Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33382e302f32342d3234203d3e2034373631.roa
File: 3131362e3230362e33382e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: DT2D9rdDeyNtjx0+8RrNHHkJZUbQyZVOC6C4baF5Etw=
Subject key identifier: 76:54:26:65:03:5D:71:EB:46:31:75:B4:51:E2:D6:F4:1C:03:9A:1F
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 3120308E519F9D91CC0605573FF2D9B6499BB219
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33382e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 17:15:11 +0000
ROA not before: Tue 03 Dec 2024 17:10:11 +0000
ROA not after: Tue 02 Dec 2025 17:15:11 +0000
asID: 4761
IP address blocks: 116.206.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:20:30:8e:51:9f:9d:91:cc:06:05:57:3f:f2:d9:b6:49:9b:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:10:11 2024 GMT
Not After : Dec 2 17:15:11 2025 GMT
Subject: CN=76542665035D71EB463175B451E2D6F41C039A1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:01:3e:e2:14:38:e2:35:80:f5:80:0e:76:
37:46:62:fe:52:31:ca:94:d0:22:e1:e2:b0:f5:6a:
ce:ee:2a:c0:62:fc:6f:31:35:55:2e:4f:97:8f:e9:
b1:7e:d2:e0:47:e7:90:8c:bc:31:2e:30:bd:f8:3c:
12:18:f3:a4:6c:9e:43:9e:70:bb:0d:6a:24:73:48:
2f:03:82:72:21:71:e7:f5:99:10:2b:33:70:0e:cb:
15:99:6c:df:fb:fd:d5:25:fe:2c:30:cf:4d:59:1f:
ee:3b:76:c2:7d:ba:a4:5b:5e:1f:af:28:b5:94:ce:
27:cf:3f:43:48:8b:36:31:e5:9e:15:3c:0e:e9:4c:
06:22:f1:ea:67:2b:c9:e4:5a:8b:df:aa:10:11:4d:
1a:d5:1c:f3:f3:79:3c:5a:a1:38:65:60:80:12:de:
8d:e3:d2:55:39:39:d2:9f:91:47:5f:0f:e0:63:46:
90:83:96:c6:f2:33:6b:4f:ab:fd:44:8d:28:54:a2:
35:62:b5:cd:c3:40:e2:d6:b0:31:87:dc:b4:77:4c:
5d:50:12:86:74:5c:cc:85:11:80:86:7c:c3:87:0b:
41:ee:f0:c1:7d:d9:80:0c:da:52:d7:b6:36:83:ed:
25:23:f9:ca:fb:d4:8a:5c:7a:02:1f:25:03:08:43:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:54:26:65:03:5D:71:EB:46:31:75:B4:51:E2:D6:F4:1C:03:9A:1F
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33382e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e6:59:e1:a9:8d:83:09:6d:96:cc:22:c0:fb:86:06:10:b7:
ce:4c:f5:91:16:aa:96:d8:09:b0:41:7e:8a:0b:22:65:87:a3:
52:07:d4:f1:87:ac:c4:39:a1:2e:df:cc:65:cc:c7:51:1c:df:
a4:de:e2:79:68:23:c1:67:01:78:71:54:a7:bf:7b:e1:d2:4b:
44:7d:83:bc:06:38:ad:c2:4b:72:c1:a2:c8:38:a2:31:84:45:
50:bd:c8:13:86:ce:0c:12:19:2c:c0:f5:f2:67:2d:29:2a:6f:
b5:ec:c2:bb:f6:d3:09:b4:2d:79:eb:ba:23:37:f9:b0:39:11:
dd:f8:ab:93:02:de:86:df:66:20:db:73:b8:35:bc:29:20:53:
31:8d:6a:26:20:8e:a9:9f:35:f4:7b:cf:41:32:73:d6:cd:dd:
e3:c2:12:90:86:aa:f0:b3:93:d7:07:32:d0:ef:13:90:5d:5a:
f9:a4:26:e5:d3:0c:f8:1b:d0:63:2c:5e:09:1e:da:cc:a0:42:
6c:06:3b:4c:af:3b:0b:6c:71:7b:73:46:67:d7:09:ab:2d:f2:
64:14:94:4f:b3:c0:c8:b5:e6:90:0e:e7:ae:e7:df:f2:b8:e3:
5a:c4:68:07:03:3f:97:01:d1:97:eb:0a:43:3e:18:43:e9:0d:
0f:44:64:f1
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUMSAwjlGfnZHMBgVXP/LZtkmbshkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMxNzEwMTFaFw0yNTEyMDIxNzE1MTFaMDMxMTAvBgNV
BAMTKDc2NTQyNjY1MDM1RDcxRUI0NjMxNzVCNDUxRTJENkY0MUMwMzlBMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1gE+4hQ44jWA9YAOdjdGYv5S
McqU0CLh4rD1as7uKsBi/G8xNVUuT5eP6bF+0uBH55CMvDEuML34PBIY86RsnkOe
cLsNaiRzSC8DgnIhcef1mRArM3AOyxWZbN/7/dUl/iwwz01ZH+47dsJ9uqRbXh+v
KLWUzifPP0NIizYx5Z4VPA7pTAYi8epnK8nkWovfqhARTRrVHPPzeTxaoThlYIAS
3o3j0lU5OdKfkUdfD+BjRpCDlsbyM2tPq/1EjShUojVitc3DQOLWsDGH3LR3TF1Q
EoZ0XMyFEYCGfMOHC0Hu8MF92YAM2lLXtjaD7SUj+cr71IpcegIfJQMIQyh/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUdlQmZQNdcetGMXW0UeLW9BwDmh8wHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMxMzEzNjJlMzIzMDM2MmUzMzM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0ziYwDQYJKoZIhvcN
AQELBQADggEBAHrmWeGpjYMJbZbMIsD7hgYQt85M9ZEWqpbYCbBBfooLImWHo1IH
1PGHrMQ5oS7fzGXMx1Ec36Te4nloI8FnAXhxVKe/e+HSS0R9g7wGOK3CS3LBosg4
ojGERVC9yBOGzgwSGSzA9fJnLSkqb7Xswrv20wm0LXnruiM3+bA5Ed34q5MC3obf
ZiDbc7g1vCkgUzGNaiYgjqmfNfR7z0Eyc9bN3ePCEpCGqvCzk9cHMtDvE5BdWvmk
JuXTDPgb0GMsXgke2sygQmwGO0yvOwtscXtzRmfXCast8mQUlE+zwMi15pAO567n
3/K441rEaAcDP5cB0ZfrCkM+GEPpDQ9EZPE=
-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net