Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137352e302f32342d3234203d3e203435373237.roa
File: 3131342e3134322e3137352e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier: L6e1oZYXmphgvdgfmWdTnsX1H6SFm6uyol31ELVzcYE=
Subject key identifier: FA:70:6F:77:4E:F0:0E:3B:A1:F2:85:61:C5:D0:33:54:C2:05:61:53
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 41FE46FEA0F96E0E18F6EACA96934E3E253B6C89
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137352e302f32342d3234203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 16:57:28 +0000
ROA not before: Tue 03 Dec 2024 16:52:28 +0000
ROA not after: Tue 02 Dec 2025 16:57:28 +0000
asID: 45727
IP address blocks: 114.142.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 09:20:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fe:46:fe:a0:f9:6e:0e:18:f6:ea:ca:96:93:4e:3e:25:3b:6c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:52:28 2024 GMT
Not After : Dec 2 16:57:28 2025 GMT
Subject: CN=FA706F774EF00E3BA1F28561C5D03354C2056153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:77:19:65:1f:ff:43:01:37:28:aa:40:e0:
e5:77:77:72:1f:31:f6:2b:58:24:b5:dc:e9:f9:6e:
a0:af:a3:80:1d:22:57:31:9c:bb:c2:12:54:6c:f4:
c4:20:cc:87:a7:4e:49:8a:4e:b6:1d:23:31:ff:c6:
08:7c:e3:b6:73:7a:56:dc:44:c7:f2:bf:98:c0:ec:
12:b0:5e:66:f2:6f:0f:35:26:9f:31:78:aa:d4:ea:
c3:12:b0:95:41:7e:f5:55:fc:60:48:54:0e:51:64:
0c:68:a8:11:e5:3f:fe:84:9a:6d:fa:1c:c9:2e:06:
98:81:43:72:ae:48:a7:76:58:eb:8a:bb:a8:39:64:
8f:fd:8e:10:b0:1a:90:00:f3:7e:cf:34:6b:d4:27:
01:34:16:d2:0a:ff:bb:34:e7:ab:98:67:e0:27:20:
d8:68:77:68:b4:88:32:55:bc:0f:62:ae:2d:1e:96:
15:5b:36:58:56:d2:41:a4:bb:a3:2b:06:78:c8:3f:
cc:5a:87:37:9e:9e:53:0c:61:0e:b0:e9:16:f6:ee:
d6:0d:28:55:1c:cd:85:79:fa:55:fc:1a:98:41:be:
25:a4:09:5c:01:f0:e4:e8:68:35:0a:50:5a:a9:9c:
17:59:ed:a1:f0:1e:79:0b:ac:34:3b:88:5c:88:6d:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:70:6F:77:4E:F0:0E:3B:A1:F2:85:61:C5:D0:33:54:C2:05:61:53
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137352e302f32342d3234203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.142.175.0/24
Signature Algorithm: sha256WithRSAEncryption
51:00:49:bf:4b:13:6e:1e:0e:94:fa:1b:1b:41:03:8e:b7:1b:
75:3e:38:88:a2:d6:47:d1:38:86:2e:b8:59:ae:f6:35:7d:d6:
29:3f:c0:fa:35:4f:a2:f8:cf:99:a1:97:48:9c:ca:dd:c7:92:
88:13:d3:4a:00:5c:aa:58:16:a1:60:b8:43:d6:11:44:5f:50:
dc:28:67:59:68:fc:17:fe:bd:4e:7f:b7:05:de:32:6f:4e:6f:
58:f1:d4:24:d1:4b:35:1d:9d:26:85:4a:93:ec:5a:fc:dd:8c:
88:89:e3:76:e1:99:10:aa:b7:14:7f:38:65:9b:d6:58:c8:f9:
36:a1:3f:04:fe:87:46:6a:a9:20:4c:59:9b:aa:3a:c0:92:0a:
11:e2:d4:35:48:00:f5:98:f5:a5:25:12:72:79:4d:43:e4:37:
b8:80:ff:d4:73:3a:8a:33:ca:69:0d:70:7d:b3:1c:a3:f5:d5:
91:e0:9a:dc:77:6e:c5:df:37:6b:ca:43:49:a2:b1:af:ee:b4:
70:81:84:2c:2b:18:23:bb:69:7a:d9:68:b1:da:4f:35:55:00:
2b:54:01:18:0c:b1:bb:e7:6d:8c:31:64:e6:8a:51:fd:39:45:
85:a6:dc:1a:d7:b9:da:13:43:72:a1:a5:b8:51:62:a2:79:66:
ed:1c:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:59 2025 by rpki-client