Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e382e302f32342d3234203d3e2034373631.roa
File: 3131362e3230362e382e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: 1b9+USIvSCB9A5qaetfWGrMxl444uRNPwu94J/yd9IU=
Subject key identifier: 4D:8D:55:63:FE:70:A6:55:85:9C:CA:32:16:D2:E8:73:58:FA:8F:69
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 65664003F1E40A93414E862FF96CF28ED5C20C6E
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e382e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 16:58:05 +0000
ROA not before: Tue 03 Dec 2024 16:53:05 +0000
ROA not after: Tue 02 Dec 2025 16:58:05 +0000
asID: 4761
IP address blocks: 116.206.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:66:40:03:f1:e4:0a:93:41:4e:86:2f:f9:6c:f2:8e:d5:c2:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:53:05 2024 GMT
Not After : Dec 2 16:58:05 2025 GMT
Subject: CN=4D8D5563FE70A655859CCA3216D2E87358FA8F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:e8:58:9a:7c:4e:db:7b:b1:2f:81:ac:0a:
af:7c:f3:16:db:37:7a:71:eb:47:62:5e:22:51:d6:
a5:33:7f:a9:6d:7d:cc:7d:a6:44:a8:53:60:bd:44:
a9:b6:7a:29:68:d0:86:45:aa:94:94:03:62:41:29:
1d:1a:14:9b:7e:33:b4:5e:7c:2e:41:da:e5:b0:36:
da:ef:35:cb:64:da:c4:05:5b:93:12:80:88:dd:b6:
76:84:73:c2:89:29:c8:5b:f6:4f:bf:2d:25:a1:2b:
33:28:87:73:d9:3f:64:c5:41:9e:0d:6b:b2:45:24:
5b:db:ac:21:63:39:cf:5e:67:99:32:bc:11:d6:4c:
31:9b:79:58:e7:a7:42:ab:92:21:44:0b:d1:4e:1c:
d6:8c:5b:cc:8f:a4:62:2d:c9:3d:be:2c:b9:20:8a:
68:f6:29:86:c8:db:c2:89:62:25:b8:b2:49:f1:0e:
12:93:31:16:89:bd:7b:c9:fc:a4:f2:62:99:33:40:
e5:64:50:22:d0:05:a8:96:20:e5:60:9c:0f:35:8a:
d9:23:7a:4c:d7:87:f1:83:89:ad:38:8b:43:00:29:
21:f9:2d:df:ef:96:fb:5d:00:61:a4:e9:38:15:cf:
4b:28:19:8b:5d:f2:fb:23:48:e8:58:31:ee:38:eb:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8D:55:63:FE:70:A6:55:85:9C:CA:32:16:D2:E8:73:58:FA:8F:69
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e382e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.8.0/24
Signature Algorithm: sha256WithRSAEncryption
59:84:16:2c:fb:bb:ff:86:e0:20:03:ba:b4:e5:8b:6f:9b:f5:
52:3e:66:e1:62:12:94:ea:ac:65:d5:dc:0c:4e:96:93:5f:5e:
e5:2d:23:6d:8e:38:5c:a3:4e:78:49:25:f8:4e:3d:35:61:21:
b3:59:41:2f:e5:ba:81:f3:fb:f3:e5:2c:68:a9:d5:3e:99:8c:
f8:d8:ec:7e:f5:91:62:7c:cb:ec:88:a7:06:ff:84:27:d6:be:
7f:fb:52:63:62:ab:71:ec:53:fe:8a:18:0b:bc:72:67:e8:2a:
65:d6:a3:f9:92:c4:24:7d:68:21:30:56:89:4c:b6:fd:2c:bb:
a0:98:04:76:f4:10:d9:48:3b:22:06:e5:09:93:fa:55:46:a8:
54:08:78:b0:22:48:fe:41:b1:60:f7:c7:8b:fe:e6:6a:76:82:
50:80:6a:39:11:07:67:13:46:dd:b8:e0:45:78:0c:ed:80:32:
59:a8:02:49:d2:ea:0c:3f:f4:94:57:6a:68:64:01:42:6b:e4:
d1:63:67:fd:82:5b:a6:5e:9d:4d:5d:c8:91:ce:54:7a:b7:64:
6d:ea:85:63:6e:6a:e0:2b:3a:fd:32:01:e7:8b:18:12:c0:fe:
3f:98:e2:40:68:c5:bd:1e:6f:ff:07:74:66:30:0e:9f:22:c5:
73:d4:da:ab
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUZWZAA/HkCpNBToYv+WzyjtXCDG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMxNjUzMDVaFw0yNTEyMDIxNjU4MDVaMDMxMTAvBgNV
BAMTKDREOEQ1NTYzRkU3MEE2NTU4NTlDQ0EzMjE2RDJFODczNThGQThGNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwBehYmnxO23uxL4GsCq988xbb
N3px60diXiJR1qUzf6ltfcx9pkSoU2C9RKm2eilo0IZFqpSUA2JBKR0aFJt+M7Re
fC5B2uWwNtrvNctk2sQFW5MSgIjdtnaEc8KJKchb9k+/LSWhKzMoh3PZP2TFQZ4N
a7JFJFvbrCFjOc9eZ5kyvBHWTDGbeVjnp0KrkiFEC9FOHNaMW8yPpGItyT2+LLkg
imj2KYbI28KJYiW4sknxDhKTMRaJvXvJ/KTyYpkzQOVkUCLQBaiWIOVgnA81itkj
ekzXh/GDia04i0MAKSH5Ld/vlvtdAGGk6TgVz0soGYtd8vsjSOhYMe446937AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUTY1VY/5wplWFnMoyFtLoc1j6j2kwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWVjNmVlZjktNzEzYy00ZTZiLWIy
YmMtNGMwNDUyODkwMzQ1LzAvMzEzMTM2MmUzMjMwMzYyZTM4MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0zggwDQYJKoZIhvcNAQEL
BQADggEBAFmEFiz7u/+G4CADurTli2+b9VI+ZuFiEpTqrGXV3AxOlpNfXuUtI22O
OFyjTnhJJfhOPTVhIbNZQS/luoHz+/PlLGip1T6ZjPjY7H71kWJ8y+yIpwb/hCfW
vn/7UmNiq3HsU/6KGAu8cmfoKmXWo/mSxCR9aCEwVolMtv0su6CYBHb0ENlIOyIG
5QmT+lVGqFQIeLAiSP5BsWD3x4v+5mp2glCAajkRB2cTRt244EV4DO2AMlmoAknS
6gw/9JRXamhkAUJr5NFjZ/2CW6ZenU1dyJHOVHq3ZG3qhWNuauArOv0yAeeLGBLA
/j+Y4kBoxb0eb/8HdGYwDp8ixXPU2qs=
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:28:09 2025 by rpki-client