Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36362e302f32342d3234203d3e203435373237.roa
File: 3130332e31302e36362e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier: y6CQqx9rjSBmBqNInIL/KyJIbZEGA6sShVLLRf4M71k=
Subject key identifier: 17:77:1D:D0:E0:59:BA:9D:90:62:DA:4B:75:8F:2E:DA:3B:D2:39:BD
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 0FCCF85667C81354B267453BA95798962CB6DE52
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36362e302f32342d3234203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 15:01:40 +0000
ROA not before: Tue 03 Dec 2024 14:56:40 +0000
ROA not after: Tue 02 Dec 2025 15:01:40 +0000
asID: 45727
IP address blocks: 103.10.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:cc:f8:56:67:c8:13:54:b2:67:45:3b:a9:57:98:96:2c:b6:de:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 14:56:40 2024 GMT
Not After : Dec 2 15:01:40 2025 GMT
Subject: CN=17771DD0E059BA9D9062DA4B758F2EDA3BD239BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:2d:3a:8e:d7:27:f5:cc:e3:5e:fb:71:1c:
37:33:bd:05:1b:f4:f4:7f:24:07:ac:7f:c0:f1:a4:
05:6a:85:1a:64:f2:c4:64:74:33:64:72:b0:59:7e:
61:18:b8:76:b1:52:c7:64:3b:f1:01:f0:08:fe:10:
3a:57:02:44:e2:db:64:4c:ce:be:7e:b5:c8:8e:39:
9b:a8:26:2f:86:22:27:87:7b:d0:07:e7:0e:1c:b8:
04:2f:63:3b:93:30:68:d7:5b:d1:08:a6:4a:2c:d7:
d9:ec:c3:bf:a8:58:e8:0c:65:aa:c9:21:bf:ca:38:
a8:7c:e1:64:29:c9:c0:10:85:f0:2f:24:07:24:c3:
8a:f4:0f:c5:94:29:f5:91:d1:d1:d7:ef:3c:14:52:
1b:f2:74:9f:8c:80:33:c6:55:46:f7:fc:98:a3:5f:
27:84:6c:b9:f2:0d:1c:6e:d0:ed:9e:a4:52:b7:9f:
11:64:e0:e7:ff:13:a7:67:e2:e2:e7:17:3b:aa:62:
56:ec:b1:12:17:ea:7a:27:99:8d:b9:81:6d:95:77:
99:c8:e9:31:fb:18:70:10:d3:39:7c:94:43:81:d3:
27:a6:82:9c:de:9b:b8:bc:11:43:ec:1a:63:17:2b:
dd:63:1a:90:dc:51:a0:bb:77:a7:b6:8d:e2:40:53:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:1D:D0:E0:59:BA:9D:90:62:DA:4B:75:8F:2E:DA:3B:D2:39:BD
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3130332e31302e36362e302f32342d3234203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.10.66.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3f:e6:35:03:92:b2:93:f7:09:6e:0f:50:c4:59:ad:2e:2c:
da:1c:e1:45:f0:7c:f7:e2:25:00:85:91:e5:37:e7:7e:e7:f5:
22:cb:7a:48:eb:d1:ab:24:79:47:36:71:eb:7c:3a:38:8a:07:
6e:a7:f2:0c:37:2e:c2:27:32:fa:1a:bf:c1:3c:f6:34:f6:21:
01:09:fd:15:b1:f3:3b:63:f9:db:06:49:84:e8:13:d8:0f:3e:
ad:96:31:b9:54:b1:3f:f4:c1:18:d0:78:d4:d8:b8:1f:33:e1:
8f:81:c2:32:1b:85:78:7c:97:34:38:d6:ba:14:3f:89:f4:35:
c8:d8:13:fe:ab:4d:c6:87:2b:54:48:45:07:62:ec:ee:6b:f9:
6e:8e:08:76:6d:6d:8b:e0:21:b2:da:86:22:3f:53:a5:ab:06:
28:bd:42:f8:92:49:1b:3c:c7:fe:27:8e:12:12:49:20:0a:d1:
41:99:bf:88:8a:6c:d9:b0:ea:89:63:0f:4f:a4:6a:ff:cf:fb:
65:6c:ac:f4:b6:c6:c3:64:7d:6d:76:5e:db:ba:87:a3:48:ad:
bc:bc:6d:02:bc:83:46:8f:99:00:3d:49:f0:dd:61:3a:33:6a:
b4:e4:b3:e9:fa:62:9b:6f:42:e5:93:36:d0:b2:8e:af:06:a3:
bd:39:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net