Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/3130332e3138382e3235342e302f32332d3233203d3e20313439363632.roa
File: 3130332e3138382e3235342e302f32332d3233203d3e20313439363632.roa (raw, json)
Hash identifier: KTEAyXyL1jCz8gCZkw27Z/2nglquDnA52C1UGypkRsg=
Subject key identifier: 02:4D:A6:E4:BF:06:5B:9E:14:87:0F:31:52:D4:CE:03:19:7B:9C:86
Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
Certificate serial: 017476AE29FBEE050306E2CD305D203AC7B6FED9
Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/3130332e3138382e3235342e302f32332d3233203d3e20313439363632.roa
Signing time: Mon 24 Feb 2025 04:42:51 +0000
ROA not before: Mon 24 Feb 2025 04:37:51 +0000
ROA not after: Mon 23 Feb 2026 04:42:51 +0000
asID: 149662
IP address blocks: 103.188.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 09 May 2025 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:74:76:ae:29:fb:ee:05:03:06:e2:cd:30:5d:20:3a:c7:b6:fe:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
Validity
Not Before: Feb 24 04:37:51 2025 GMT
Not After : Feb 23 04:42:51 2026 GMT
Subject: CN=024DA6E4BF065B9E14870F3152D4CE03197B9C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:a6:31:5a:1e:e2:8a:24:73:35:bc:60:9e:
fd:ca:16:d9:2a:82:fa:28:66:8c:18:e4:52:bc:34:
7a:b5:b4:90:ed:b4:76:13:2a:92:6b:dd:72:c9:0f:
43:65:98:5f:57:4f:bd:e4:75:c1:1c:ba:9e:28:11:
03:93:65:fb:a6:be:99:77:c7:d8:a5:19:96:b5:fe:
00:10:a9:43:82:2e:11:35:da:84:4b:1d:ba:95:9b:
e5:f0:06:dc:e9:16:12:98:c7:f2:65:7c:df:b8:c5:
fe:03:4b:46:22:ef:59:b0:b8:4b:d0:b9:38:ae:63:
1c:72:24:23:22:e8:bf:08:bf:db:4e:f3:d9:12:26:
e4:80:a6:61:f3:2a:e1:fb:b2:dd:7f:cc:1c:b8:28:
1c:09:03:d7:3e:0f:ab:ab:fb:71:b0:46:1a:c9:03:
87:55:68:47:a4:8a:ff:50:56:f4:1a:67:3d:72:e3:
e6:76:42:31:65:4b:bb:13:a3:a9:57:64:ea:7d:10:
7b:19:b0:79:0e:a4:37:1a:bd:1c:0b:62:2e:41:1a:
71:99:35:cb:7a:30:ac:a6:91:5f:01:05:91:b4:20:
e2:ba:95:6a:bc:ab:06:2a:32:4d:d5:b3:86:f1:d4:
66:a9:ca:7f:b2:11:e3:8f:34:94:58:ce:37:d4:e3:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:A6:E4:BF:06:5B:9E:14:87:0F:31:52:D4:CE:03:19:7B:9C:86
X509v3 Authority Key Identifier:
keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/3130332e3138382e3235342e302f32332d3233203d3e20313439363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.254.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:7e:86:0b:cf:23:1a:43:21:39:15:ba:21:86:73:32:c6:ac:
bb:c5:18:d2:99:dd:b9:22:6d:c2:a9:46:13:8b:f6:09:b2:2f:
15:ba:a3:a6:c9:4e:88:04:60:2a:a7:a3:78:08:0b:26:7c:20:
89:4d:d7:c3:b2:47:2e:e9:8a:f3:a5:ac:31:d4:00:e9:fb:6a:
d7:4e:bd:0c:13:d7:99:36:54:d8:f2:ee:94:72:5c:90:72:e0:
88:72:c5:6b:7b:af:f4:0a:f7:1f:dd:55:f5:e5:85:9d:9d:69:
71:ca:48:81:87:e2:cf:f0:4e:20:da:c0:df:71:29:bf:bf:3b:
dc:ec:76:3b:b3:f9:77:54:01:6d:c3:d9:9f:5b:1e:d9:eb:2a:
76:60:b4:35:c4:42:fc:04:30:bd:77:17:69:15:28:0b:5a:01:
1d:f8:d0:80:dc:b1:02:a7:c1:2d:8d:a1:94:2f:8b:88:32:97:
ec:b4:a2:4a:6c:f5:ae:9c:b0:2a:55:26:14:23:0a:7a:72:47:
d6:b6:7a:38:16:7c:e4:ff:66:f0:84:12:43:e6:e4:62:c5:df:
54:4b:bb:89:13:ea:b3:3e:43:e0:8c:40:10:b3:63:97:1b:94:
9c:76:72:89:3e:c0:83:96:95:01:6c:4f:a4:e1:e7:0a:56:73:
64:aa:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:32:12 2025 by rpki-client