Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33332e302f32342d3234203d3e2034373631.roa
File: 3131362e3230362e33332e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: 721CTZCiSz6vkYFt0yacdBhHirIu+l4T4sjp33bfHzY=
Subject key identifier: F5:80:29:87:85:EA:A2:73:B7:8A:10:E2:BC:42:8D:0A:24:18:7C:DA
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 73022042770A65DFE0FEE73382FCC80F82B5AD43
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33332e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 17:12:49 +0000
ROA not before: Tue 03 Dec 2024 17:07:49 +0000
ROA not after: Tue 02 Dec 2025 17:12:49 +0000
asID: 4761
IP address blocks: 116.206.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:02:20:42:77:0a:65:df:e0:fe:e7:33:82:fc:c8:0f:82:b5:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:07:49 2024 GMT
Not After : Dec 2 17:12:49 2025 GMT
Subject: CN=F580298785EAA273B78A10E2BC428D0A24187CDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:b4:f4:fe:ac:63:70:f4:b2:04:58:f0:e7:
7d:06:e2:fa:da:41:17:4e:94:ac:d3:31:7a:6d:1c:
e9:91:6a:a8:08:25:f5:8c:c2:54:4d:38:a8:f6:13:
0f:1d:d1:07:dc:1e:a7:be:90:56:22:9d:43:62:1f:
9a:b2:71:2e:74:89:e8:05:60:71:57:a5:34:41:b0:
44:11:2d:db:6d:bd:5d:07:1f:81:80:d9:d7:33:9d:
95:6d:44:49:ce:ea:2a:9b:97:88:dd:a0:ef:55:b0:
b8:af:23:01:fa:75:05:ad:b1:c7:f9:76:db:0c:dd:
07:0a:99:73:75:26:6e:a7:07:3d:b0:33:b1:ab:b1:
0b:32:7e:49:1b:d3:08:80:d9:39:75:6c:c6:68:49:
1d:8c:d7:20:0d:45:85:88:69:e4:bd:84:1d:88:40:
f2:11:cd:77:43:87:a9:a1:c1:58:fd:22:39:c9:26:
41:dc:5d:9c:38:52:47:fb:9e:5f:a6:96:8c:a3:b5:
3c:a0:46:8a:55:c7:9e:25:39:42:98:72:30:80:5e:
bb:23:84:31:a8:04:5d:1c:7d:b0:2c:31:66:6d:3d:
2b:20:50:5a:69:35:fc:95:9e:25:21:00:42:cd:4c:
a9:80:0b:50:99:e4:82:8f:d8:a5:92:9a:87:10:05:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:29:87:85:EA:A2:73:B7:8A:10:E2:BC:42:8D:0A:24:18:7C:DA
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33332e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.33.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:6b:41:f2:fb:9a:03:47:d4:41:71:29:06:ff:9f:a9:0d:a7:
41:9c:29:20:d6:85:4c:06:6c:27:23:1c:41:ae:ae:43:54:d7:
8d:4a:c1:09:5d:f5:da:34:7a:f5:c1:50:7f:3a:0c:c4:c5:10:
e6:d7:47:b2:01:eb:d8:98:85:ef:33:c3:8f:63:ff:1a:69:23:
09:78:c7:72:41:63:c5:6c:96:b8:92:0e:74:09:76:e0:8f:b9:
47:a6:71:08:c1:51:32:8f:43:91:9c:cb:b3:3f:d4:57:de:0a:
2e:10:ef:c6:64:36:f1:19:76:63:81:ae:8c:22:0a:10:58:4b:
64:c1:b7:70:9a:88:2c:79:f1:79:d2:cf:8d:d7:c8:89:d0:1d:
e7:94:f6:1d:fc:ea:51:33:d0:1a:16:65:a4:85:e7:0c:09:aa:
88:f9:40:ca:4b:99:95:4c:92:1e:00:2c:03:f7:a3:27:0b:4a:
04:54:4d:ed:99:86:b1:b2:c7:49:15:07:78:37:a6:a9:01:58:
fd:c9:fe:a3:be:f0:8f:f5:8f:24:6b:17:b8:17:de:94:04:ef:
99:c0:70:97:16:1e:88:9d:d3:52:36:19:91:11:8e:2e:a3:08:
7f:51:b4:5c:c0:61:86:85:5a:94:c8:58:5a:b5:94:9e:da:60:
cb:12:7b:4d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUcwIgQncKZd/g/uczgvzID4K1rUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMxNzA3NDlaFw0yNTEyMDIxNzEyNDlaMDMxMTAvBgNV
BAMTKEY1ODAyOTg3ODVFQUEyNzNCNzhBMTBFMkJDNDI4RDBBMjQxODdDREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvarT0/qxjcPSyBFjw530G4vra
QRdOlKzTMXptHOmRaqgIJfWMwlRNOKj2Ew8d0QfcHqe+kFYinUNiH5qycS50iegF
YHFXpTRBsEQRLdttvV0HH4GA2dcznZVtREnO6iqbl4jdoO9VsLivIwH6dQWtscf5
dtsM3QcKmXN1Jm6nBz2wM7GrsQsyfkkb0wiA2Tl1bMZoSR2M1yANRYWIaeS9hB2I
QPIRzXdDh6mhwVj9IjnJJkHcXZw4Ukf7nl+mloyjtTygRopVx54lOUKYcjCAXrsj
hDGoBF0cfbAsMWZtPSsgUFppNfyVniUhAELNTKmAC1CZ5IKP2KWSmocQBXEZAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU9YAph4XqonO3ihDivEKNCiQYfNowHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMxMzEzNjJlMzIzMDM2MmUzMzMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0ziEwDQYJKoZIhvcN
AQELBQADggEBAKZrQfL7mgNH1EFxKQb/n6kNp0GcKSDWhUwGbCcjHEGurkNU141K
wQld9do0evXBUH86DMTFEObXR7IB69iYhe8zw49j/xppIwl4x3JBY8VslriSDnQJ
duCPuUemcQjBUTKPQ5Gcy7M/1FfeCi4Q78ZkNvEZdmOBrowiChBYS2TBt3CaiCx5
8XnSz43XyInQHeeU9h386lEz0BoWZaSF5wwJqoj5QMpLmZVMkh4ALAP3oycLSgRU
Te2ZhrGyx0kVB3g3pqkBWP3J/qO+8I/1jyRrF7gX3pQE75nAcJcWHoid01I2GZER
ji6jCH9RtFzAYYaFWpTIWFq1lJ7aYMsSe00=
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:34:44 2025 by rpki-client