Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32332d3233203d3e20313533353732.roa
File: 3130332e39302e36322e302f32332d3233203d3e20313533353732.roa (raw, json)
Hash identifier: oXfkDg/VtQwLkLUUBqTJ7kuiNVwRSmCrgdDCvjgPSmM=
Subject key identifier: 74:78:4E:22:C0:D6:3D:A7:E1:56:26:C9:06:93:F2:75:6C:10:13:14
Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
Certificate serial: 74037C3F55ECB0C6AD7D379811235F12B6C7BED5
Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32332d3233203d3e20313533353732.roa
Signing time: Wed 12 Feb 2025 04:52:27 +0000
ROA not before: Wed 12 Feb 2025 04:47:27 +0000
ROA not after: Wed 11 Feb 2026 04:52:27 +0000
asID: 153572
IP address blocks: 103.90.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 28 Apr 2025 23:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:03:7c:3f:55:ec:b0:c6:ad:7d:37:98:11:23:5f:12:b6:c7:be:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
Validity
Not Before: Feb 12 04:47:27 2025 GMT
Not After : Feb 11 04:52:27 2026 GMT
Subject: CN=74784E22C0D63DA7E15626C90693F2756C101314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:4e:15:8d:df:3a:6d:3a:07:ca:5e:c2:fd:
47:b9:83:a8:fb:55:a3:02:a1:7c:16:f0:ea:40:db:
48:e1:3c:95:a7:99:18:0b:9c:a7:ff:68:6a:39:07:
cf:fc:a1:1d:ff:79:78:ed:09:9d:b1:7c:14:08:00:
46:36:17:67:06:4e:e1:dd:cd:a4:02:ac:16:b5:54:
eb:d1:0b:95:8e:63:a5:8d:0e:b9:0e:02:95:90:1f:
3c:f2:ff:e0:a8:9f:66:6b:a6:ec:77:7a:68:77:13:
41:73:51:74:9e:4d:cd:08:8f:aa:db:db:fb:e0:3e:
1f:32:3d:b9:72:b6:11:61:cb:0a:fe:36:ef:b7:9f:
4e:f1:4f:e2:ed:50:20:12:13:d9:0e:51:1b:a8:06:
a8:97:25:70:a2:80:b0:e6:69:9c:14:fa:7e:3d:f4:
f8:cb:13:bb:5a:7d:fc:5f:25:2f:b2:1c:13:71:00:
fd:d9:08:55:e1:6e:cb:ce:5f:f0:d3:f4:8f:a1:7d:
63:79:3f:71:1b:b2:29:0a:ba:61:ac:c9:4b:43:e1:
37:3f:d6:43:f8:7c:19:42:18:f5:34:64:99:9d:93:
f9:c2:ae:8e:51:fa:06:ac:cc:a3:2a:3f:2f:0f:57:
58:f1:f6:46:20:65:18:9c:0c:7b:11:73:3e:63:cc:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:78:4E:22:C0:D6:3D:A7:E1:56:26:C9:06:93:F2:75:6C:10:13:14
X509v3 Authority Key Identifier:
keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32332d3233203d3e20313533353732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.90.62.0/23
Signature Algorithm: sha256WithRSAEncryption
62:fd:33:79:91:cb:45:6a:c8:fa:0d:da:5d:9e:96:84:6e:00:
f1:95:54:b3:e5:a4:12:27:1c:0b:6d:7c:ef:56:c9:49:66:8b:
44:2f:e0:5d:4e:86:a3:1c:02:14:45:0c:3a:f6:e4:34:0d:a0:
82:97:16:51:92:6d:70:45:3a:94:ef:fe:9d:88:b1:8e:d2:d3:
d3:16:5b:d1:ae:ce:bc:e4:a9:49:20:4d:d6:a2:21:9a:29:af:
1d:59:34:b8:4c:ca:1d:9a:7f:bd:5c:a9:a2:cf:65:c1:0e:68:
25:62:3b:40:b2:c2:46:4c:80:f1:51:07:ac:40:2f:bc:fa:16:
6d:2c:93:12:df:9f:0c:4d:dd:60:ff:21:0d:4a:f3:74:23:3b:
ee:5b:1f:b8:e0:2d:98:e4:7d:38:78:12:3a:0a:41:0e:36:2b:
f9:60:66:49:00:d2:6a:85:60:9f:fd:90:f5:a2:7e:a5:61:f7:
3f:40:df:80:6c:4b:de:50:fc:51:e1:61:b1:4f:03:86:48:04:
79:98:f5:4f:5c:68:3a:dd:b9:02:d8:f3:ac:18:4d:27:34:76:
96:78:f2:d4:56:a0:48:25:0b:ac:10:f1:81:4c:94:4a:af:4b:
8b:2c:8e:73:30:c3:97:27:58:c6:de:6f:0e:cd:35:cb:0d:db:
02:3d:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:04:30 2025 by rpki-client