Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e34332e302f32342d3234203d3e2034373631.roa
File: 3131362e3230362e34332e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: DTNFHhf5K4URoUljPHvGHFxlsCN+yBNVMwDJ6Lx5lZ0=
Subject key identifier: A0:14:9F:6B:44:44:F0:AB:0C:DF:46:7B:14:F6:2B:E8:B6:07:06:81
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 25EA71C2F240B7C224B0D2F1340BF4B87FC7643E
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e34332e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 17:16:44 +0000
ROA not before: Tue 03 Dec 2024 17:11:44 +0000
ROA not after: Tue 02 Dec 2025 17:16:44 +0000
asID: 4761
IP address blocks: 116.206.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:ea:71:c2:f2:40:b7:c2:24:b0:d2:f1:34:0b:f4:b8:7f:c7:64:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 17:11:44 2024 GMT
Not After : Dec 2 17:16:44 2025 GMT
Subject: CN=A0149F6B4444F0AB0CDF467B14F62BE8B6070681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:6b:13:ee:6e:96:0c:d4:03:b3:80:6b:12:
65:d6:0d:14:f9:84:f4:f0:1b:fe:88:ff:24:51:60:
40:72:d9:95:11:78:50:91:6a:78:d8:87:90:33:19:
84:04:9d:8a:f0:ed:e2:9b:88:52:a8:41:44:d6:a8:
5e:5e:f9:2d:ef:a3:76:07:62:30:dd:e1:c1:4c:f1:
5f:a5:e6:03:30:48:55:a4:bd:51:26:ff:16:a1:44:
e1:21:54:d3:3e:e4:c2:97:ac:98:3e:e8:ad:c5:a0:
2e:ce:19:49:b1:7f:6f:26:d1:db:78:74:29:6c:34:
44:04:68:6c:44:6b:fd:09:b4:ba:11:94:6c:a9:2d:
38:0c:b5:ed:1f:a5:60:4c:29:26:50:80:58:34:6e:
26:1c:41:db:ca:77:ea:b2:07:d8:49:4f:20:77:23:
d7:3b:6e:61:21:89:b0:31:c6:2f:ee:f4:ec:78:b1:
96:a3:ba:69:12:61:21:19:02:28:2b:88:71:73:7e:
84:03:04:32:39:8e:45:7a:1c:f6:a4:19:ce:d3:0c:
9a:ca:94:9b:ca:a7:f8:f3:14:af:6c:e7:d0:f7:fb:
6c:89:28:e2:61:94:79:3f:5e:0f:e9:5a:fa:0a:de:
ef:b0:0c:be:92:27:79:1a:37:17:d9:a4:37:59:f6:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:9F:6B:44:44:F0:AB:0C:DF:46:7B:14:F6:2B:E8:B6:07:06:81
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131362e3230362e34332e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:8a:9f:e3:68:3f:2f:32:fc:d2:31:d1:a7:0f:d2:92:91:dc:
66:ac:61:b9:7f:d8:5d:50:bf:b6:f2:7b:86:59:d4:90:75:3a:
ff:7a:20:b2:6e:0c:89:21:8a:28:c2:5d:86:79:6b:cc:da:10:
9c:fa:07:ed:b2:c7:83:78:09:a6:87:c9:20:4b:e8:6a:92:36:
41:2f:2b:05:08:0c:0c:71:95:01:14:5c:a1:ba:b1:dd:08:59:
04:e3:6f:bc:61:e2:ff:1c:f9:00:2f:fe:72:dd:06:1f:3d:ba:
0a:80:3a:f4:8a:d3:ff:66:44:34:2a:1e:f8:3c:e6:ae:8e:f7:
33:57:12:3f:65:3b:4e:35:6d:c9:7f:b4:0f:5e:fa:45:4f:ae:
64:c8:26:71:7d:9b:91:41:a7:9d:8f:82:85:7d:a8:91:2e:46:
9f:86:af:eb:cd:77:27:c7:93:38:5a:da:c9:50:cf:c4:85:07:
67:96:37:5b:2c:9b:c2:51:fc:32:29:7a:85:50:d8:ad:dc:30:
cb:f1:1e:f6:49:68:55:d8:7f:d1:f8:86:30:1d:c7:6c:2c:32:
dd:d6:ec:b6:06:64:5d:e7:f2:e1:8e:0c:61:03:82:96:96:b3:
46:49:e7:38:d1:e5:2e:1d:82:a9:1d:74:2d:d5:a5:48:8e:36:
d1:6f:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net