Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36342e302f32342d3234203d3e2034373631.roa
File: 3130332e31302e36342e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: vkVbZZh+pUuEq8tqvWi2jZ2q1261Vh7JD3vSy9PMht0=
Subject key identifier: 77:46:8F:78:C5:57:A0:27:35:7F:5F:6C:53:2C:18:FE:8A:84:CA:20
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 4DC923C95F01F25DEC67138829DED501BE5809D4
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36342e302f32342d3234203d3e2034373631.roa
Signing time: Fri 29 Nov 2024 06:52:14 +0000
ROA not before: Fri 29 Nov 2024 06:47:14 +0000
ROA not after: Fri 28 Nov 2025 06:52:14 +0000
asID: 4761
IP address blocks: 103.10.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c9:23:c9:5f:01:f2:5d:ec:67:13:88:29:de:d5:01:be:58:09:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Nov 29 06:47:14 2024 GMT
Not After : Nov 28 06:52:14 2025 GMT
Subject: CN=77468F78C557A027357F5F6C532C18FE8A84CA20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:c0:32:82:b7:76:b6:d4:34:26:9c:33:33:
76:32:69:7e:89:b4:e2:7e:9a:b4:b1:b9:74:5d:bf:
a9:78:36:7f:72:7d:5e:e4:73:db:84:3f:d8:6f:f8:
02:da:60:e2:8b:d7:e0:32:7b:3e:c5:f8:7f:93:36:
7d:b6:68:e2:4f:5c:56:c1:ed:73:3b:97:bb:57:55:
e3:78:9c:fd:2b:66:3d:1c:e9:38:5f:31:42:eb:4f:
60:48:46:90:bf:f3:7e:55:2b:f7:a1:e8:25:61:41:
68:40:8b:59:87:32:84:ed:aa:68:80:cc:15:05:3c:
88:25:cc:07:3f:38:c4:0f:d8:58:39:67:72:3d:2e:
eb:70:59:62:67:f6:db:e6:21:73:21:ca:10:5d:23:
67:86:53:ff:74:95:79:26:51:c7:f0:0c:e7:75:2c:
a1:1c:00:fe:05:17:1c:0e:74:97:5a:41:e8:10:46:
ab:24:72:41:68:fc:d9:f2:c4:2d:69:e6:97:e2:e2:
1c:55:9a:c5:64:8b:17:85:24:b7:d8:b0:5d:5d:63:
9d:ed:dc:bc:21:8d:d2:24:f3:9d:4e:b9:83:bf:f3:
d8:6e:c7:b5:97:23:d7:a8:84:7e:e5:36:df:87:81:
30:79:d5:67:28:4b:05:b7:27:be:c2:99:fb:cb:7d:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:46:8F:78:C5:57:A0:27:35:7F:5F:6C:53:2C:18:FE:8A:84:CA:20
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36342e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:b4:62:31:8f:91:5b:19:9e:57:34:0f:1f:3f:43:d6:4f:f4:
6a:eb:55:54:6a:2c:5f:17:3b:d9:6f:1b:8d:35:97:01:a4:a6:
66:8c:39:2f:11:c7:4e:5b:0d:6e:c4:bf:78:98:9c:25:02:1e:
98:14:8a:d4:54:90:46:de:88:34:f4:f3:e8:d1:92:6d:c2:30:
5d:5d:44:0c:63:9f:4d:8c:33:bc:ef:e9:f3:bb:4b:64:ef:70:
83:e8:04:d4:01:ae:80:da:dc:3e:1d:75:2c:d1:1a:48:0f:46:
60:dc:bb:3a:68:30:aa:b9:a2:6e:67:ff:d9:4e:9f:e3:59:16:
b6:3e:89:bf:35:60:9e:19:5b:90:89:5e:d4:67:4f:bb:45:9e:
4f:2d:bd:c5:39:38:e0:44:65:f9:60:ce:a3:d7:a5:5f:47:47:
61:ca:eb:08:ed:65:ae:e9:44:3f:a7:69:38:a2:5c:13:f0:a2:
23:61:47:59:7b:ab:0a:12:cb:29:c6:2a:dd:0d:0e:15:60:d6:
02:8c:44:ad:64:a8:eb:a5:ca:25:5e:cf:9c:9b:82:94:ba:3b:
9a:47:04:1e:94:e8:3f:d7:8d:49:13:3d:bc:eb:97:a5:ec:eb:
c5:b6:61:ef:34:84:67:9b:30:d5:66:ab:d9:1b:99:96:33:c0:
f3:fd:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:18 2025 by rpki-client