Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e392e302f32342d3234203d3e2034373631.roa
File: 3131362e3230362e392e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: x3HGEVUuC7N8rvuR19VDSc+QXdn3Vl7ovhiPoOdlsaM=
Subject key identifier: 69:04:E9:44:AD:EA:F9:2B:BA:4C:53:6F:BB:3D:6A:82:AE:BB:83:1D
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 7D6D4F25D3CC29D86BDFD7ED3C15E3A55246B5F7
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e392e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 16:58:19 +0000
ROA not before: Tue 03 Dec 2024 16:53:19 +0000
ROA not after: Tue 02 Dec 2025 16:58:19 +0000
asID: 4761
IP address blocks: 116.206.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6d:4f:25:d3:cc:29:d8:6b:df:d7:ed:3c:15:e3:a5:52:46:b5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:53:19 2024 GMT
Not After : Dec 2 16:58:19 2025 GMT
Subject: CN=6904E944ADEAF92BBA4C536FBB3D6A82AEBB831D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:fd:aa:4e:f9:2e:03:24:62:03:d1:4f:f1:
17:96:2c:98:27:fe:12:54:74:34:21:1e:01:45:64:
43:dd:bb:10:5c:d9:4e:c2:d2:6a:f2:c1:0f:be:8f:
97:7a:4d:7b:9d:8a:67:75:fe:1a:8c:14:30:49:d6:
a6:61:a0:d8:06:7a:e3:ae:bc:8e:87:cd:9a:8a:37:
cf:ad:9a:4f:01:12:62:0f:fa:3a:a2:8a:1f:80:5b:
15:d2:62:ec:ca:61:2c:1f:e9:1a:cd:a5:99:78:aa:
12:bf:c6:b4:07:6a:7e:71:2f:f6:7e:c8:3d:1b:6a:
d1:20:f3:53:49:6a:a8:17:1e:ee:85:af:ec:71:b4:
d7:90:49:86:24:cb:b4:83:79:06:ab:00:ea:c7:1e:
d2:f4:a5:ed:ab:b8:57:95:49:15:1f:f1:0b:97:15:
0c:f4:31:41:27:c6:4c:8d:51:4d:95:44:ae:61:27:
8d:17:dc:00:c7:ba:b9:36:da:bb:f0:92:00:39:80:
15:b2:cc:02:c5:ea:6d:10:6c:58:c9:d0:f0:da:75:
c6:04:e3:9a:3f:14:f2:3c:4f:7d:cc:8b:52:44:ed:
91:2b:b1:95:90:5c:c1:40:ea:cd:55:dc:97:a6:fe:
bf:b2:ce:42:4f:59:d4:bf:c2:21:3d:62:f3:32:41:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:04:E9:44:AD:EA:F9:2B:BA:4C:53:6F:BB:3D:6A:82:AE:BB:83:1D
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e392e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ca:1e:0a:6b:21:e9:b4:20:a0:1b:e1:90:c5:04:bf:86:59:
d7:4c:9b:34:f5:1f:74:13:4e:b7:38:49:81:b3:ac:97:7e:bf:
ab:38:ae:87:7b:3b:01:0b:88:17:87:0f:57:e5:3a:5c:b5:66:
c6:26:e7:57:6d:d9:04:73:46:f9:28:6e:b8:8c:79:13:3a:c1:
07:89:7f:bf:50:fc:7e:ad:40:81:a7:5b:dd:af:ae:9e:e4:5c:
8d:c0:17:fc:a5:cd:b1:cf:93:bd:6f:33:a1:b3:33:5e:4c:bc:
0e:07:f1:79:d8:1f:e6:22:a7:ac:f2:7f:33:0d:3d:15:67:83:
48:86:1f:b1:38:fb:f9:a8:c2:06:db:a1:43:17:11:be:ea:7b:
d8:da:0c:60:f9:96:3b:a0:47:de:a1:a4:87:42:ec:f1:24:57:
b9:04:88:c0:d0:1d:03:33:36:0c:18:6c:a5:aa:51:18:aa:1e:
b9:a0:21:3d:c7:92:96:db:21:6b:22:2a:fb:77:9b:c4:ad:f8:
58:b7:6d:48:16:03:07:24:26:3b:3e:15:ef:f3:ae:46:f8:15:
2e:00:d5:67:6f:33:23:b9:84:9b:70:4c:7a:93:57:e2:b7:54:
e4:0b:6a:a9:fc:6d:a8:0b:55:e9:d1:7c:df:b6:e6:3e:1b:b9:
d8:e9:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:19 2025 by rpki-client