Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33392e302f32342d3234203d3e2034373631.roa
File: 3131362e3230362e33392e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: 99frvhfOxJKpxwH3SQKebfu2SxUjdmrZLg1zU1akG1c=
Subject key identifier: 67:30:90:C6:B0:A4:62:E9:BC:81:BE:2A:07:09:46:93:3D:B0:E9:33
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 6771BBCDA274C113F823E78F22D318028BE8CF1E
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33392e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 17:15:19 +0000
ROA not before: Tue 03 Dec 2024 17:10:19 +0000
ROA not after: Tue 02 Dec 2025 17:15:19 +0000
asID: 4761
IP address blocks: 116.206.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:71:bb:cd:a2:74:c1:13:f8:23:e7:8f:22:d3:18:02:8b:e8:cf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:10:19 2024 GMT
Not After : Dec 2 17:15:19 2025 GMT
Subject: CN=673090C6B0A462E9BC81BE2A070946933DB0E933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:40:7c:b9:61:c3:b8:26:a4:48:07:33:2f:66:
6c:c1:2d:1b:71:4c:2e:9d:03:67:45:ee:00:22:b5:
1b:e9:4f:95:a2:8a:f2:c4:53:2c:a7:f0:e0:19:4b:
75:5f:98:4e:3f:d0:9c:09:f6:fe:dc:4d:a2:ec:92:
24:6c:6b:5e:a2:d6:64:43:b8:05:bb:de:86:35:a0:
11:74:40:08:cc:9a:d7:bb:9f:a6:b6:1e:fd:b3:ea:
eb:95:53:da:f2:52:45:b3:09:83:ad:2a:62:86:24:
97:79:ef:c5:fe:29:97:21:2b:f6:6a:25:64:be:02:
d6:fb:a0:f3:8d:31:9c:fc:8d:be:9e:9a:46:96:ab:
56:e0:66:c6:b3:ad:59:c8:a3:2a:02:d3:ff:bd:26:
ad:e5:bc:3c:4e:d2:03:2c:35:3d:1e:d7:76:8a:02:
f3:a7:ab:17:2a:4c:9c:5c:a3:0f:5a:7c:9a:4a:58:
eb:b4:38:b9:60:91:9e:62:48:52:70:e9:e0:ef:33:
e4:c2:59:de:ce:fc:a5:1a:5a:24:00:33:b8:3e:73:
2e:a1:3a:84:58:13:74:d8:43:c8:f8:32:ea:ac:29:
22:ac:24:f8:05:d1:01:f7:21:20:05:53:72:a2:e4:
7a:1d:38:92:52:a9:31:37:89:c3:ff:f6:cb:fe:1b:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:30:90:C6:B0:A4:62:E9:BC:81:BE:2A:07:09:46:93:3D:B0:E9:33
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e33392e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.39.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6a:e9:f1:2f:66:00:a1:da:c5:33:e6:44:55:a5:38:31:94:
07:50:c1:6f:37:73:e4:bc:7f:b8:ce:d1:d9:04:b6:c5:f8:60:
d6:5c:b4:48:f8:b5:02:86:d1:dc:da:e7:67:b2:df:2f:26:ee:
31:99:0f:15:65:29:c4:4d:97:a4:b6:08:f6:2b:d0:de:a2:3f:
c6:d6:98:83:77:bd:cd:7f:5a:84:6d:4f:ec:a2:3c:cc:3e:cc:
71:f0:0f:ec:32:20:bd:1d:46:7c:ba:27:29:d1:a0:45:8a:82:
01:30:87:db:54:5a:59:03:e0:b3:89:ef:12:af:ca:09:da:73:
4b:bd:03:dc:49:e7:22:f8:bd:79:99:57:4d:df:0b:4a:30:20:
5b:ce:7e:e4:07:20:31:d9:cc:bd:8e:38:fe:10:75:36:6e:df:
16:8b:72:98:8c:5b:62:34:ee:96:3a:ad:84:a5:22:8a:17:ac:
86:2a:a2:89:07:ef:8b:e8:b7:41:1a:ac:0c:40:32:02:f8:41:
ce:55:cd:b9:2b:0d:0f:0d:17:04:26:d4:06:e2:0a:e5:0d:65:
d6:b9:83:c3:aa:2a:6e:f8:05:41:7f:08:4b:fa:ae:ac:da:b6:
83:f9:6a:43:02:65:91:5b:d7:ba:ba:2f:eb:6a:fd:39:57:09:
e5:2f:d5:98
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZ3G7zaJ0wRP4I+ePItMYAovozx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMxNzEwMTlaFw0yNTEyMDIxNzE1MTlaMDMxMTAvBgNV
BAMTKDY3MzA5MEM2QjBBNDYyRTlCQzgxQkUyQTA3MDk0NjkzM0RCMEU5MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0QHy5YcO4JqRIBzMvZmzBLRtx
TC6dA2dF7gAitRvpT5WiivLEUyyn8OAZS3VfmE4/0JwJ9v7cTaLskiRsa16i1mRD
uAW73oY1oBF0QAjMmte7n6a2Hv2z6uuVU9ryUkWzCYOtKmKGJJd578X+KZchK/Zq
JWS+Atb7oPONMZz8jb6emkaWq1bgZsazrVnIoyoC0/+9Jq3lvDxO0gMsNT0e13aK
AvOnqxcqTJxcow9afJpKWOu0OLlgkZ5iSFJw6eDvM+TCWd7O/KUaWiQAM7g+cy6h
OoRYE3TYQ8j4MuqsKSKsJPgF0QH3ISAFU3Ki5HodOJJSqTE3icP/9sv+G0G3AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUZzCQxrCkYum8gb4qBwlGkz2w6TMwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMxMzEzNjJlMzIzMDM2MmUzMzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0zicwDQYJKoZIhvcN
AQELBQADggEBAJZq6fEvZgCh2sUz5kRVpTgxlAdQwW83c+S8f7jO0dkEtsX4YNZc
tEj4tQKG0dza52ey3y8m7jGZDxVlKcRNl6S2CPYr0N6iP8bWmIN3vc1/WoRtT+yi
PMw+zHHwD+wyIL0dRny6JynRoEWKggEwh9tUWlkD4LOJ7xKvygnac0u9A9xJ5yL4
vXmZV03fC0owIFvOfuQHIDHZzL2OOP4QdTZu3xaLcpiMW2I07pY6rYSlIooXrIYq
ookH74vot0EarAxAMgL4Qc5VzbkrDQ8NFwQm1AbiCuUNZda5g8OqKm74BUF/CEv6
rqzatoP5akMCZZFb17q6L+tq/TlXCeUv1Zg=
-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net