Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/3130332e3138382e3235352e302f32342d3234203d3e20313439363632.roa
File: 3130332e3138382e3235352e302f32342d3234203d3e20313439363632.roa (raw, json)
Hash identifier: dky08XUTKbuE+7EhXxvSipxvsOM0pDD3lEnBh5/Ms/c=
Subject key identifier: 0E:00:BF:F0:9D:DE:76:55:FC:75:C2:15:EE:09:B4:67:20:9A:A3:80
Certificate issuer: /CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
Certificate serial: 3EA777A724FA73880C9267BF6E917E9753364D7F
Authority key identifier: 47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/3130332e3138382e3235352e302f32342d3234203d3e20313439363632.roa
Signing time: Mon 24 Feb 2025 04:42:36 +0000
ROA not before: Mon 24 Feb 2025 04:37:36 +0000
ROA not after: Mon 23 Feb 2026 04:42:36 +0000
asID: 149662
IP address blocks: 103.188.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a7:77:a7:24:fa:73:88:0c:92:67:bf:6e:91:7e:97:53:36:4d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D
Validity
Not Before: Feb 24 04:37:36 2025 GMT
Not After : Feb 23 04:42:36 2026 GMT
Subject: CN=0E00BFF09DDE7655FC75C215EE09B467209AA380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:ef:e7:e3:e4:b4:5a:4e:b1:12:b3:1e:ea:
e3:82:89:3f:50:f7:52:e1:d0:60:16:96:f3:98:bb:
03:1d:16:a8:cb:64:02:6c:83:c6:e8:e9:75:56:a7:
f6:1c:1c:fa:23:98:fb:72:1b:e0:05:27:60:f6:0b:
bc:99:ce:9b:79:d6:e0:49:75:b6:d0:71:4d:fd:d1:
bd:08:ab:39:e8:45:1e:94:dc:5a:14:74:7e:e3:74:
d4:92:59:8b:24:33:3d:38:43:2d:42:0c:e6:30:bb:
75:75:16:f0:b1:88:e2:69:b1:3c:39:19:3c:d5:0b:
ec:fc:46:75:af:78:16:c7:3e:9a:28:9e:56:0a:23:
7c:ba:5e:d3:ba:6a:cb:d5:fb:89:8e:28:ce:ac:ac:
66:5f:04:a1:39:39:f6:3c:97:49:c2:d7:19:e8:c9:
cc:bf:35:f4:2f:5f:39:a2:78:e3:95:3b:28:51:18:
81:c2:c6:76:21:32:9d:6c:59:4c:ab:8d:c1:ff:e7:
90:09:b3:5e:88:59:88:c1:21:92:cb:f4:fd:1d:0a:
83:2e:30:b1:71:53:db:70:80:b9:17:76:3f:bf:7c:
83:62:b9:39:f8:8d:b6:fb:3c:b4:8a:cd:09:f7:67:
12:d1:80:2f:72:01:6c:94:9e:02:4d:66:c5:34:f8:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:BF:F0:9D:DE:76:55:FC:75:C2:15:EE:09:B4:67:20:9A:A3:80
X509v3 Authority Key Identifier:
keyid:47:AC:32:E2:BE:25:23:24:1C:15:97:5C:C6:CF:C8:AD:FC:9C:C9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47AC32E2BE2523241C15975CC6CFC8ADFC9CC97D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0764d4-f2bd-42bc-86c4-2a61b623a49b/0/3130332e3138382e3235352e302f32342d3234203d3e20313439363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.255.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e2:62:dd:8c:e0:58:77:d5:fb:b6:35:7d:31:dd:d6:13:97:
92:47:90:33:4d:35:77:27:fc:1a:82:ab:08:26:13:9e:b3:fa:
a1:c5:e3:61:1a:ab:9d:ef:dd:c9:fd:ee:b8:65:6f:6d:61:5b:
b5:ad:7b:41:be:80:01:79:3b:cc:25:76:47:5a:2e:95:90:3b:
f3:07:81:71:30:2f:26:ee:b1:0f:ec:44:ee:d3:85:39:62:0f:
73:97:b9:1f:1f:53:86:df:a7:07:1b:af:39:4b:28:2b:cb:98:
df:42:ef:dc:ee:52:59:eb:5e:77:6f:c1:ed:72:40:eb:14:bd:
f7:af:ad:81:ef:14:45:54:c8:a9:a4:cc:4b:5b:6f:5a:2a:e0:
b3:5b:8e:ab:e0:bb:08:e6:fb:66:1c:7e:2e:ce:f7:49:4e:cb:
eb:84:d4:c3:0e:46:72:a8:84:dc:0d:43:6a:8c:5d:31:d4:98:
05:05:91:73:5a:0b:92:46:b8:e4:0b:18:8b:bf:a5:b6:14:dc:
b6:b2:bc:5b:8d:3c:a5:4d:3f:d3:0f:74:17:60:26:ca:58:02:
0e:12:f1:25:06:1b:c3:7d:1b:07:d8:0a:99:3a:4f:03:e5:7d:
01:27:4a:70:48:6f:e7:a9:c3:16:85:48:e0:7f:79:d2:cf:48:
c9:0d:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:32:28 2025 by rpki-client