Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138352e302f32342d3234203d3e203438343635.roa
File: 3130332e3132352e3138352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier: wg71zKIGvyCUjjdVHaetQd49Beqy4N7ocd0V9LXETjw=
Subject key identifier: 54:18:D6:6A:8B:CD:F5:59:46:CE:0A:56:E6:D5:74:39:76:6D:5A:8B
Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
Certificate serial: 6FCFFDA6BFAD6816A1007990F30976ADD9B7CAC8
Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138352e302f32342d3234203d3e203438343635.roa
Signing time: Mon 15 Jul 2024 02:42:03 +0000
ROA not before: Mon 15 Jul 2024 02:37:03 +0000
ROA not after: Mon 14 Jul 2025 02:42:03 +0000
asID: 48465
IP address blocks: 103.125.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 19:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:cf:fd:a6:bf:ad:68:16:a1:00:79:90:f3:09:76:ad:d9:b7:ca:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F
Validity
Not Before: Jul 15 02:37:03 2024 GMT
Not After : Jul 14 02:42:03 2025 GMT
Subject: CN=5418D66A8BCDF55946CE0A56E6D57439766D5A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:e6:bf:55:d6:55:76:be:0a:2d:a5:d0:d3:
16:11:6c:a2:99:e0:32:64:f5:21:89:45:9b:9f:9e:
b2:37:37:f3:d9:b3:56:ed:74:19:1b:e9:ee:1a:53:
95:a6:47:02:da:5a:2c:cc:b1:02:02:13:2e:75:74:
87:23:5d:c0:3d:75:56:53:d5:ef:cc:7a:55:b2:ab:
21:49:3d:0d:fb:78:c7:a9:1e:28:48:74:e0:63:fc:
c7:02:e7:59:db:ce:73:bd:dc:0c:dd:1a:79:af:25:
97:88:c0:07:77:93:93:56:d1:92:0b:32:80:64:27:
19:94:6b:84:ac:28:e3:20:bb:70:78:ee:5b:3e:a7:
51:18:5f:1b:ff:45:47:05:cf:6c:87:a3:ef:79:d2:
9b:4c:62:2a:4e:b5:64:a7:8e:6f:d3:7e:12:e9:84:
85:a9:75:27:96:6e:4a:6a:f2:e4:d5:e6:85:42:67:
ae:ab:9d:f7:e1:c6:9f:59:60:1a:2e:9d:b7:90:17:
aa:3f:ae:43:f7:86:e7:a9:b4:49:a9:7c:ef:9d:46:
e8:29:4b:57:ec:74:cc:0d:eb:ed:8b:e8:2e:72:0b:
ee:94:b1:a4:9e:7e:05:b0:70:da:a1:83:e5:b4:37:
9c:9d:34:d7:a8:b6:1e:ab:10:1f:09:ed:1c:b7:41:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:18:D6:6A:8B:CD:F5:59:46:CE:0A:56:E6:D5:74:39:76:6D:5A:8B
X509v3 Authority Key Identifier:
keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138352e302f32342d3234203d3e203438343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.125.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:63:90:a3:05:00:e7:63:06:fc:8c:d4:b3:be:98:4f:d0:7b:
33:f0:da:36:ce:a2:c4:68:0a:a0:63:64:d3:69:58:5b:94:22:
93:a8:82:9a:39:0a:47:35:8f:86:8b:0b:13:75:4e:6a:b8:6b:
e2:cb:fe:5a:4c:79:68:61:da:64:41:3a:cb:c2:ea:97:a4:20:
91:41:43:26:fe:49:8a:d5:77:41:8f:9a:85:3b:26:da:b0:3d:
2f:8f:9c:fa:11:7c:b9:e2:3e:96:31:e0:0b:09:6b:b6:d7:87:
32:d9:6d:0c:19:97:b7:29:05:73:1b:45:74:08:ea:0d:ed:03:
70:7b:58:d1:d5:56:cc:52:02:ea:f7:51:70:5f:b0:fd:d7:ca:
fc:b1:86:6f:6c:12:cb:48:80:81:b0:e5:5a:7d:1e:4b:74:16:
b3:bb:6f:1d:0d:ab:0c:25:a1:84:a1:dc:16:85:b6:4e:f7:89:
3a:7d:cc:ac:1e:58:cb:fb:19:97:2e:48:5c:ae:77:68:53:22:
f7:65:4f:18:23:4d:0e:dc:ae:54:be:09:e0:41:8c:85:61:5b:
56:8e:cf:7f:93:2e:ee:ab:9f:0c:f7:0f:7a:62:94:f7:9f:d5:
4a:aa:3e:39:8b:be:c3:db:27:a1:2a:69:8d:92:f6:fe:d7:80:
03:35:c8:20
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUb8/9pr+taBahAHmQ8wl2rdm3ysgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1
NEM0RjY1RjAeFw0yNDA3MTUwMjM3MDNaFw0yNTA3MTQwMjQyMDNaMDMxMTAvBgNV
BAMTKDU0MThENjZBOEJDREY1NTk0NkNFMEE1NkU2RDU3NDM5NzY2RDVBOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6ea/VdZVdr4KLaXQ0xYRbKKZ
4DJk9SGJRZufnrI3N/PZs1btdBkb6e4aU5WmRwLaWizMsQICEy51dIcjXcA9dVZT
1e/MelWyqyFJPQ37eMepHihIdOBj/McC51nbznO93AzdGnmvJZeIwAd3k5NW0ZIL
MoBkJxmUa4SsKOMgu3B47ls+p1EYXxv/RUcFz2yHo+950ptMYipOtWSnjm/TfhLp
hIWpdSeWbkpq8uTV5oVCZ66rnffhxp9ZYBounbeQF6o/rkP3hueptEmpfO+dRugp
S1fsdMwN6+2L6C5yC+6UsaSefgWwcNqhg+W0N5ydNNeoth6rEB8J7Ry3Qeq1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVBjWaovN9VlGzgpW5tV0OXZtWoswHwYDVR0j
BBgwFoAUEpKFpHihZu4LVNvNpgdx2lTE9l8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
M2Q5MjY4Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMC8xMjkyODVBNDc4
QTE2NkVFMEI1NERCQ0RBNjA3NzFEQTU0QzRGNjVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1NEM0
RjY1Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzZDkyNjhiLTVlNjEtNDNiMi1h
NjI0LTQxYjAxZDdkNzZiMi8wLzMxMzAzMzJlMzEzMjM1MmUzMTM4MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ325MA0GCSqG
SIb3DQEBCwUAA4IBAQBrY5CjBQDnYwb8jNSzvphP0Hsz8No2zqLEaAqgY2TTaVhb
lCKTqIKaOQpHNY+GiwsTdU5quGviy/5aTHloYdpkQTrLwuqXpCCRQUMm/kmK1XdB
j5qFOybasD0vj5z6EXy54j6WMeALCWu214cy2W0MGZe3KQVzG0V0COoN7QNwe1jR
1VbMUgLq91FwX7D918r8sYZvbBLLSICBsOVafR5LdBazu28dDasMJaGEodwWhbZO
94k6fcysHljL+xmXLkhcrndoUyL3ZU8YI00O3K5UvgngQYyFYVtWjs9/ky7uq58M
9w96YpT3n9VKqj45i77D2yehKmmNkvb+14ADNcgg
-----END CERTIFICATE-----
Generated at Fri Jan 3 22:04:21 2025 by rpki-client on console.sobornost.net