Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36352e302f32342d3234203d3e2034373631.roa
File: 3130332e31302e36352e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: mPpGWTu0ptFbPfzEP58QglvMEToF2B9Q7h/cBr5loXQ=
Subject key identifier: A2:0E:AF:5B:64:8D:7F:EE:E8:D2:B6:37:87:78:B5:B9:7E:CD:11:DA
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2477045C420AC2260C3064CE2BECD5DC73FA2FC1
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36352e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 10:13:29 +0000
ROA not before: Tue 03 Dec 2024 10:08:29 +0000
ROA not after: Tue 02 Dec 2025 10:13:29 +0000
asID: 4761
IP address blocks: 103.10.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:77:04:5c:42:0a:c2:26:0c:30:64:ce:2b:ec:d5:dc:73:fa:2f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 10:08:29 2024 GMT
Not After : Dec 2 10:13:29 2025 GMT
Subject: CN=A20EAF5B648D7FEEE8D2B6378778B5B97ECD11DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:a1:0e:9f:b4:e7:08:31:22:87:a2:3c:b5:
6c:76:65:99:58:bc:f7:0e:7c:c8:67:c6:87:86:8b:
06:a5:5f:f7:d8:b9:68:16:17:55:03:9b:36:3c:77:
f5:e5:c0:52:19:84:fd:67:07:9d:07:3f:99:73:14:
40:97:df:42:a8:b6:94:5a:b3:4e:48:87:ec:61:17:
28:35:bf:40:a5:5d:69:63:79:3a:38:dc:f3:49:9d:
af:a0:1e:b9:b1:06:fc:c3:66:9e:96:18:58:87:42:
db:b8:d2:b4:e6:02:9d:43:6e:54:89:bd:e5:9a:12:
a3:c5:6d:9c:6e:ea:42:f4:e4:61:71:25:1c:11:c1:
8d:20:ff:cb:0a:95:7d:c5:5b:a3:4c:83:5e:dd:f0:
0a:2b:8c:e5:02:b5:17:54:ad:1b:ab:b1:4a:0e:d3:
40:7d:96:d3:42:cf:c9:86:2d:3f:4b:5c:fa:21:2a:
3a:79:96:91:01:7d:a6:2c:69:cc:15:c3:f0:75:e4:
8b:ea:5b:fb:b4:df:eb:ea:2d:45:dc:36:70:6c:38:
f2:bc:78:9d:1a:f5:8b:86:2e:fe:23:af:40:e8:a9:
8a:90:0c:80:b1:6d:8b:6f:f2:8c:27:7c:bb:79:71:
19:70:f5:7d:74:8d:ed:c3:85:d4:ed:66:29:73:33:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0E:AF:5B:64:8D:7F:EE:E8:D2:B6:37:87:78:B5:B9:7E:CD:11:DA
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36352e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.65.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d5:fc:20:66:ec:9e:48:10:7a:7b:1a:fb:a4:00:11:6a:4e:
26:84:38:d1:1e:1c:6a:72:a0:ae:6c:87:d3:f8:5a:93:e4:ff:
5b:b4:f8:9c:d3:da:56:08:90:d9:93:46:d6:89:6c:a6:d9:31:
a5:9c:07:c4:87:62:27:ea:8f:e2:89:1a:d5:9a:47:82:50:9b:
a9:84:b0:3d:4b:60:37:73:1c:93:e0:f8:e0:40:88:e0:e5:7c:
53:00:86:39:1a:23:01:dc:24:ca:6b:ad:3b:b2:f5:7b:4c:7a:
73:a9:03:20:26:53:f9:98:57:5c:d4:da:22:16:f8:b9:46:19:
82:69:17:bf:b9:6a:f4:9a:8c:6f:7d:7c:fc:b6:e2:f2:f2:91:
f7:2b:07:50:8f:bf:a6:9e:14:ba:dd:fa:36:49:fd:a8:da:31:
05:db:d3:81:0d:fe:31:72:d0:8a:d2:b9:f0:2a:f8:29:a0:de:
26:ab:93:8d:49:e6:f3:b8:0b:c4:f7:ae:b2:5b:a2:d8:05:fc:
c8:0d:89:7c:e7:52:f1:a3:0c:11:23:be:cb:fb:d7:1e:16:7e:
47:42:1f:d7:b1:41:24:3b:ab:fd:8f:c5:a1:61:5f:a2:fd:5b:
41:c5:5b:58:91:79:2e:ee:3a:09:30:d8:ab:69:66:b9:63:d2:
53:0a:67:c7
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUJHcEXEIKwiYMMGTOK+zV3HP6L8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMxMDA4MjlaFw0yNTEyMDIxMDEzMjlaMDMxMTAvBgNV
BAMTKEEyMEVBRjVCNjQ4RDdGRUVFOEQyQjYzNzg3NzhCNUI5N0VDRDExREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBoaEOn7TnCDEih6I8tWx2ZZlY
vPcOfMhnxoeGiwalX/fYuWgWF1UDmzY8d/XlwFIZhP1nB50HP5lzFECX30KotpRa
s05Ih+xhFyg1v0ClXWljeTo43PNJna+gHrmxBvzDZp6WGFiHQtu40rTmAp1DblSJ
veWaEqPFbZxu6kL05GFxJRwRwY0g/8sKlX3FW6NMg17d8AorjOUCtRdUrRursUoO
00B9ltNCz8mGLT9LXPohKjp5lpEBfaYsacwVw/B15IvqW/u03+vqLUXcNnBsOPK8
eJ0a9YuGLv4jr0DoqYqQDICxbYtv8ownfLt5cRlw9X10je3DhdTtZilzMzBpAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUog6vW2SNf+7o0rY3h3i1uX7NEdowHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWVjNmVlZjktNzEzYy00ZTZiLWIy
YmMtNGMwNDUyODkwMzQ1LzAvMzEzMDMzMmUzMTMwMmUzNjM1MmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCkEwDQYJKoZIhvcNAQEL
BQADggEBABrV/CBm7J5IEHp7GvukABFqTiaEONEeHGpyoK5sh9P4WpPk/1u0+JzT
2lYIkNmTRtaJbKbZMaWcB8SHYifqj+KJGtWaR4JQm6mEsD1LYDdzHJPg+OBAiODl
fFMAhjkaIwHcJMprrTuy9XtMenOpAyAmU/mYV1zU2iIW+LlGGYJpF7+5avSajG99
fPy24vLykfcrB1CPv6aeFLrd+jZJ/ajaMQXb04EN/jFy0IrSufAq+Cmg3iark41J
5vO4C8T3rrJbotgF/MgNiXznUvGjDBEjvsv71x4WfkdCH9exQSQ7q/2PxaFhX6L9
W0HFW1iReS7uOgkw2KtpZrlj0lMKZ8c=
-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net