Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33312e302f32342d3234203d3e2034373631.roa
File: 3131362e3230362e33312e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: H/tHW/XnsBFEyrZAa+R6zeyNnO9/LZOgAKVJ2Jl8IZg=
Subject key identifier: D4:82:15:29:6C:C8:3F:67:24:5B:43:01:82:BE:C8:0C:48:29:26:B0
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 3259CE972856CA7C5641E4ABA7AAA6EB30C66E5A
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33312e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 17:10:02 +0000
ROA not before: Tue 03 Dec 2024 17:05:02 +0000
ROA not after: Tue 02 Dec 2025 17:10:02 +0000
asID: 4761
IP address blocks: 116.206.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:59:ce:97:28:56:ca:7c:56:41:e4:ab:a7:aa:a6:eb:30:c6:6e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:05:02 2024 GMT
Not After : Dec 2 17:10:02 2025 GMT
Subject: CN=D48215296CC83F67245B430182BEC80C482926B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:6a:4a:b6:d5:1b:f6:1d:da:f5:34:a4:be:
a0:1a:85:0d:b2:ae:ac:20:c6:63:db:3c:dc:b2:50:
de:96:08:81:d4:27:42:6f:7d:99:43:96:c8:ed:d3:
21:b2:72:bc:10:4c:ae:6e:67:9a:24:c2:66:fc:50:
ff:d3:83:35:f8:1e:b9:f4:2a:ce:73:cd:4a:0c:8c:
2a:23:e4:05:4f:cc:9b:91:d9:10:1e:7e:04:5b:85:
5f:a4:02:eb:93:47:b0:53:8c:f2:3f:0f:9f:cd:ec:
3c:d0:0f:c9:ad:3e:e6:9b:33:11:aa:88:33:25:5a:
bc:24:ff:c8:8e:ce:47:19:36:83:a8:fb:8a:dd:8e:
11:b1:4e:de:ca:e0:3b:97:01:03:c1:09:28:5a:7e:
42:4c:1e:00:93:3f:08:4f:50:16:d4:81:72:92:ea:
6a:62:b5:c4:f8:2c:d2:31:8d:1a:02:f4:72:1d:ee:
18:ad:e5:13:f5:77:18:d9:23:0e:7d:76:8e:13:80:
cd:e6:4f:19:51:98:e7:37:68:74:0c:6e:db:ae:aa:
b4:e0:b8:e4:94:7f:06:93:8b:cf:04:3a:cf:78:94:
46:1f:2d:95:d5:52:8c:73:70:fc:4b:15:bb:39:94:
0f:0d:a3:7a:48:4e:bd:95:1e:52:d9:32:00:39:5c:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:82:15:29:6C:C8:3F:67:24:5B:43:01:82:BE:C8:0C:48:29:26:B0
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33312e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.31.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c6:4f:fb:08:a2:bc:f3:14:d1:c6:3d:fb:03:16:aa:58:66:
bc:ad:5a:35:e1:c4:af:f7:04:fd:80:f2:bd:6e:e0:58:93:1d:
6a:12:01:6d:c2:1d:fa:7b:6a:82:84:22:d4:e1:a7:2a:3f:28:
c5:a1:dc:76:12:30:1e:88:84:fe:fe:c6:45:ca:b4:ba:94:20:
26:91:4a:a1:81:81:23:34:e3:1f:bc:b6:97:2c:5f:1a:97:81:
4c:5f:cd:9b:30:2a:69:59:29:71:3f:fd:c2:9d:7e:46:f2:ec:
b6:74:e0:09:ba:50:31:66:1a:a3:5d:0f:e4:53:fd:bf:ff:00:
b0:f4:1a:4c:b3:09:39:4a:06:04:9f:2c:98:01:3c:bf:e8:ee:
00:65:6b:53:81:d3:b9:54:22:9a:cc:3c:ed:7c:d6:74:25:9d:
ac:1d:bf:01:c1:04:f4:f7:ca:4b:58:69:42:de:3a:c2:40:db:
cb:04:17:37:5e:26:eb:a8:32:36:d0:1f:15:31:50:b1:70:eb:
c8:3a:4a:7f:b5:c3:a6:1f:2d:c3:4b:33:9b:6e:04:c2:12:81:
e1:60:de:13:b7:dc:5c:b1:65:7c:03:82:f8:89:15:18:37:51:
b4:95:29:41:85:03:f4:6b:54:3b:e9:d5:ba:9e:75:40:35:fc:
2d:45:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:30 2025 by rpki-client