Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
File: 3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (raw, json)
Hash identifier: 98GeIEHyl7vN7zX+4KtRro+IeHAyzP/c19AZ5K5nfIw=
Subject key identifier: F6:24:EA:A1:0B:84:ED:17:BE:D1:49:C5:1F:81:08:1F:89:9C:2F:53
Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Certificate serial: 5BA7484E9D65AD1CB3BF5CAD2E758352116196FA
Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
Signing time: Fri 06 Jun 2025 14:37:16 +0000
ROA not before: Fri 06 Jun 2025 14:32:16 +0000
ROA not after: Fri 05 Jun 2026 14:37:16 +0000
asID: 139393
IP address blocks: 103.143.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a7:48:4e:9d:65:ad:1c:b3:bf:5c:ad:2e:75:83:52:11:61:96:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2
Validity
Not Before: Jun 6 14:32:16 2025 GMT
Not After : Jun 5 14:37:16 2026 GMT
Subject: CN=F624EAA10B84ED17BED149C51F81081F899C2F53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:c2:3b:f5:7c:12:5c:a5:c6:80:1a:58:af:
72:ae:63:9a:ae:00:25:48:39:f3:c6:08:59:de:9c:
82:90:80:59:92:65:0a:9c:e7:f1:9e:48:54:38:a5:
c0:9c:8b:80:78:69:cf:58:41:21:a8:dc:68:2b:99:
db:37:cf:8b:98:5f:73:3e:a8:e8:0d:82:67:df:55:
f1:a7:dd:ab:d1:3d:ac:43:ec:68:36:2e:dc:69:51:
f6:eb:2a:7a:46:00:24:80:a9:78:bc:25:aa:c5:9e:
90:c2:6b:94:99:cb:6f:92:d6:e3:0f:ec:e7:c0:5c:
03:d0:53:5c:8a:15:73:27:31:cc:ae:53:af:6d:4d:
d1:53:d6:67:77:70:5d:42:29:af:38:a8:91:8d:00:
38:c4:59:15:c0:6e:d1:97:76:55:79:75:03:59:50:
79:0e:07:73:fc:23:cf:f3:a3:07:d1:23:a1:b6:0f:
4c:44:c3:9d:49:01:2e:a6:d7:82:74:41:28:b2:43:
e1:42:16:eb:0c:df:77:72:f2:98:a4:7a:fb:49:26:
96:d0:42:84:95:5a:e3:f8:6d:1d:d6:2d:d3:da:06:
c4:df:bb:77:b4:64:4f:9c:2e:64:07:c1:0e:d1:bb:
89:ff:d8:f0:d9:21:74:5e:d1:33:01:b6:fa:81:4e:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:EA:A1:0B:84:ED:17:BE:D1:49:C5:1F:81:08:1F:89:9C:2F:53
X509v3 Authority Key Identifier:
keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.143.128.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1a:81:3e:2f:e5:1b:11:ab:ca:65:ae:96:90:64:b9:e1:c8:
05:8c:b0:85:46:82:fc:cf:4b:53:16:88:76:a8:6a:5d:6f:e3:
8c:62:5c:ff:b6:5c:53:75:fa:4a:14:c5:cb:d4:3a:63:ee:a7:
ca:44:42:2d:76:a8:52:76:b0:61:fd:84:28:c6:53:56:56:40:
46:1c:50:d4:8b:fc:cc:2c:8f:2f:eb:9e:8c:3e:94:cf:bc:f1:
22:44:28:63:da:c3:6a:6a:a9:36:40:c9:22:80:ce:3e:9a:29:
84:bf:20:87:96:9c:f9:20:b6:a0:1f:6a:87:0f:d0:f7:f3:a7:
5d:91:fc:d0:93:06:dc:fc:ff:3a:58:01:c6:79:9a:4c:85:c5:
b4:a1:7d:b6:c1:18:21:02:26:a0:44:2e:63:a9:e1:1c:60:10:
c2:95:e9:f7:f5:70:22:ff:d5:05:2e:e6:f1:11:15:6b:e4:17:
f8:0d:ad:e5:4d:b8:e5:33:cf:01:75:b9:bd:59:09:b0:c4:80:
fa:dd:c2:b1:97:9d:da:2e:25:f6:99:dd:ce:ee:77:be:18:02:
80:3c:9a:e6:23:36:7d:39:83:1a:43:58:c1:f3:84:6d:96:94:
21:eb:b8:af:b0:94:54:1e:e1:e2:b7:7f:e4:f8:a1:81:86:1b:
06:8d:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:45:42 2025 by rpki-client