Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137312e302f32342d3234203d3e2034373631.roa
File: 3131342e3134322e3137312e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: tnGThGdY8imGN8aeRXoobokpbjBNHV0SBm8d7RDA7Io=
Subject key identifier: 10:F0:FF:EC:F0:DC:5C:AA:62:97:C4:9D:1F:73:6D:22:32:0D:24:5D
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 6A96335031A1CDF061C1B6CAC7238C1C898D7480
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137312e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 16:54:30 +0000
ROA not before: Tue 03 Dec 2024 16:49:30 +0000
ROA not after: Tue 02 Dec 2025 16:54:30 +0000
asID: 4761
IP address blocks: 114.142.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:96:33:50:31:a1:cd:f0:61:c1:b6:ca:c7:23:8c:1c:89:8d:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:49:30 2024 GMT
Not After : Dec 2 16:54:30 2025 GMT
Subject: CN=10F0FFECF0DC5CAA6297C49D1F736D22320D245D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:49:54:1e:d0:fd:58:33:25:37:ee:7f:58:
ff:58:ea:c5:80:9c:f6:b0:05:ae:c1:3f:88:63:b7:
dd:a6:81:e0:02:a0:83:80:82:40:06:7a:2f:ee:32:
44:33:b9:7d:39:a7:45:7a:0d:10:82:8f:3c:8d:44:
a5:19:ee:b3:c1:62:bb:83:98:a4:67:8d:1b:4d:2a:
d9:6a:9a:5e:fe:88:25:7e:29:64:d1:ed:17:49:b4:
39:7b:fe:32:f9:0d:82:1a:37:2a:73:ae:f4:1e:1c:
46:c2:eb:37:72:2b:76:4e:53:f6:ba:9d:77:55:c5:
37:fb:24:ad:c1:c3:6a:16:02:97:74:fc:5b:d4:53:
ed:ea:b3:9d:0a:c3:1c:2e:8d:65:6c:f0:bc:b8:58:
05:8b:7c:9e:ea:1c:56:fe:3b:d4:c6:ed:02:91:33:
1f:35:7a:52:f0:42:b7:a2:95:82:50:c8:f1:9c:80:
bf:74:f5:95:ce:10:d3:35:fb:dc:a6:4a:9d:62:73:
88:92:6a:79:91:56:de:6a:94:fc:1e:1b:e0:26:7d:
6c:c6:d3:ae:03:c4:ad:d0:c8:9a:21:92:7c:c8:16:
51:c5:77:0b:d6:ce:bc:d5:c3:f5:c6:85:a5:ba:89:
32:d6:e5:47:02:5c:e5:65:7f:49:0a:68:87:2e:72:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F0:FF:EC:F0:DC:5C:AA:62:97:C4:9D:1F:73:6D:22:32:0D:24:5D
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137312e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.142.171.0/24
Signature Algorithm: sha256WithRSAEncryption
22:84:1e:4c:0c:29:3c:57:c3:ed:ca:22:b8:b7:17:78:4c:9e:
be:68:d8:dd:f0:45:d5:c6:9e:3d:ac:59:48:75:ed:de:69:4e:
b7:c0:ce:3b:5f:eb:24:45:d0:a5:d8:63:ac:ee:53:29:2f:2f:
12:33:55:26:ea:04:8c:33:2f:be:00:3b:a7:4d:bc:e6:4b:44:
7d:95:ca:0a:25:d0:83:4a:0b:57:9b:27:c8:27:af:32:23:ee:
b6:2a:90:c4:3f:1b:16:0d:c2:90:0d:57:cd:11:34:eb:1a:e0:
5d:63:4e:65:d5:57:86:7d:80:a0:90:13:40:a6:5b:b8:28:dd:
d0:21:4f:c6:32:99:24:3f:6b:e9:12:02:de:79:e6:00:57:58:
2b:4a:7d:ed:1c:37:50:9c:c9:93:aa:76:63:27:06:55:ab:ac:
22:6b:5d:3e:0c:36:d5:fd:ae:12:74:b2:a9:0d:53:b5:f2:38:
bf:d0:6f:88:74:59:ee:4f:03:87:a9:86:ad:e8:41:bf:87:cf:
65:01:6e:06:b5:e9:57:f5:39:0e:7a:26:9c:ae:d7:94:43:39:
40:b3:37:57:85:72:72:86:da:98:97:63:7d:4f:86:29:b7:7f:
4e:70:cf:31:34:a8:8c:00:ae:de:56:85:82:d8:6f:28:3b:db:
a7:ff:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:23:09 2025 by rpki-client