Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137332e302f32342d3234203d3e203435373237.roa
File: 3131342e3134322e3137332e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier: NinlYLe4KhFfzg+boqAhBI5afm5yTDeG2E0zgIVGtgU=
Subject key identifier: BE:39:94:A0:85:A5:33:3F:F4:E3:97:09:DD:1A:DD:5E:0C:2D:4F:34
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 284E5B9C680E024513D218B6E64BB8C22C6E1CCF
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137332e302f32342d3234203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 16:56:20 +0000
ROA not before: Tue 03 Dec 2024 16:51:20 +0000
ROA not after: Tue 02 Dec 2025 16:56:20 +0000
asID: 45727
IP address blocks: 114.142.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Dec 2024 21:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4e:5b:9c:68:0e:02:45:13:d2:18:b6:e6:4b:b8:c2:2c:6e:1c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 16:51:20 2024 GMT
Not After : Dec 2 16:56:20 2025 GMT
Subject: CN=BE3994A085A5333FF4E39709DD1ADD5E0C2D4F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:fa:8e:3a:f0:5c:f6:be:74:ca:cb:5f:e5:
13:cf:c6:3c:39:03:75:91:51:cd:a1:e7:7b:5c:17:
07:3a:0e:cb:0b:a3:d9:7a:de:14:52:d4:77:6a:bb:
d5:a1:93:36:4d:34:4d:49:5d:0b:e2:e0:98:61:8d:
b6:cd:22:65:0d:2b:7c:01:5f:94:19:61:3d:0d:5a:
ed:9f:72:2f:3b:cc:a6:2c:1d:60:c1:16:0d:e4:02:
6a:a8:17:ef:dd:9e:de:a4:32:e1:63:5e:72:49:d7:
b2:05:cd:da:b3:98:ef:e9:c2:5d:d7:45:70:cc:50:
dd:45:36:0f:62:ec:bf:3e:5c:07:62:90:71:bc:67:
7e:c1:01:a3:3d:02:8a:4f:27:67:f5:e4:7c:fb:9f:
b4:8a:53:35:93:f0:b9:db:16:78:84:99:6d:e0:da:
24:11:13:87:7f:87:23:44:f7:3e:c7:fc:1e:aa:ff:
27:f7:a5:96:39:f3:b7:60:06:2d:92:68:51:53:ff:
90:95:54:5a:80:58:ba:6f:25:c8:d3:da:70:c7:c2:
1e:68:8d:87:05:8c:1f:da:78:ea:69:1e:56:b8:ea:
fb:ca:fd:b5:ea:38:96:fc:93:28:b1:96:04:0b:ce:
dc:57:94:b9:57:ee:4a:c4:aa:a2:2d:0c:ca:68:5c:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:39:94:A0:85:A5:33:3F:F4:E3:97:09:DD:1A:DD:5E:0C:2D:4F:34
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/3131342e3134322e3137332e302f32342d3234203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.142.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a1:29:5f:c3:57:2f:63:0a:2d:d1:d8:ef:d1:84:6c:07:e0:
e7:df:3b:05:b0:be:64:4e:d9:9d:95:78:13:38:a5:65:ff:ee:
7d:36:66:9c:22:4f:3d:ce:24:fb:3b:8d:af:73:2e:6f:65:27:
77:1b:6b:8c:d7:d1:6b:dc:42:a8:4a:45:3c:37:5e:62:34:9e:
8b:6d:9f:fb:aa:66:ac:3e:f6:fe:d8:c5:7e:15:ab:16:8b:b0:
11:28:40:e9:44:ad:79:f3:ca:08:ec:b4:5d:ba:bd:34:8c:40:
37:c4:0c:bc:38:07:9b:bb:c5:10:f8:02:e4:f4:d0:1f:4a:f3:
c2:48:cd:ce:23:09:18:4c:c3:bc:7c:7f:d8:b7:d4:b9:29:75:
ca:78:58:f7:f4:df:15:f3:82:05:65:7c:5b:ce:2b:dd:7e:c8:
62:15:1c:4d:9f:9e:99:42:a4:3e:69:04:3d:c6:40:ab:e8:ce:
70:50:48:a1:5d:f2:46:5e:9d:cc:3e:54:09:34:91:30:b2:f7:
c1:31:ab:7b:5f:4a:d8:37:ff:d2:82:db:75:ca:7d:5f:e8:7f:
fb:da:79:df:40:13:ee:05:37:94:03:f1:40:58:d2:ef:fb:bf:
34:75:5a:d6:dd:b5:6b:3a:fa:9b:1d:c8:79:24:9a:bd:91:a6:
93:f8:69:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 22:42:39 2024 by rpki-client on console.sobornost.net