Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137342e302f32342d3234203d3e203435373237.roa
File: 3131342e3134322e3137342e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier: SwjfpwMIoU6E6jAyGtZjl4sboZKRtIYaEbIqDmAT31I=
Subject key identifier: 61:6A:72:87:EB:E3:0D:96:E7:72:B1:FE:1B:EB:97:98:70:64:B9:14
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 6001E5ECE689896863ECE95A05A608CC6BE75118
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137342e302f32342d3234203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 16:56:34 +0000
ROA not before: Tue 03 Dec 2024 16:51:34 +0000
ROA not after: Tue 02 Dec 2025 16:56:34 +0000
asID: 45727
IP address blocks: 114.142.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:01:e5:ec:e6:89:89:68:63:ec:e9:5a:05:a6:08:cc:6b:e7:51:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:51:34 2024 GMT
Not After : Dec 2 16:56:34 2025 GMT
Subject: CN=616A7287EBE30D96E772B1FE1BEB97987064B914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:d2:d8:a8:02:81:ff:94:55:f1:ac:15:ef:
12:dd:5e:59:e7:b0:83:7a:7a:18:ca:bb:c4:28:58:
da:88:7b:2d:a8:94:92:50:26:27:08:c4:07:3b:e3:
aa:36:6d:72:8b:35:23:56:26:90:5e:80:4a:b4:69:
3d:89:f8:47:17:e3:97:c2:e3:a9:f3:cd:da:02:a0:
25:e1:aa:f9:ff:7c:ec:43:83:56:f1:4c:d0:29:27:
f7:57:b6:16:e9:02:5f:a1:65:3e:d5:05:ed:46:ec:
c8:6f:36:84:52:f8:0a:83:54:32:b3:34:82:21:ed:
3c:ed:8d:89:3b:fb:95:1a:f7:f9:de:96:7b:8d:49:
de:b7:7e:85:4d:40:8e:26:d6:51:81:0d:64:ac:21:
f0:3b:f6:9a:d4:69:33:35:61:82:ca:48:41:93:4a:
3b:41:61:a3:83:46:cd:93:87:bb:0a:99:ad:d5:f4:
48:05:bc:14:93:8b:5a:54:4c:20:63:35:dc:41:86:
b5:5f:15:cd:8a:03:a2:4c:84:8d:30:d4:6e:33:0f:
0f:2b:35:98:c2:ed:27:a4:58:28:b0:6d:bb:aa:68:
a9:77:93:8f:ea:0e:a2:ab:e4:41:32:8f:1b:c1:06:
37:3b:89:bd:13:17:0d:9f:6f:07:88:d4:fc:6f:8a:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6A:72:87:EB:E3:0D:96:E7:72:B1:FE:1B:EB:97:98:70:64:B9:14
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137342e302f32342d3234203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.142.174.0/24
Signature Algorithm: sha256WithRSAEncryption
15:22:43:4a:fb:69:09:60:ef:33:31:42:0d:f8:ba:15:51:92:
46:7e:b9:95:b2:50:2c:a1:db:36:f1:a1:d4:32:34:ea:c9:9c:
53:c2:f3:22:84:8c:f7:01:40:bd:7f:5a:83:8a:78:47:da:77:
b1:e7:dd:b0:bb:7e:9c:fb:63:c9:10:d2:96:bd:47:d3:30:2f:
01:23:95:a6:5a:fd:f4:05:bc:3e:24:a3:89:bc:29:32:ae:df:
ee:c4:c6:82:16:61:a3:34:60:3a:de:82:35:d9:75:15:a4:d4:
51:3e:47:64:84:86:65:78:62:c2:52:f9:5a:80:41:4f:80:06:
8d:8e:9c:10:ae:f2:02:00:d0:a9:e6:2f:72:71:81:0f:fe:a8:
96:dc:36:22:14:14:6a:81:70:ea:5c:cd:dc:31:80:7e:e6:d4:
c7:98:7e:c2:07:80:72:7b:09:86:21:1a:1f:8d:52:89:eb:10:
31:4f:1b:c5:5f:89:ed:84:4e:6a:77:e7:96:c0:c5:7e:e7:aa:
44:11:68:d3:82:a1:9b:d1:25:dd:0f:ec:18:07:bd:4b:97:31:
d1:7c:e5:1f:e0:86:0f:bd:f8:30:19:e7:e8:6e:7b:b9:96:e8:
c0:af:28:68:d8:4b:f2:94:77:8e:f1:1e:9e:b6:d2:24:89:96:
8c:0c:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:29:55 2025 by rpki-client