Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31332e302f32342d3234203d3e203435373237.roa
File: 3131362e3230362e31332e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier: xpxNj9pWlqCY8wGDPZt4QavQTvUS0uqmFzzlp3UiM8o=
Subject key identifier: FF:D4:F0:78:87:DE:01:0D:90:BB:03:E9:8C:9E:EC:CB:C8:CF:E7:5B
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2571BE0836FBE9EEDC93A51914635CA1052FE712
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31332e302f32342d3234203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 17:07:41 +0000
ROA not before: Tue 03 Dec 2024 17:02:41 +0000
ROA not after: Tue 02 Dec 2025 17:07:41 +0000
asID: 45727
IP address blocks: 116.206.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:71:be:08:36:fb:e9:ee:dc:93:a5:19:14:63:5c:a1:05:2f:e7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:02:41 2024 GMT
Not After : Dec 2 17:07:41 2025 GMT
Subject: CN=FFD4F07887DE010D90BB03E98C9EECCBC8CFE75B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:37:c9:25:12:16:35:ff:39:8c:d0:e1:d3:
5e:cd:14:a0:fc:0d:b9:18:de:ac:41:c0:f6:a2:6d:
bf:16:64:4f:3c:0e:e3:fd:60:fd:61:31:26:bb:71:
d3:67:88:32:3d:2e:30:a2:6b:44:f9:d5:44:e5:1b:
b6:23:b4:cf:d5:b5:8b:9b:e5:bd:7c:27:21:8e:af:
26:e1:9a:c2:e4:d0:c2:74:e1:f3:08:f2:23:21:0d:
e8:40:38:67:11:b8:f5:36:e2:a9:47:02:49:43:55:
6e:66:22:32:03:7f:0b:38:8e:20:2e:30:56:89:a2:
d0:bd:41:01:d2:f8:ad:ac:d2:34:dd:37:57:b1:de:
ac:0a:e3:15:a0:86:ac:62:bf:ff:65:77:1e:1e:28:
86:ec:2d:12:99:de:43:19:5e:59:8c:98:58:cb:76:
90:32:8f:33:bc:2f:dd:ea:c1:49:26:8b:12:a5:bd:
0f:e5:3f:71:b1:c2:f9:d7:85:a4:c4:fe:80:4e:08:
c2:ab:1e:e3:98:2e:9d:02:e9:49:4c:6d:19:ed:ba:
f6:c9:70:96:ae:2f:54:03:c1:c1:bf:d4:98:0a:67:
ad:c7:85:cd:fb:50:14:6a:1e:0b:22:56:7f:56:c0:
bf:7f:9c:ae:52:d4:1c:e5:b6:47:9d:fb:89:d8:da:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D4:F0:78:87:DE:01:0D:90:BB:03:E9:8C:9E:EC:CB:C8:CF:E7:5B
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31332e302f32342d3234203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:14:b6:3a:9f:ab:cb:da:af:06:2f:48:c3:4e:19:f3:28:ed:
82:25:a7:ae:6f:73:50:85:a1:dd:16:cd:8e:e8:3d:12:51:d8:
d1:4c:7b:79:a4:62:db:ac:57:96:f6:d8:63:96:cc:e8:3b:15:
e3:40:38:db:f9:1b:ca:3b:ca:9c:ce:3e:a9:99:b5:47:73:bf:
ac:1f:d1:2e:8f:14:cc:50:17:98:a4:39:3b:87:4c:64:59:f1:
a4:cd:eb:97:a4:80:17:02:31:61:20:1b:f0:e2:58:ab:17:a9:
29:c3:7e:63:95:b7:e4:cc:6a:d8:95:c8:bd:32:68:e7:35:b9:
9d:72:00:06:d0:91:be:67:a0:21:f8:28:43:b5:9b:19:85:0e:
7c:01:45:44:05:b7:9e:77:84:ec:f7:5e:e8:da:bb:bd:38:b4:
d2:dd:15:c3:38:50:d3:f5:eb:e4:5d:c8:08:e8:83:f5:9d:9a:
c4:58:9e:fd:21:03:98:11:d2:0b:f5:17:62:e2:e3:16:a2:64:
ba:cb:fe:e5:7a:6b:6f:96:dd:4e:e8:b9:11:71:32:e2:1f:b3:
12:f0:08:bd:d8:77:7f:45:70:4c:23:f2:82:27:c0:bf:8a:c2:
70:06:3f:31:93:7b:f2:28:d1:93:71:82:48:04:6c:3b:fa:ca:
4c:73:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:45 2025 by rpki-client