Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/3130332e3138382e3235342e302f32342d3234203d3e20313439363632.roa
File: 3130332e3138382e3235342e302f32342d3234203d3e20313439363632.roa (raw, json)
Hash identifier: kH+vX3bMbRnqIuUcnwop886U5ayipMGv+jemc9nEnJM=
Subject key identifier: 78:9D:2B:85:FA:E8:96:61:CC:CB:9A:D6:9A:63:2A:30:5E:1E:C4:01
Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
Certificate serial: 47D5E26BC3B6D63A98A834A0FE3ED5E110F2CC6C
Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/3130332e3138382e3235342e302f32342d3234203d3e20313439363632.roa
Signing time: Mon 24 Feb 2025 04:42:10 +0000
ROA not before: Mon 24 Feb 2025 04:37:10 +0000
ROA not after: Mon 23 Feb 2026 04:42:10 +0000
asID: 149662
IP address blocks: 103.188.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d5:e2:6b:c3:b6:d6:3a:98:a8:34:a0:fe:3e:d5:e1:10:f2:cc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
Validity
Not Before: Feb 24 04:37:10 2025 GMT
Not After : Feb 23 04:42:10 2026 GMT
Subject: CN=789D2B85FAE89661CCCB9AD69A632A305E1EC401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6c:b7:89:7f:3f:ca:a9:8e:60:21:39:53:b3:
18:68:1b:9b:31:66:c3:05:0f:d4:a2:64:9a:56:b6:
c8:ee:48:79:2b:e5:4d:f5:f2:7c:81:3a:df:fa:a1:
4b:fd:bc:ef:61:2d:79:7b:29:a1:27:db:fe:c7:03:
f6:40:da:4a:a5:c4:64:a7:51:4f:f0:6f:89:61:3e:
a4:3e:06:3f:cf:33:4f:8f:85:b2:11:3f:71:c6:de:
29:c6:c8:ef:bc:1a:fe:e5:17:ca:71:9e:cc:20:07:
ac:a8:7d:7e:3e:6e:4a:6c:7f:1a:5a:52:47:06:4d:
fe:92:a2:80:0c:b4:92:cf:37:c3:96:9c:d5:df:1f:
1c:41:07:95:a1:ef:4e:69:08:f8:f2:f3:3b:c8:ef:
84:18:4f:54:cb:75:98:cf:8a:6f:06:f2:60:06:c0:
ad:ba:84:1d:68:ae:78:52:aa:f4:4d:86:d4:eb:e4:
79:83:90:8f:f3:67:e4:91:45:fb:31:d3:ea:d8:be:
46:30:1f:26:d7:67:7c:33:5e:60:99:ed:a3:b1:67:
a3:0b:d0:8b:66:ab:dd:75:95:4c:e9:13:af:6c:47:
46:23:21:4e:c3:62:dd:ce:56:b6:b8:f0:2d:d3:f1:
18:e5:75:e9:fa:8a:4e:e4:43:94:a0:98:91:37:60:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:2B:85:FA:E8:96:61:CC:CB:9A:D6:9A:63:2A:30:5E:1E:C4:01
X509v3 Authority Key Identifier:
keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/3130332e3138382e3235342e302f32342d3234203d3e20313439363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.254.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cd:44:59:2a:2a:0a:53:76:bb:fa:98:cb:0b:25:2b:7b:89:
d3:88:76:f7:46:46:50:93:d1:14:47:0e:ae:21:86:87:d2:ed:
b1:e8:c4:52:95:ac:d7:a3:e0:ab:ac:44:1e:5d:d6:79:18:60:
9c:af:8f:ff:d2:11:a4:37:60:f0:d2:2e:79:c9:b1:d6:53:cc:
7e:39:1e:9a:fc:ee:a1:f3:13:77:71:e6:cd:e6:85:bb:cf:19:
0a:48:07:53:95:93:c9:f1:24:c0:f6:1a:e7:69:2f:dd:19:78:
6c:38:d9:87:b7:af:c5:6e:7a:22:c8:ab:e6:76:01:03:e6:64:
1e:3c:f3:15:2a:3a:5a:03:9d:f4:9b:59:58:e3:89:5c:54:d0:
c7:8b:ae:53:39:33:cd:1d:8d:14:64:53:8b:af:4f:8b:ae:bf:
dc:78:16:6d:02:53:17:05:c6:9b:53:02:03:4f:2c:9f:1d:2c:
30:d6:e0:b6:b5:f8:9f:7d:ee:ab:02:86:04:bf:47:18:f1:e6:
d4:d0:b9:db:bd:d6:22:82:a9:24:07:a8:d8:ea:37:d8:0e:2c:
49:93:09:77:b9:27:48:12:56:3b:87:fe:ab:b4:58:ac:80:c5:
d4:41:8a:25:d7:cd:73:7e:7c:51:e1:76:2a:5c:ec:80:a0:e4:
7f:91:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:14:11 2025 by rpki-client