Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e32392e302f32342d3234203d3e203435373237.roa
File: 3131362e3230362e32392e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier: XbQ7QoLWm/zwN6pqLaFrNcT+YdmWAKDt1PIsU0HzpI4=
Subject key identifier: 3F:74:59:82:4C:E0:C9:64:57:56:6D:45:71:9F:AB:8E:00:02:52:28
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 7A69FBF79643BA6CAE4795782099C35490262F69
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e32392e302f32342d3234203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 17:09:00 +0000
ROA not before: Tue 03 Dec 2024 17:04:00 +0000
ROA not after: Tue 02 Dec 2025 17:09:00 +0000
asID: 45727
IP address blocks: 116.206.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:69:fb:f7:96:43:ba:6c:ae:47:95:78:20:99:c3:54:90:26:2f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:04:00 2024 GMT
Not After : Dec 2 17:09:00 2025 GMT
Subject: CN=3F7459824CE0C96457566D45719FAB8E00025228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:03:9a:64:09:74:e0:69:1f:92:52:1e:ff:
af:ac:31:ff:67:57:c9:6f:30:bd:0e:0a:2a:f1:8e:
71:f2:12:70:6a:78:86:64:2a:97:a9:af:af:95:07:
4e:ca:f1:bd:76:c9:7f:eb:f7:cd:da:55:96:c4:e2:
f5:23:30:2e:be:de:fa:da:74:1d:7d:2b:8f:64:78:
79:85:69:fd:b9:45:f4:21:23:bf:d2:81:4e:14:da:
8a:71:29:da:87:fb:12:ba:1f:00:e7:81:dc:77:8e:
49:1a:2d:e6:7a:6f:fa:9f:65:9a:a2:7f:f9:90:8f:
69:b0:89:fb:46:c1:5b:0c:ca:55:2f:52:41:5e:50:
58:17:92:bf:b1:c2:10:a4:cb:d8:07:c8:ba:08:a5:
b5:93:36:8f:8c:86:1e:ef:c2:42:25:12:14:7b:c8:
07:94:e7:94:2a:6a:19:f1:bb:a9:4e:5e:7e:8c:72:
57:bb:da:10:3e:e3:a0:3a:5d:ed:ec:e1:22:67:34:
4c:a7:cc:51:bc:de:d5:07:d8:43:c6:52:30:17:e3:
63:f9:2a:b8:17:b8:ef:58:4d:48:e4:a5:b0:61:03:
56:6e:73:2c:04:53:61:6b:3c:2d:cc:ef:8c:9d:61:
7d:e1:d5:cb:1d:6a:4b:b9:cb:7b:c7:0a:6c:da:87:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:74:59:82:4C:E0:C9:64:57:56:6D:45:71:9F:AB:8E:00:02:52:28
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e32392e302f32342d3234203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.29.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ae:27:f0:bd:77:e9:3a:8d:c3:58:da:0e:51:3a:bc:5c:4d:
73:f1:93:df:3e:39:75:ff:af:80:c5:4c:10:cd:0a:eb:34:c1:
e8:26:43:7d:9c:3d:db:60:72:ff:27:52:ef:10:73:39:e0:2b:
03:fa:df:98:09:30:d1:03:08:91:e4:34:8a:9f:9c:b1:8b:a4:
22:15:a1:11:f6:75:f6:da:45:44:34:2e:3a:dc:04:9b:61:5e:
0d:c6:56:ba:07:e6:fb:89:41:f3:12:ab:d8:57:92:31:ad:87:
ee:48:10:88:be:eb:7d:1e:13:b0:c6:b6:be:b4:65:25:29:53:
4c:c0:49:62:83:50:6a:ef:4d:e5:79:e7:d0:29:67:c0:4b:69:
59:41:53:ac:ca:f1:26:19:ed:6d:d3:6b:15:31:99:b2:ac:b2:
ec:a5:5a:79:e2:f3:e0:5a:25:99:8b:c6:55:1a:28:18:6d:12:
4b:29:33:8a:90:18:74:b4:dd:95:58:94:11:b8:c2:54:4f:3c:
83:19:49:c3:50:6b:c4:9f:52:7a:7e:9d:82:2d:99:c0:97:33:
ee:ba:0c:09:c8:ef:fa:5f:e5:d6:bd:89:4f:96:7e:65:c5:49:
3f:e1:69:cb:c0:f6:2d:73:8d:a7:99:52:9d:f3:13:f5:ec:25:
88:20:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:08:53 2025 by rpki-client