Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137322e302f32342d3234203d3e203435373237.roa
File: 3131342e3134322e3137322e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier: WwpVIYkqL5lKf0On7+zgr0dfkxUXDntmYF4HBLYeelY=
Subject key identifier: 0A:05:AB:0D:61:B7:52:57:44:1D:78:AF:44:62:2F:B9:D5:AE:A9:76
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 102447EE46AE69F0891D06DBCAB1DC43F24A0CE4
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137322e302f32342d3234203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 16:56:06 +0000
ROA not before: Tue 03 Dec 2024 16:51:06 +0000
ROA not after: Tue 02 Dec 2025 16:56:06 +0000
asID: 45727
IP address blocks: 114.142.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 20:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:24:47:ee:46:ae:69:f0:89:1d:06:db:ca:b1:dc:43:f2:4a:0c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:51:06 2024 GMT
Not After : Dec 2 16:56:06 2025 GMT
Subject: CN=0A05AB0D61B75257441D78AF44622FB9D5AEA976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:c8:88:af:76:fa:8e:c4:92:b1:78:2c:fb:
d4:25:5e:5b:d8:d2:16:e8:60:45:b9:60:b1:00:d4:
6d:54:57:87:26:f7:91:75:1e:23:6d:8c:97:6e:1a:
e4:90:32:8e:b0:df:c1:d1:7f:c6:42:e4:48:ac:35:
cc:86:4a:05:f0:3d:9b:30:46:3d:85:c6:9a:fd:d1:
5f:3c:82:47:c8:cf:c2:2f:2f:bd:8b:5d:d8:8b:9e:
b1:21:f7:44:85:d3:e3:57:06:33:da:c6:f7:0e:8b:
29:77:25:38:32:11:7c:96:19:f7:00:cf:c0:2f:e0:
a0:ec:bf:46:d1:a9:0c:2e:59:c3:e0:af:a2:65:07:
ae:f8:4c:68:d4:1a:2d:0d:c9:6f:8a:ad:7e:bd:60:
82:99:28:c9:1b:ce:e8:1e:b0:4a:b9:fd:f0:41:4f:
5e:07:fa:37:ab:20:dc:65:3e:a7:d8:9f:4e:61:6b:
06:5a:c7:76:1a:b1:6b:42:9a:31:f1:4c:94:22:94:
da:ae:d4:80:f1:1d:1c:3f:59:13:4f:6e:66:a3:c3:
3f:9c:df:a5:7c:d1:0c:9a:5a:c8:a2:21:e5:23:39:
4b:15:cb:29:39:b5:53:fd:65:db:1f:cf:9a:99:c7:
4a:f2:dd:b0:dc:aa:26:a5:9a:5e:5e:a4:e9:1d:72:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:AB:0D:61:B7:52:57:44:1D:78:AF:44:62:2F:B9:D5:AE:A9:76
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137322e302f32342d3234203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.142.172.0/24
Signature Algorithm: sha256WithRSAEncryption
91:17:a7:c5:75:0e:15:a6:35:23:27:eb:56:f2:24:3a:4b:16:
eb:cc:1f:9b:c5:d2:d0:d1:9e:31:22:b5:f6:df:67:9b:4a:32:
82:12:dc:74:4d:13:11:b2:91:44:51:b2:cf:58:1e:79:51:a0:
df:8b:d7:95:d9:bd:36:07:dd:a4:71:71:80:4d:e9:61:f5:32:
d3:c3:71:8f:28:6f:07:e3:cc:c8:7a:02:07:12:3e:e0:8c:67:
c2:a9:5c:fd:ee:d4:6e:9c:a0:9b:64:ad:df:db:b7:ac:11:4a:
30:ea:82:07:ef:dc:30:cf:cb:18:f9:20:93:fd:0f:6c:13:38:
ea:36:8f:77:b7:76:1f:73:3b:ab:c1:2b:c0:89:df:75:fa:1d:
9f:b3:22:94:33:df:73:af:bf:20:c8:f2:4d:d3:e7:49:7a:17:
4d:50:9d:27:ff:97:46:2d:a4:ae:3f:32:93:19:34:ba:6c:a4:
27:ba:17:4c:da:22:84:bf:d5:b9:e0:d7:24:fc:85:5a:25:85:
13:29:bc:0d:d5:df:89:3b:fe:f7:e7:cf:64:9f:a1:3e:2b:c9:
e8:65:3d:d9:74:6f:cb:4c:7f:6d:16:2c:ff:7f:62:7f:2f:fb:
d5:72:7f:6a:10:51:57:5d:ad:64:6e:18:5f:b6:c7:e0:91:eb:
13:ac:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:36 2025 by rpki-client