Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137302e302f32342d3234203d3e2034373631.roa
File: 3131342e3134322e3137302e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: 3jc2m04pCI4RBc/0lr4WFLZwR2/zGg9qrBpa3e3QDuk=
Subject key identifier: 36:62:F1:58:0E:7E:79:9D:4A:B7:DA:8C:3C:6A:0F:CE:04:92:F9:93
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 54C015B34F40DAC371B52B5D1D5F3620AF9C66B9
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137302e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 16:54:19 +0000
ROA not before: Tue 03 Dec 2024 16:49:19 +0000
ROA not after: Tue 02 Dec 2025 16:54:19 +0000
asID: 4761
IP address blocks: 114.142.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c0:15:b3:4f:40:da:c3:71:b5:2b:5d:1d:5f:36:20:af:9c:66:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:49:19 2024 GMT
Not After : Dec 2 16:54:19 2025 GMT
Subject: CN=3662F1580E7E799D4AB7DA8C3C6A0FCE0492F993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:b4:df:55:25:1b:c5:7f:bd:ba:4a:88:c5:
6a:09:1e:be:21:11:57:a5:5e:24:77:fc:b0:dc:bd:
30:07:d0:55:c8:ad:b3:88:78:6c:99:03:fc:6e:3f:
92:e5:0c:a6:c5:5b:1d:26:40:83:47:92:fe:b1:bf:
09:0d:98:85:2c:39:b5:83:6e:10:bb:99:15:dc:d1:
b1:1b:e1:cd:dc:11:15:2f:3e:54:12:06:da:37:cc:
ba:59:f1:2d:10:85:ee:89:03:be:ee:0c:18:87:02:
67:f6:9c:c8:00:fe:6c:11:0e:7d:40:93:de:4e:3a:
ce:a7:85:ae:3d:62:dc:16:9b:e5:9f:4a:dd:2c:d4:
ac:17:48:a4:16:3f:1c:4a:38:95:6b:6d:a2:47:72:
a4:0d:9c:a2:e1:b1:1e:77:47:6f:da:48:82:33:ce:
df:22:6b:e8:94:76:7a:d0:04:f4:71:c9:0b:94:eb:
af:9f:d0:f0:5e:75:26:a4:f5:a7:9a:3d:cc:b7:4d:
24:4b:56:99:b1:a4:44:14:70:e0:fd:2b:7b:4b:69:
bd:f7:22:fa:4e:db:ee:d7:c5:e9:f3:1d:bd:fe:e1:
df:87:b3:7a:b7:1c:77:6a:f3:d7:d8:c8:18:7f:06:
81:20:29:29:5e:e0:ec:73:55:cf:92:6a:11:f2:6e:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:F1:58:0E:7E:79:9D:4A:B7:DA:8C:3C:6A:0F:CE:04:92:F9:93
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137302e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.142.170.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9f:c3:82:bc:2e:e5:90:74:40:ae:dc:81:f0:d5:c5:6c:5d:
d9:21:c1:7a:cc:f2:1c:6f:b5:1b:f6:94:0a:f2:ed:c8:60:ff:
dc:76:51:09:39:c6:13:15:18:77:90:af:6e:93:1d:16:f1:73:
1a:ad:2c:ef:54:03:cb:03:13:db:d1:df:a2:ab:6a:52:ae:77:
74:ec:8f:04:b9:a7:de:af:81:09:ca:b2:a6:6f:4c:5e:1c:53:
9c:fe:39:10:16:3c:b3:de:45:1e:9e:2a:8c:63:ef:74:28:90:
e4:c0:3c:95:93:b1:18:13:f8:89:49:22:4f:75:11:f7:fc:d9:
fa:5c:d1:46:33:d8:fe:d4:4f:4c:64:eb:d5:26:b7:81:08:d5:
0b:2d:0e:df:87:6d:96:23:0c:27:31:b1:46:2b:52:d6:25:4d:
79:bc:f7:88:be:60:26:7a:a5:a7:54:8b:a4:df:41:d6:8e:57:
7f:67:9d:9f:eb:18:78:87:4f:18:46:cd:13:3a:14:90:91:fd:
d8:54:53:11:ae:cf:4e:a1:cf:d5:bc:c8:19:fb:e9:d3:15:e5:
e1:5c:e7:78:94:ba:ad:f2:0e:50:05:5b:86:18:ae:b1:1c:4f:
84:ff:18:a5:83:d2:51:8e:7c:fd:5e:c3:62:18:fc:a8:28:b6:
99:1e:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:26 2025 by rpki-client