Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31342e302f32332d3233203d3e203436303233.roa
File: 3137352e3130362e31342e302f32332d3233203d3e203436303233.roa (raw, json)
Hash identifier: 0IadmmUR3nMbaclTlzPcmoanKFS67nx7DHbzhN6Xmao=
Subject key identifier: EC:F8:F2:43:9F:41:10:27:3C:A0:F2:69:5A:E5:17:8C:60:80:26:CA
Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial: 7778D78A97344F8D167193FFD96073D2B5269BAE
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31342e302f32332d3233203d3e203436303233.roa
Signing time: Mon 12 Aug 2024 15:29:32 +0000
ROA not before: Mon 12 Aug 2024 15:24:32 +0000
ROA not after: Mon 11 Aug 2025 15:29:32 +0000
asID: 46023
IP address blocks: 175.106.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 12 Nov 2024 15:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:78:d7:8a:97:34:4f:8d:16:71:93:ff:d9:60:73:d2:b5:26:9b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Validity
Not Before: Aug 12 15:24:32 2024 GMT
Not After : Aug 11 15:29:32 2025 GMT
Subject: CN=ECF8F2439F4110273CA0F2695AE5178C608026CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:7c:44:e2:80:27:f2:cc:fd:4f:68:e4:be:
8a:5f:96:5f:f5:98:f1:bb:a6:c7:68:9a:cc:b9:0b:
cb:5d:be:cc:49:c1:b5:7a:90:3e:21:64:99:0b:39:
ca:68:32:b9:a3:1d:f0:28:8f:a5:68:ed:af:af:c5:
72:4b:6a:a2:98:08:cd:c6:e9:d7:75:9f:b8:ca:75:
bf:a4:37:7f:6a:aa:6b:8d:b9:53:89:0b:ee:10:26:
c6:c4:8a:8c:ec:65:eb:88:a6:05:68:d7:7e:92:ed:
77:65:ac:6f:f6:65:cd:db:0d:e9:fb:78:69:87:24:
51:57:11:cb:f6:40:e4:92:08:4a:a4:31:4a:ab:0a:
67:b7:20:f7:d9:56:19:97:73:57:de:8c:de:e5:c9:
4e:ca:e2:a7:65:7e:55:b1:2b:18:33:a1:58:87:f1:
8a:7d:23:7a:c2:89:3a:51:b5:29:4e:0a:c2:99:67:
77:23:86:e6:6a:3d:fd:59:ed:0c:89:16:5f:eb:49:
c1:71:51:7f:e5:34:cf:da:eb:df:8e:f3:8e:d3:11:
4e:fd:c9:bb:a4:75:8b:b3:ac:19:8c:6f:6f:8b:52:
d9:2a:05:ed:4b:fc:ba:e0:3e:e9:e4:92:88:c8:80:
bf:9e:cb:a8:13:f2:e3:e9:60:77:b4:78:9a:ad:c7:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F8:F2:43:9F:41:10:27:3C:A0:F2:69:5A:E5:17:8C:60:80:26:CA
X509v3 Authority Key Identifier:
keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e31342e302f32332d3233203d3e203436303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.106.14.0/23
Signature Algorithm: sha256WithRSAEncryption
07:23:b7:86:00:f4:a4:75:6a:a1:16:9c:57:3e:fe:c0:3f:d9:
89:69:9d:00:46:1b:f9:53:bb:f1:fa:a0:30:5b:c5:fd:f3:7e:
3c:98:4e:8f:5a:74:d2:67:fe:13:56:0c:e5:85:ef:3f:3c:63:
fa:e3:5f:19:0e:70:e5:dd:60:b5:79:2b:5f:a2:60:77:a5:ef:
1d:c2:c0:53:49:59:e1:3b:f7:74:66:a9:8d:48:29:43:2b:b1:
df:86:26:92:3d:7c:10:4e:27:5c:ff:d1:6b:b3:35:07:8e:1b:
2a:a9:5d:aa:9c:96:72:32:5c:73:b6:3e:ec:ed:fb:b8:45:90:
c7:26:9a:12:93:41:5c:04:58:df:8c:bd:12:4f:38:69:4f:4b:
9f:e6:b4:39:07:aa:25:a7:a8:a1:a0:00:3f:82:90:7f:20:ff:
50:14:30:7f:fa:b7:bf:a5:9e:63:c9:4d:8e:51:d8:c3:66:ac:
03:81:af:a9:f9:25:d5:8e:21:b1:65:65:7f:aa:bc:80:6d:e7:
e8:c1:25:70:ea:2f:fd:82:87:34:2f:74:a4:95:d4:3a:7f:74:
71:7b:d9:10:fc:fd:42:c3:3e:9b:4d:f4:dd:8e:ad:cb:36:77:
00:33:95:4c:f9:12:3a:ee:dc:67:f7:6c:1d:42:c2:9b:bf:d4:
d4:44:71:7b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUd3jXipc0T40WcZP/2WBz0rUmm64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3
NjRBNDY5NTAeFw0yNDA4MTIxNTI0MzJaFw0yNTA4MTExNTI5MzJaMDMxMTAvBgNV
BAMTKEVDRjhGMjQzOUY0MTEwMjczQ0EwRjI2OTVBRTUxNzhDNjA4MDI2Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPr3xE4oAn8sz9T2jkvopfll/1
mPG7psdomsy5C8tdvsxJwbV6kD4hZJkLOcpoMrmjHfAoj6Vo7a+vxXJLaqKYCM3G
6dd1n7jKdb+kN39qqmuNuVOJC+4QJsbEiozsZeuIpgVo136S7XdlrG/2Zc3bDen7
eGmHJFFXEcv2QOSSCEqkMUqrCme3IPfZVhmXc1fejN7lyU7K4qdlflWxKxgzoViH
8Yp9I3rCiTpRtSlOCsKZZ3cjhuZqPf1Z7QyJFl/rScFxUX/lNM/a69+O847TEU79
ybukdYuzrBmMb2+LUtkqBe1L/LrgPunkkojIgL+ey6gT8uPpYHe0eJqtxyo/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU7PjyQ59BECc8oPJpWuUXjGCAJsowHwYDVR0j
BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx
M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB
NDY5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIwLWUxN2EtNDIxYi05
NjU1LTAzMjQ1YTAxYWVmOC8wLzMxMzczNTJlMzEzMDM2MmUzMTM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAa9qDjANBgkqhkiG
9w0BAQsFAAOCAQEAByO3hgD0pHVqoRacVz7+wD/ZiWmdAEYb+VO78fqgMFvF/fN+
PJhOj1p00mf+E1YM5YXvPzxj+uNfGQ5w5d1gtXkrX6Jgd6XvHcLAU0lZ4Tv3dGap
jUgpQyux34Ymkj18EE4nXP/Ra7M1B44bKqldqpyWcjJcc7Y+7O37uEWQxyaaEpNB
XARY34y9Ek84aU9Ln+a0OQeqJaeooaAAP4KQfyD/UBQwf/q3v6WeY8lNjlHYw2as
A4Gvqfkl1Y4hsWVlf6q8gG3n6MElcOov/YKHNC90pJXUOn90cXvZEPz9QsM+m030
3Y6tyzZ3ADOVTPkSOu7cZ/dsHULCm7/U1ERxew==
-----END CERTIFICATE-----
Generated at Tue Nov 12 19:19:58 2024 by rpki-client on console-ams.rpki-client.org