Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32332d3234203d3e2037353937.roa
File: 3130332e3136322e3135322e302f32332d3234203d3e2037353937.roa (raw, json)
Hash identifier: npf6wdgU7MiMLOshNBuc/+Yna/EGybze+JGu/6y11jw=
Subject key identifier: 94:7A:F3:CA:A2:0F:E8:60:17:1B:CC:74:10:7F:E8:DD:E5:E6:CB:59
Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial: 109DF9C89A8F5E897EBF0CC13B83AAF1A457C485
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32332d3234203d3e2037353937.roa
Signing time: Fri 04 Apr 2025 08:26:15 +0000
ROA not before: Fri 04 Apr 2025 08:21:15 +0000
ROA not after: Fri 03 Apr 2026 08:26:15 +0000
asID: 7597
IP address blocks: 103.162.152.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Apr 2025 06:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:9d:f9:c8:9a:8f:5e:89:7e:bf:0c:c1:3b:83:aa:f1:a4:57:c4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Validity
Not Before: Apr 4 08:21:15 2025 GMT
Not After : Apr 3 08:26:15 2026 GMT
Subject: CN=947AF3CAA20FE860171BCC74107FE8DDE5E6CB59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:4c:79:f6:57:1c:6a:61:70:77:81:ec:69:
c2:f0:c2:49:8f:ab:46:cb:7f:3e:84:ea:da:7f:59:
f6:db:ba:ef:d5:06:0d:82:ea:8a:a1:0a:9a:cf:3b:
c8:b4:d0:92:1c:0f:2b:3f:72:de:1b:af:62:1b:b9:
8c:df:14:fc:ab:7a:92:12:9b:28:99:b5:0b:48:ec:
65:fd:92:d4:65:e0:67:73:2a:ad:a6:0c:3a:4b:b9:
cd:ad:d5:ba:a1:0b:a2:0f:d8:b1:ca:cb:35:c4:fd:
8d:a0:0b:43:3d:cc:d1:02:11:02:08:1c:63:c2:8e:
3a:8a:25:f5:9e:68:ec:12:08:c3:31:c8:3a:86:49:
44:52:2c:09:02:d0:be:f3:49:03:cb:71:50:36:cb:
7e:d0:ee:0e:21:c3:08:a0:db:01:6a:d1:71:56:2e:
1d:1a:4c:3e:8a:df:fb:89:e8:c1:b7:63:02:1f:4e:
83:45:1d:d5:0c:6a:a4:7e:82:86:b3:43:c4:8b:1b:
7a:26:43:9b:61:a8:9f:e9:5b:35:4f:b9:8f:6c:bc:
bd:15:96:07:b2:e4:97:25:e9:7f:98:e1:bd:f9:a1:
fa:2c:91:3b:90:d4:50:17:f7:13:12:c8:d2:72:ac:
40:27:87:65:b5:93:85:1c:18:f2:c7:cd:df:7d:8e:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7A:F3:CA:A2:0F:E8:60:17:1B:CC:74:10:7F:E8:DD:E5:E6:CB:59
X509v3 Authority Key Identifier:
keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32332d3234203d3e2037353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.162.152.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:5b:64:a8:ef:d0:5b:d0:20:d8:05:9a:e2:a9:83:21:79:d3:
b0:10:6a:cc:31:bc:a3:49:c4:a7:18:fd:07:88:be:4e:d8:e6:
81:88:58:fd:ce:f0:cf:29:41:a1:bb:40:7d:cd:57:66:03:11:
95:a5:1e:0b:b8:5d:f8:96:db:3f:69:7f:78:42:b2:46:73:5d:
0c:b1:f6:0b:a7:a5:20:5d:d6:e3:9b:6e:8e:88:d4:87:b8:b7:
2d:45:4e:41:38:e6:3d:37:5d:05:f7:32:ef:6d:d9:25:aa:99:
fe:f5:f5:63:cc:13:05:7f:ec:54:19:6b:8c:b4:01:7c:e3:30:
e9:17:b3:5c:1f:6e:91:db:53:eb:dd:ec:63:a0:34:95:c5:39:
15:f3:56:1b:88:19:73:5c:57:2f:b5:09:28:7a:9d:fb:b9:12:
d1:c7:b2:97:fd:6d:70:af:93:60:d5:9e:57:20:42:1a:e4:80:
9b:33:65:71:64:0f:1a:64:54:23:86:9b:05:dc:18:09:0c:77:
1a:37:a7:1d:c2:b5:8c:13:e4:f3:07:d5:3a:0c:a5:99:9e:a7:
d4:d1:31:64:04:15:f7:18:c1:61:66:1b:b5:2d:b9:7f:6d:d7:
86:4c:2c:ea:ee:a2:65:20:36:1a:c8:e8:53:45:39:c3:ef:a6:
d2:2e:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:24:37 2025 by rpki-client on console.sobornost.net