Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35332e302f32342d3234203d3e20313430343735.roa
File: 3230322e31302e35332e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier: oOzJ3BGB2FevVXEpUYz6HSWkqE4PQESlqlUO0oidZHM=
Subject key identifier: 28:F8:47:5D:4F:81:8A:7E:BE:68:69:57:C3:28:26:97:8C:CA:F3:BF
Certificate issuer: /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial: 7B0B775A8273AD86D99DB7A3DE89E527D42F3C5E
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35332e302f32342d3234203d3e20313430343735.roa
Signing time: Mon 21 Apr 2025 06:20:13 +0000
ROA not before: Mon 21 Apr 2025 06:15:13 +0000
ROA not after: Mon 20 Apr 2026 06:20:13 +0000
asID: 140475
IP address blocks: 202.10.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Apr 2025 07:16:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0b:77:5a:82:73:ad:86:d9:9d:b7:a3:de:89:e5:27:d4:2f:3c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Validity
Not Before: Apr 21 06:15:13 2025 GMT
Not After : Apr 20 06:20:13 2026 GMT
Subject: CN=28F8475D4F818A7EBE686957C32826978CCAF3BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:9e:22:c0:76:dd:13:7a:a9:fd:55:f9:cf:
bd:77:ad:3f:24:bf:be:d0:7a:37:41:17:eb:08:4b:
54:3d:da:37:f1:cd:81:9e:7b:d9:04:c6:d5:01:1b:
10:d1:cc:e7:92:1d:d1:ca:17:5f:b3:49:da:c7:e7:
49:a9:0a:de:bd:a4:51:d5:ce:13:6c:5a:8c:19:84:
cc:63:da:53:11:a1:bb:f3:17:50:14:74:38:9f:8a:
eb:4f:56:e6:11:3f:51:11:03:85:11:48:d8:cc:4f:
14:0a:c0:e4:a4:c8:fb:98:ad:0d:eb:63:97:73:37:
dd:da:f8:dd:9a:36:58:90:12:83:5c:13:cd:5d:4f:
70:f1:63:72:2a:2a:30:7a:0e:2b:e1:2a:e9:f0:e5:
1a:32:ab:87:07:39:a0:95:08:e1:4a:94:8b:50:96:
c6:18:bf:e3:3c:ee:ca:c4:43:13:ac:fa:7a:5e:a0:
b6:60:96:1e:86:09:1d:3f:a2:60:fe:e2:d8:fd:08:
be:3a:5a:e4:15:9f:1d:62:e2:7e:a4:91:d7:a8:0f:
63:65:8c:e2:3e:c3:f6:26:a0:49:7a:26:5d:17:da:
60:16:53:8e:df:69:4a:af:86:0d:f9:6e:44:ae:6a:
cf:cd:9b:d3:dc:0d:80:66:60:37:b5:8d:db:0a:20:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:47:5D:4F:81:8A:7E:BE:68:69:57:C3:28:26:97:8C:CA:F3:BF
X509v3 Authority Key Identifier:
keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3230322e31302e35332e302f32342d3234203d3e20313430343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.53.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:97:4b:6f:17:5e:e2:e7:a8:d1:79:9c:9f:85:20:ad:ff:75:
e2:5e:03:70:e9:f9:11:d3:1a:a0:a5:72:f0:89:ab:20:20:55:
5f:5a:95:7f:d3:7d:5c:37:91:8b:6e:18:a3:61:f4:f0:42:94:
94:e2:30:de:78:69:16:4b:1e:90:53:00:26:3c:84:a2:19:7f:
7e:74:c5:c7:c0:a4:00:91:e3:00:dc:cd:37:8c:ce:ec:d9:f7:
a0:16:f0:85:a6:40:ea:d3:ad:43:60:a2:0a:8a:b9:2a:0c:8a:
29:57:cb:97:e2:73:f4:58:fa:65:1f:7f:b3:56:2c:e9:f0:bc:
78:4a:81:ab:1b:69:32:44:79:e6:44:42:68:61:ad:b8:cb:8d:
13:a0:84:e7:ce:eb:ee:c0:9f:c8:3b:da:58:68:7a:15:36:3d:
ea:fc:16:f8:5b:d9:9d:ff:02:ee:a3:ca:eb:c9:56:1b:ee:38:
38:6d:f5:05:2a:55:b7:6d:bf:ca:4e:91:15:cb:09:06:e6:12:
7a:48:a1:4c:1c:a0:d5:d8:35:4a:79:c4:17:f7:b9:48:6d:cc:
8f:25:04:47:52:5f:5b:c1:9d:fb:90:32:47:c0:03:ff:03:ed:
e0:3f:21:f4:83:78:bf:d7:1c:75:b0:2b:20:9d:8d:b3:bb:d9:
76:00:81:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:59:06 2025 by rpki-client