Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132372e3235352e302f32342d3234203d3e203233363933.roa
File: 3131342e3132372e3235352e302f32342d3234203d3e203233363933.roa (raw, json)
Hash identifier: evELxmXpT+lkJVpqdz7stqtXNh1XO2lIAcxZHo/LwsU=
Subject key identifier: C4:DD:12:9C:82:F4:F1:1B:57:8C:12:48:C6:54:5F:D6:9D:33:A5:2C
Certificate issuer: /CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Certificate serial: 4E68E9ACAAFF624A225FB11BABAD0940F6696D78
Authority key identifier: 66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132372e3235352e302f32342d3234203d3e203233363933.roa
Signing time: Mon 11 Nov 2024 03:53:17 +0000
ROA not before: Mon 11 Nov 2024 03:48:17 +0000
ROA not after: Mon 10 Nov 2025 03:53:17 +0000
asID: 23693
IP address blocks: 114.127.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:68:e9:ac:aa:ff:62:4a:22:5f:b1:1b:ab:ad:09:40:f6:69:6d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66442B8563B5A590ED84F72A8C7B97A16B9C9F3A
Validity
Not Before: Nov 11 03:48:17 2024 GMT
Not After : Nov 10 03:53:17 2025 GMT
Subject: CN=C4DD129C82F4F11B578C1248C6545FD69D33A52C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:36:7a:a9:91:51:9b:20:6c:dc:9c:47:28:15:
e3:a6:de:d0:5d:a1:64:2c:e6:80:3e:1b:22:c0:d7:
f5:d1:12:08:3f:9c:82:cf:68:78:1b:a3:b8:fa:c8:
eb:69:c2:56:0f:45:38:14:d7:cb:7a:f9:b3:53:3a:
0e:8f:77:43:a3:79:6b:df:b8:73:72:3b:38:37:71:
d4:a0:b8:f0:3c:d6:ae:58:3c:37:8e:b9:cc:15:55:
3d:a3:16:45:11:60:49:54:64:28:be:18:de:77:b9:
bc:39:05:bf:06:6a:c3:bb:ba:96:99:6b:b4:cc:8c:
8c:35:12:43:26:a7:81:bd:ea:ad:dd:2a:3e:00:0c:
41:cd:58:cc:b2:b3:c1:12:84:84:ec:f4:9f:55:31:
cf:99:aa:79:41:5d:b1:31:af:92:dd:8e:62:2e:8b:
0c:28:90:65:8d:55:2e:1a:8c:31:25:57:95:1f:74:
fc:51:f6:99:b0:a5:87:2d:38:ea:ff:f5:d6:fd:26:
b8:e1:1d:6d:dc:00:85:b0:1d:e7:77:77:58:55:52:
34:17:fe:09:b2:a1:5f:36:6e:0e:ee:57:68:16:ba:
f2:aa:14:0a:d2:81:76:7d:97:7b:16:15:bf:66:9f:
8a:4c:09:48:70:38:dc:0a:50:f1:80:33:db:49:d9:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:12:9C:82:F4:F1:1B:57:8C:12:48:C6:54:5F:D6:9D:33:A5:2C
X509v3 Authority Key Identifier:
keyid:66:44:2B:85:63:B5:A5:90:ED:84:F7:2A:8C:7B:97:A1:6B:9C:9F:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66442B8563B5A590ED84F72A8C7B97A16B9C9F3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3328f24e-dc7f-4562-a51d-e2e38c3677d1/0/3131342e3132372e3235352e302f32342d3234203d3e203233363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.127.255.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e8:fe:f4:88:24:61:8d:64:3d:c0:cb:9a:90:75:c8:5a:9c:
93:ff:f9:1b:33:d7:e2:3b:ae:50:64:12:18:5e:97:40:8a:6c:
77:77:a5:7f:d2:b1:4e:a5:50:54:a6:6f:ec:e1:7e:15:33:1b:
02:a8:6f:ba:e2:88:09:0f:4a:17:5f:7c:55:a5:9d:b6:df:f4:
03:e5:ca:39:b3:74:fb:cf:a0:e3:2e:6c:12:d2:08:91:89:f9:
0f:26:f1:85:56:af:ae:ad:ca:b2:53:18:59:cc:80:bb:d4:e1:
08:5d:ff:ec:ae:0e:c5:6d:43:6d:03:64:2d:51:6d:e8:c5:af:
51:2a:2b:2f:9b:7a:61:61:9d:ad:b0:a1:e0:6d:d7:ee:0f:3a:
92:2f:e9:2c:7f:16:7a:65:88:35:e7:37:b7:04:ad:c1:fe:58:
d6:63:2e:79:3a:76:6b:f5:a3:34:3d:87:01:4d:7f:e7:ea:02:
d8:df:f5:50:a3:a1:e5:85:9a:45:67:cd:b0:e4:8d:da:7c:bd:
0a:c9:cc:29:08:84:59:86:30:cd:c2:2a:fe:50:71:c9:79:ba:
6a:69:03:5e:73:f6:c8:bb:27:11:44:db:23:8e:a3:17:43:57:
45:d7:a9:d3:59:a6:ca:91:17:b5:cc:0f:0e:a2:b7:89:79:5d:
fb:7f:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 17:00:09 2024 by rpki-client on console-ams.rpki-client.org