Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31312e302f32342d3234203d3e203435373237.roa
File: 3131362e3230362e31312e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier: bu4rtCSL5NGTyg20OmAsVxgc5FAhjfd+9WwYAGvDhDQ=
Subject key identifier: 6A:4F:A5:56:4A:62:E5:6A:EE:E9:B3:F0:3B:58:AB:CF:8C:9C:35:82
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2F1A0F261EF2854B7B67BBBDE610924B185F90B7
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31312e302f32342d3234203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 17:07:23 +0000
ROA not before: Tue 03 Dec 2024 17:02:23 +0000
ROA not after: Tue 02 Dec 2025 17:07:23 +0000
asID: 45727
IP address blocks: 116.206.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1a:0f:26:1e:f2:85:4b:7b:67:bb:bd:e6:10:92:4b:18:5f:90:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:02:23 2024 GMT
Not After : Dec 2 17:07:23 2025 GMT
Subject: CN=6A4FA5564A62E56AEEE9B3F03B58ABCF8C9C3582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:c0:a6:4b:48:4a:ce:1a:a6:02:18:8d:a9:
5e:58:38:49:e1:b0:e1:3f:d7:8e:f1:96:de:6e:39:
b3:67:93:e0:38:26:f3:37:0d:23:75:7a:e6:46:b7:
9f:1c:60:a1:72:46:ca:0f:26:5b:31:c0:d4:97:96:
e5:4e:42:cf:a1:1e:1e:99:e2:6c:72:63:83:57:17:
8b:fe:53:4f:2b:21:44:75:28:8f:62:50:70:44:92:
92:6c:c3:5e:16:ee:19:5e:7d:26:1a:63:6f:df:7c:
7f:c6:7d:ff:45:40:20:27:8b:09:6f:6c:0e:17:1c:
59:b0:e6:cf:12:44:93:68:6f:9d:a6:7b:8a:5a:64:
11:b6:63:5e:c3:54:fe:9a:0f:28:d3:c6:a0:6b:20:
1d:49:2c:f6:a9:45:23:1f:11:9e:a7:51:74:de:27:
45:e0:53:07:fc:9b:d4:bf:5e:27:4d:a9:aa:91:ae:
31:ad:79:1a:31:5c:de:a3:69:63:e9:ed:71:91:eb:
92:99:aa:d6:85:4d:32:54:02:20:a1:f6:2c:7a:b5:
d1:3c:03:20:37:d6:c3:90:4b:ce:eb:7b:17:b2:9b:
0e:7a:f2:e1:79:61:03:0c:13:7e:73:89:7e:d4:4f:
07:c8:4c:94:f2:e0:00:1f:ad:cc:61:5a:b9:e1:53:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:A5:56:4A:62:E5:6A:EE:E9:B3:F0:3B:58:AB:CF:8C:9C:35:82
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31312e302f32342d3234203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.11.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b0:31:8c:8e:a8:39:9c:33:e9:d5:41:f7:4b:56:bb:31:a1:
31:e1:89:12:77:15:2d:fa:17:bb:66:ac:50:7b:bb:88:46:54:
bc:b6:d4:a9:75:95:3d:f2:c8:a0:71:7c:86:90:de:b7:2a:fb:
af:9e:52:94:6c:70:96:68:02:12:05:8c:ea:c6:2e:34:3b:c5:
4e:ce:14:92:d5:6c:e6:72:99:ea:0a:b4:7e:d5:24:71:fc:40:
45:e8:7a:e9:1b:df:9e:a2:40:f1:22:01:88:63:6f:77:62:a2:
d5:9e:3c:fe:ee:db:f7:d4:3b:37:cd:bd:bf:a5:0e:fe:61:c3:
b5:02:21:1b:7a:49:6e:b6:6d:2b:ca:a4:46:c9:4f:00:ea:06:
09:23:4c:10:2b:b0:b9:2a:1d:b7:bd:ac:4f:05:b4:79:f0:33:
8d:9a:a7:47:ad:7d:19:5d:5f:59:05:7a:29:a4:18:33:bc:67:
c4:af:14:ad:bc:16:ff:61:e4:04:6a:b3:80:1b:69:9a:3d:b4:
06:c4:2f:4a:ad:39:6f:7b:63:d4:d1:ed:d2:c0:6c:e4:a6:47:
f4:60:e0:43:b3:ba:16:8a:15:47:04:44:bc:01:cc:c2:c3:9d:
a3:a1:cd:31:c1:dd:e1:36:a0:e1:e1:39:3a:b2:1e:d1:4e:ab:
56:fd:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:37 2025 by rpki-client