Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31342e302f32342d3234203d3e203435373237.roa
File: 3131362e3230362e31342e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier: +kG7FYjj2xuBbprJMlZwowVp6rXU7mjXu4anrMS58Gw=
Subject key identifier: 63:0B:CB:07:E2:54:A1:7C:7C:FE:C0:88:2E:B6:D0:E6:46:6E:32:5B
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 22DC7F04B7B5F1A76B6B1F366895C1FB5CB94FEC
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31342e302f32342d3234203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 17:07:58 +0000
ROA not before: Tue 03 Dec 2024 17:02:58 +0000
ROA not after: Tue 02 Dec 2025 17:07:58 +0000
asID: 45727
IP address blocks: 116.206.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:dc:7f:04:b7:b5:f1:a7:6b:6b:1f:36:68:95:c1:fb:5c:b9:4f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:02:58 2024 GMT
Not After : Dec 2 17:07:58 2025 GMT
Subject: CN=630BCB07E254A17C7CFEC0882EB6D0E6466E325B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:6e:97:80:f5:21:65:18:e7:49:85:30:7d:
5d:7a:fc:47:28:b5:a4:af:ce:14:c1:98:8e:32:b2:
b6:02:66:39:c1:d7:05:ce:a6:2b:1b:eb:63:85:b1:
07:f7:4f:7d:d9:69:fe:55:69:c5:41:56:6c:cc:b8:
03:7c:43:e4:86:69:34:46:f6:54:c1:1d:21:58:2c:
47:72:01:2f:9e:4d:56:6f:e2:f7:9e:54:a8:74:61:
ea:75:56:15:21:b5:1a:fd:bd:b0:61:2c:9b:6a:f5:
7c:3d:9d:e0:fc:12:99:8d:95:81:8c:d6:6d:a3:f8:
4e:84:5f:7a:31:9b:25:b9:ab:ab:03:03:7e:20:c1:
16:42:5c:44:7d:0e:1e:2b:10:2a:b3:35:a4:90:1c:
dc:f5:b1:55:4b:85:1f:f7:e2:e3:d4:d8:82:be:14:
26:f2:3d:2b:37:c6:4c:07:a2:0f:19:70:0f:ac:5d:
8e:bf:22:fe:11:b9:3c:fa:b3:94:b4:33:7b:75:f8:
c4:08:43:7b:f8:50:ae:7f:f7:e5:c9:43:fd:fe:c3:
57:6a:42:19:09:f8:87:86:a6:59:0f:f7:b2:b8:66:
7e:0b:97:17:21:6e:92:88:3c:1c:f4:32:60:5d:e8:
21:68:5b:f6:ed:d3:78:f4:06:c6:a6:b9:bb:92:87:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0B:CB:07:E2:54:A1:7C:7C:FE:C0:88:2E:B6:D0:E6:46:6E:32:5B
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e31342e302f32342d3234203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8d:30:50:c2:0e:16:05:1f:06:4d:50:87:03:5d:c1:3f:4e:
92:5f:dc:fd:bc:10:44:4f:f6:98:c7:af:d6:70:1f:e3:c1:f3:
03:78:4e:6d:65:51:dd:14:3c:6c:21:5e:d3:7f:49:bc:e2:83:
38:a0:48:8e:26:b1:ef:7c:6f:15:d4:0a:e7:2e:9e:c5:5d:53:
e9:ce:0d:68:b2:b6:42:06:16:1d:19:51:a9:81:30:4a:95:ef:
c7:43:88:ca:2b:9e:3f:fd:20:ea:1e:e4:92:e8:01:51:f9:9c:
58:a9:88:c5:39:8a:d3:b0:61:71:9f:63:a5:76:2f:66:d5:ad:
0f:44:c8:18:0a:33:fb:94:c1:ca:3c:10:fd:e8:ac:98:31:c5:
43:6f:7d:65:42:88:d1:40:c1:8e:4a:97:b2:07:34:fb:c7:c8:
90:95:af:aa:9d:52:06:1d:cf:14:48:83:31:09:39:85:00:9f:
19:95:a0:63:86:37:bb:69:8a:b9:f9:86:23:0f:b1:00:d9:37:
e8:a0:b3:32:74:ba:ac:f9:c2:49:09:c4:15:4e:27:7c:5a:28:
36:61:dd:8b:2d:21:91:ae:58:41:09:40:03:2b:7b:74:fe:e8:
58:38:74:3d:7b:6b:9b:02:4c:dc:41:70:03:d9:58:ef:53:f3:
64:06:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:46 2025 by rpki-client