88:B2:98:59:5C
Certificate issuer: /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623
Certificate serial: 4DD46C60259C766A4C11C0DBCDD34567E8A83F8E
Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/3130332e38312e3131302e302f32332d3233203d3e20313530393538.roa
Signing time: Mon 07 Oct 2024 04:59:40 +0000
ROA not before: Mon 07 Oct 2024 04:54:40 +0000
ROA not after: Mon 06 Oct 2025 04:59:40 +0000
asID: 150958
IP address blocks: 103.81.110.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 10 May 2025 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d4:6c:60:25:9c:76:6a:4c:11:c0:db:cd:d3:45:67:e8:a8:3f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623
Validity
Not Before: Oct 7 04:54:40 2024 GMT
Not After : Oct 6 04:59:40 2025 GMT
Subject: CN=CEC534CACFD12F883B8EB582D6A94B88B298595C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:53:90:bb:74:0f:35:1c:69:56:70:9e:18:
3c:4c:9a:8c:1e:0b:56:1c:e0:36:e1:51:9b:e5:2a:
54:ef:da:a9:c6:fb:c0:f5:32:cb:e5:bc:be:2a:35:
2f:e6:67:45:cb:6e:f0:31:50:26:1b:1e:da:ac:30:
72:28:9b:e6:84:0f:cf:0e:2f:1b:d4:ef:72:19:57:
bf:03:be:5a:ee:c6:64:8f:f3:5f:28:e0:08:23:7e:
73:6c:44:9d:41:e6:77:70:06:14:05:ee:fb:45:71:
91:be:ae:9f:1c:8c:c1:e5:57:24:13:fd:74:bc:2f:
38:43:ba:f5:16:0e:6d:3e:c3:c4:67:4a:5e:f8:6b:
c5:c1:3d:71:9d:2a:42:cd:bb:0e:2e:1f:ff:b8:4e:
c3:f5:ab:a7:f4:1a:1c:09:8e:7b:3b:02:6a:54:53:
fe:37:f7:a7:46:64:a0:25:33:39:f7:7d:eb:aa:e2:
26:1a:ad:eb:3b:12:d5:8b:6f:3c:ff:8c:89:6b:63:
ea:a0:a7:73:13:3e:61:ee:ed:26:6a:05:c5:9c:dd:
e5:a2:b3:24:5b:2f:ff:18:a9:f6:fc:59:98:d8:55:
cb:e3:97:fc:7b:58:1d:ff:2a:c6:b4:47:45:b3:19:
02:e0:9b:c7:c8:84:4d:5f:17:43:34:d3:9d:08:db:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C5:34:CA:CF:D1:2F:88:3B:8E:B5:82:D6:A9:4B:88:B2:98:59:5C
X509v3 Authority Key Identifier:
keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/3130332e38312e3131302e302f32332d3233203d3e20313530393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.81.110.0/23
Signature Algorithm: sha256WithRSAEncryption
05:b4:92:d0:a8:03:22:53:74:50:4d:39:92:c8:6a:0b:7e:a3:
d7:4a:cc:d9:d5:b3:70:12:a0:8a:ef:a7:44:1f:10:a7:1e:99:
90:2b:9f:70:3e:16:12:4d:91:10:e3:84:c7:6f:6a:d6:f0:d4:
44:3b:56:47:6f:05:1d:f2:e8:ca:06:d5:f3:7d:97:6c:74:28:
84:28:38:ca:29:75:df:d6:bf:16:bb:97:52:a8:ba:43:ee:65:
09:2e:c1:00:20:a1:eb:99:91:af:9c:a8:db:a9:69:dc:93:57:
93:b7:66:25:9a:49:03:2f:0b:02:a6:ca:b6:35:2b:8b:b7:61:
44:bc:02:49:be:bf:1d:d7:f3:28:6d:12:45:cc:d9:ff:04:84:
56:67:f4:f5:40:02:de:72:ab:9f:33:90:c2:dd:e2:4a:a5:4c:
c4:60:34:2b:36:00:dc:71:e7:65:69:d8:b1:88:db:2e:c8:22:
39:c8:ed:5a:31:47:0d:cb:79:8d:ee:8a:c4:f3:1b:64:f2:4d:
08:d3:7b:fc:ca:eb:f3:19:0c:6e:60:e9:11:c3:81:c0:0d:cb:
07:d5:d0:97:05:09:49:3e:e5:64:5e:11:68:79:96:7b:8c:c6:
8d:39:52:17:33:d6:15:0a:a3:1e:42:5f:60:7b:c3:f0:51:24:
2b:be:d8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:17:02 2025 by rpki-client