Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e34322e302f32342d3234203d3e2034373631.roa
File: 3131362e3230362e34322e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: 2pTEtfhJSDGq3tg+j19JFkdt1lBdrt1U/QSOa1ILWFg=
Subject key identifier: BE:72:A3:3A:86:38:9C:91:BD:9E:E6:E3:CE:66:16:49:FC:31:A6:52
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 3BE11AFD8EF008C977472493202115566CC25FDE
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e34322e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 17:16:35 +0000
ROA not before: Tue 03 Dec 2024 17:11:35 +0000
ROA not after: Tue 02 Dec 2025 17:16:35 +0000
asID: 4761
IP address blocks: 116.206.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:e1:1a:fd:8e:f0:08:c9:77:47:24:93:20:21:15:56:6c:c2:5f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:11:35 2024 GMT
Not After : Dec 2 17:16:35 2025 GMT
Subject: CN=BE72A33A86389C91BD9EE6E3CE661649FC31A652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:89:23:53:81:50:a3:ee:75:e5:78:42:c4:
25:28:8a:6c:78:8e:99:96:11:68:bb:41:ca:8a:d0:
12:11:c6:6a:7a:4a:ee:e1:37:13:d6:f1:36:7d:82:
7a:7a:ae:4b:b3:77:9c:81:c5:af:54:bc:ac:c6:7b:
d3:80:32:8f:e3:ba:48:8f:a1:b1:14:86:9c:89:fa:
d7:d5:6e:88:7f:a7:31:e8:a8:90:18:d4:5f:f9:10:
20:db:78:ff:79:c0:d3:1c:82:3a:a5:ff:5e:1b:fe:
c3:6e:15:e8:43:81:72:36:b9:3e:0f:30:3d:64:e0:
44:ab:b8:fb:9c:59:8f:d7:fc:81:68:a4:8e:d1:4b:
40:80:60:e9:0a:e8:cd:80:99:82:38:47:4a:e5:b4:
20:0f:6f:56:44:24:b4:a5:94:e3:20:af:20:ea:e6:
3e:1e:51:bd:bb:a4:a5:6a:64:0a:2a:92:92:90:6e:
32:9b:c7:5a:67:51:76:d5:bb:87:57:1e:31:61:82:
e1:db:94:60:16:ff:ec:c6:03:50:bd:f4:61:b0:2c:
46:31:f2:f2:5f:a2:d7:85:dc:25:fe:f4:ec:2a:1a:
05:8b:73:c3:c9:db:ce:93:0e:d0:45:93:bc:64:93:
be:6b:11:14:f6:2e:22:04:da:7b:69:0c:31:fd:cf:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:72:A3:3A:86:38:9C:91:BD:9E:E6:E3:CE:66:16:49:FC:31:A6:52
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e34322e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5e:83:4e:ff:87:9c:8d:8b:5c:ad:87:7b:8f:d8:47:0a:e7:
4a:99:c6:ed:8f:7b:81:ee:5c:57:ec:4d:e3:eb:2b:70:d9:2a:
74:48:25:05:3a:24:e2:2f:3c:8c:63:dd:4e:6f:23:32:23:5d:
a0:4c:f7:be:d1:84:0a:c0:db:fe:e0:c2:fb:03:46:16:73:04:
e8:c6:5c:c3:bc:ba:27:7d:eb:25:da:f7:7e:22:a3:c5:d1:dd:
35:95:3b:19:30:e0:c8:b9:48:23:49:03:cc:8a:f2:85:ca:1b:
f3:f3:55:f6:eb:67:27:0d:84:4b:c9:44:ab:82:d6:24:37:9e:
09:a8:0a:60:ec:c7:5e:6f:d0:ce:4c:0d:db:a8:02:18:08:b5:
97:83:00:b9:a0:e2:83:78:df:18:76:50:15:60:2e:23:e1:d4:
2c:4f:32:2c:56:bd:59:0a:a8:ac:05:a3:55:ad:28:6a:23:ba:
33:2a:36:f5:fc:e9:0f:64:b7:37:0a:2e:fa:b1:c0:79:37:cf:
eb:f5:61:f1:2d:71:68:7e:e7:fc:71:68:30:76:4b:cc:0c:26:
18:8e:e9:ac:94:31:fb:f1:15:73:cd:19:7c:94:c5:6e:bb:95:
99:ce:ab:16:a9:d6:f7:85:af:1c:9b:06:b9:17:34:1e:cb:6f:
79:c8:a7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:26:12 2025 by rpki-client