Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3136392e302f32342d3234203d3e2034373631.roa
File: 3131342e3134322e3136392e302f32342d3234203d3e2034373631.roa (raw, json)
Hash identifier: Nwd67kWvpuIvW2r097XXpxbo7SY6X2CRTk3/7Pk6F68=
Subject key identifier: 5B:92:67:10:9F:E0:1A:BF:65:C3:6B:BD:43:6F:91:D0:24:15:E9:06
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 35872EF08F36F3E279763AE133672D1A82279E77
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3136392e302f32342d3234203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 16:54:07 +0000
ROA not before: Tue 03 Dec 2024 16:49:07 +0000
ROA not after: Tue 02 Dec 2025 16:54:07 +0000
asID: 4761
IP address blocks: 114.142.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:87:2e:f0:8f:36:f3:e2:79:76:3a:e1:33:67:2d:1a:82:27:9e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:49:07 2024 GMT
Not After : Dec 2 16:54:07 2025 GMT
Subject: CN=5B9267109FE01ABF65C36BBD436F91D02415E906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:b1:6f:92:91:ea:83:f0:a0:4d:50:0e:e4:
08:70:a3:8f:0f:2f:1a:f8:eb:4b:2a:db:ff:96:f2:
43:6d:65:42:f2:26:f1:11:ae:e3:62:a0:4b:79:b7:
ad:42:10:bc:c7:4a:31:07:5a:b1:5a:8e:70:3c:ce:
9d:8a:15:b0:b9:75:fe:eb:23:5c:68:8f:c9:db:c5:
eb:41:56:e1:eb:95:54:e0:7f:16:ae:ee:13:3c:ac:
48:1d:e7:81:40:d4:48:92:36:12:46:1c:3c:3a:1b:
45:5a:5f:9e:83:1d:83:7c:1f:94:0e:9a:7c:de:be:
5c:35:f8:36:ef:05:d6:c6:0b:ad:1e:13:83:20:d1:
87:49:c0:52:ee:8b:8a:db:9c:62:17:8a:2e:39:29:
1b:67:f6:91:a1:43:1b:3b:86:ff:f1:21:54:7b:2b:
13:3b:ba:29:04:15:f4:a1:d5:33:07:67:5b:fd:04:
59:b3:ac:f6:d9:2a:4e:41:e2:12:20:ad:0e:41:f4:
85:35:4c:b2:58:b8:81:15:01:2d:44:12:a7:ce:7f:
90:ce:54:b5:38:83:f0:ae:e7:91:ea:27:aa:8d:de:
38:2c:8d:13:b5:48:11:6f:a9:92:0b:71:e3:eb:06:
d6:67:e4:a0:d9:ba:ad:94:26:46:32:e9:84:e6:f3:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:92:67:10:9F:E0:1A:BF:65:C3:6B:BD:43:6F:91:D0:24:15:E9:06
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3136392e302f32342d3234203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.142.169.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f7:72:52:c4:cc:89:8e:d3:09:72:61:d9:2a:e5:c0:5c:1e:
aa:42:8c:3a:70:1e:3d:27:6f:8a:82:24:d1:f4:d5:7e:06:1d:
44:22:2c:c1:b6:e8:0d:ee:a1:6c:b2:8e:6a:7d:b4:86:71:84:
5f:8a:19:42:e3:72:fc:b7:93:af:f4:8b:bd:cc:96:2b:e5:d4:
b2:29:75:e1:07:be:62:be:06:ca:13:e1:22:6b:1d:a4:f9:8d:
16:ed:8e:a6:7e:42:45:07:13:eb:d1:98:07:fc:e4:61:30:88:
e9:fd:a9:d9:bc:91:68:8c:7c:c2:b5:fc:8a:ba:5e:4d:76:85:
24:d9:86:26:66:8b:74:bc:5e:7b:3f:99:f2:da:0b:a2:74:d5:
63:0b:83:23:54:d0:65:38:2a:36:6b:20:1c:80:be:22:36:42:
2f:a6:66:84:5a:3a:ab:70:9f:a3:33:c3:a3:73:fe:4d:1e:23:
05:5f:bc:cd:00:1b:46:15:f9:e2:6c:fe:7a:33:af:65:f0:9a:
5c:3a:cb:ef:78:f2:87:eb:75:e2:82:27:8e:98:d1:69:7e:6b:
cd:a7:07:ce:34:9b:e1:52:5e:09:b7:66:96:6e:c1:2d:78:e7:
d9:9d:e3:76:e7:8f:e8:92:c5:d4:73:3d:78:e5:b5:98:95:59:
3e:19:e0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net