Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36372e302f32342d3234203d3e2034373631.roa
File: 3130332e31302e36372e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: V+M/wpi3Qbk2WpBX6ovo+iiJ+8/3h2kq2FhVlp2KH98=
Subject key identifier: 51:FB:08:ED:2F:54:17:F8:46:36:73:2A:63:01:77:23:E0:19:A4:EA
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 1D8F1520565A1FA648E00F8AA878CC553708CB0F
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36372e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 16:44:54 +0000
ROA not before: Tue 03 Dec 2024 16:39:54 +0000
ROA not after: Tue 02 Dec 2025 16:44:54 +0000
asID: 4761
IP address blocks: 103.10.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:8f:15:20:56:5a:1f:a6:48:e0:0f:8a:a8:78:cc:55:37:08:cb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:39:54 2024 GMT
Not After : Dec 2 16:44:54 2025 GMT
Subject: CN=51FB08ED2F5417F84636732A63017723E019A4EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:fe:71:fc:da:55:d4:6b:e5:12:ba:83:e4:
e6:c8:18:b9:d0:40:83:af:6b:ff:96:38:3b:13:9a:
3d:a7:df:97:e7:85:7e:ce:37:6e:7a:2e:c5:11:0d:
b7:8e:c8:f9:fb:a1:4f:a3:d6:25:6a:73:70:b4:a2:
b7:24:2d:69:3a:95:ea:e9:12:76:d1:42:6c:4e:4b:
de:00:2f:8f:34:85:40:1e:2c:be:b6:ce:83:a9:a1:
0e:49:da:ba:bc:71:29:8f:a3:cb:25:40:fb:8e:14:
2c:dd:36:7e:0b:a4:27:7b:57:c2:1d:b9:60:92:8a:
dd:41:db:6e:6e:54:6b:49:e6:36:17:a9:e2:7e:a2:
3b:74:ce:c8:5b:43:db:f3:1b:0f:1f:7e:f2:e0:c6:
b1:72:a1:3a:10:05:a5:74:66:58:49:84:ef:82:42:
5b:5c:89:cc:51:c7:d7:3e:79:d7:73:6a:69:91:b7:
d9:53:65:39:ee:4f:e4:76:c5:80:08:ba:d9:31:a6:
bc:2c:a0:00:3a:40:af:f2:c7:0c:43:80:73:e3:6b:
e1:0f:1d:88:6b:a3:93:19:34:d5:83:6d:a4:2d:78:
c2:6b:fb:32:8b:38:8b:77:e3:5b:0a:f9:bc:c1:2c:
37:ba:f1:84:d8:6f:85:34:6c:79:6f:57:88:b2:5b:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:08:ED:2F:54:17:F8:46:36:73:2A:63:01:77:23:E0:19:A4:EA
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36372e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.67.0/24
Signature Algorithm: sha256WithRSAEncryption
05:17:eb:f9:5a:22:c6:8a:94:10:72:c9:59:7e:34:71:9e:8b:
f5:0b:c5:3f:29:53:a3:51:4d:3e:ea:97:98:3a:d6:b1:5e:b9:
dc:a1:b3:04:ca:7c:e0:f3:c7:d8:6c:b5:a4:f5:d5:52:20:d4:
e8:23:51:cc:98:0b:4a:e3:bc:69:36:4f:6a:d9:2c:4d:84:f3:
71:70:d2:08:02:1d:f1:8b:b2:b0:73:f1:f2:01:e7:62:98:c8:
bb:1d:90:cd:47:a5:22:8d:c0:d0:0e:16:b4:69:3c:ad:33:dd:
b8:f0:13:c3:1b:e3:5d:ec:b8:9d:27:d0:a4:36:29:69:1c:dc:
83:1d:bb:6b:c2:fc:a6:6e:67:d9:9c:61:40:1a:04:88:d5:5e:
a0:65:de:e5:c1:44:c8:3d:40:90:14:73:d5:29:d8:27:e3:d9:
4c:58:1f:10:14:fe:d0:4f:1e:97:3e:54:8c:77:5e:c9:0d:53:
ae:64:f9:7a:34:ec:81:0f:2b:39:1d:fb:5c:1e:11:0d:0e:3e:
09:0f:85:06:db:b8:21:fb:56:31:73:e8:44:9b:32:2f:ad:6e:
03:4b:6d:39:a7:86:50:86:b6:4a:80:07:f3:66:79:08:e3:be:
9c:28:ff:fc:8f:e0:6e:04:4b:42:8a:33:0a:42:fd:0c:78:9f:
90:1e:e7:c7
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUHY8VIFZaH6ZI4A+KqHjMVTcIyw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMxNjM5NTRaFw0yNTEyMDIxNjQ0NTRaMDMxMTAvBgNV
BAMTKDUxRkIwOEVEMkY1NDE3Rjg0NjM2NzMyQTYzMDE3NzIzRTAxOUE0RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDevv5x/NpV1GvlErqD5ObIGLnQ
QIOva/+WODsTmj2n35fnhX7ON256LsURDbeOyPn7oU+j1iVqc3C0orckLWk6lerp
EnbRQmxOS94AL480hUAeLL62zoOpoQ5J2rq8cSmPo8slQPuOFCzdNn4LpCd7V8Id
uWCSit1B225uVGtJ5jYXqeJ+ojt0zshbQ9vzGw8ffvLgxrFyoToQBaV0ZlhJhO+C
QltcicxRx9c+eddzammRt9lTZTnuT+R2xYAIutkxprwsoAA6QK/yxwxDgHPja+EP
HYhro5MZNNWDbaQteMJr+zKLOIt341sK+bzBLDe68YTYb4U0bHlvV4iyWwA5AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUUfsI7S9UF/hGNnMqYwF3I+AZpOowHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWVjNmVlZjktNzEzYy00ZTZiLWIy
YmMtNGMwNDUyODkwMzQ1LzAvMzEzMDMzMmUzMTMwMmUzNjM3MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCkMwDQYJKoZIhvcNAQEL
BQADggEBAAUX6/laIsaKlBByyVl+NHGei/ULxT8pU6NRTT7ql5g61rFeudyhswTK
fODzx9hstaT11VIg1OgjUcyYC0rjvGk2T2rZLE2E83Fw0ggCHfGLsrBz8fIB52KY
yLsdkM1HpSKNwNAOFrRpPK0z3bjwE8Mb413suJ0n0KQ2KWkc3IMdu2vC/KZuZ9mc
YUAaBIjVXqBl3uXBRMg9QJAUc9Up2Cfj2UxYHxAU/tBPHpc+VIx3XskNU65k+Xo0
7IEPKzkd+1weEQ0OPgkPhQbbuCH7VjFz6ESbMi+tbgNLbTmnhlCGtkqAB/NmeQjj
vpwo//yP4G4ES0KKMwpC/Qx4n5Ae58c=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:48 2025 by rpki-client