Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
File: 3131302e3233322e39302e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: jdPe3VmGHM8J5D1ffuuGha4g9/vE+WeoHi3YK7EsVCE=
Subject key identifier: CC:35:8A:60:C9:B6:0B:DB:52:63:D3:5F:A9:D9:B7:E2:1A:EA:5E:84
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 56D9E7F018FC995BCDEDD75EDC489ABD0265EE51
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
Signing time: Wed 02 Oct 2024 12:04:02 +0000
ROA not before: Wed 02 Oct 2024 11:59:02 +0000
ROA not after: Wed 01 Oct 2025 12:04:02 +0000
asID: 23679
IP address blocks: 110.232.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 06:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:d9:e7:f0:18:fc:99:5b:cd:ed:d7:5e:dc:48:9a:bd:02:65:ee:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Oct 2 11:59:02 2024 GMT
Not After : Oct 1 12:04:02 2025 GMT
Subject: CN=CC358A60C9B60BDB5263D35FA9D9B7E21AEA5E84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:0b:32:30:b7:16:ff:33:0d:48:6a:c0:51:
c4:24:3b:ad:78:08:fb:a1:91:fb:e0:43:df:42:fe:
8b:3c:c4:f3:0e:d1:1e:2d:ca:c9:c1:2f:d9:d4:a3:
9f:1c:c4:97:8d:50:21:3c:44:4e:ed:87:65:f6:cf:
ce:a3:ab:f8:5c:3f:2e:65:42:c6:01:dd:15:ce:92:
3b:3f:68:2d:0c:f0:17:57:8b:89:71:89:15:25:85:
51:d2:c8:c4:8e:cb:eb:c1:b9:b0:31:65:09:59:c5:
4e:57:22:e5:59:68:8b:ac:9c:07:6a:5f:85:b5:24:
8c:83:f2:ad:46:ed:11:06:a3:56:a3:e3:dd:3d:a0:
66:dc:34:86:cf:a9:ee:83:9f:1b:ce:37:db:26:96:
f5:cc:a3:16:67:8e:4f:26:53:f6:11:d9:2e:86:05:
1b:19:00:86:c5:a0:35:99:8f:63:49:e3:31:b1:96:
8c:38:9b:1a:98:84:05:1d:02:43:f1:34:05:2f:b9:
ff:cf:96:a8:cf:c7:6d:67:5f:c7:e8:11:6d:6c:a3:
b8:e7:ad:3f:48:1a:bb:46:a9:2c:96:a3:d1:6c:c6:
c1:cc:f3:53:d6:68:8a:4f:4d:8b:ab:6a:16:c8:19:
2c:75:bc:ea:33:f5:74:97:19:a1:81:a2:f0:cf:03:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:35:8A:60:C9:B6:0B:DB:52:63:D3:5F:A9:D9:B7:E2:1A:EA:5E:84
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.90.0/24
Signature Algorithm: sha256WithRSAEncryption
29:94:14:e4:96:74:d4:d0:b1:c7:19:32:06:41:8a:00:8a:5d:
e5:45:6f:dc:34:6c:21:6b:af:0c:a2:b3:7e:3a:db:ab:d3:01:
9c:cf:16:41:63:3a:6c:99:bb:17:58:27:fe:f0:42:36:78:db:
4a:81:32:aa:75:0b:19:8b:ea:58:df:e7:a2:4c:fa:b4:5f:4e:
b9:ec:1a:99:4b:f5:7a:7f:10:5c:31:50:7d:39:aa:aa:ed:17:
0b:5e:4d:5e:08:5c:37:f4:c2:98:03:3c:98:84:07:04:d5:88:
cc:8f:93:c5:9c:d2:3b:4e:0e:f5:e8:7c:6c:36:8b:ae:32:78:
4b:0d:be:99:5b:7a:79:63:27:5c:c2:e9:8c:72:56:e1:e8:b3:
4e:65:3e:82:01:5d:9d:88:20:09:ae:79:ee:8a:1a:1c:b4:5d:
c9:d0:d0:3d:c7:71:2f:ad:31:53:95:e0:18:1b:0d:1b:53:08:
4e:ff:05:9b:27:4d:25:3f:97:6d:89:11:ea:d3:f7:52:98:3d:
5c:1d:9c:f1:60:21:39:7d:c8:29:7c:cc:86:fb:46:f1:3c:f6:
96:02:38:68:28:45:9c:a0:b3:ab:42:d5:d7:68:2f:2b:87:81:
c4:68:0f:95:cf:0d:49:64:de:5c:1c:cf:5f:f4:af:87:55:f1:
04:74:eb:ee
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVtnn8Bj8mVvN7dde3EiavQJl7lEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yNDEwMDIxMTU5MDJaFw0yNTEwMDExMjA0MDJaMDMxMTAvBgNV
BAMTKENDMzU4QTYwQzlCNjBCREI1MjYzRDM1RkE5RDlCN0UyMUFFQTVFODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmoQsyMLcW/zMNSGrAUcQkO614
CPuhkfvgQ99C/os8xPMO0R4tysnBL9nUo58cxJeNUCE8RE7th2X2z86jq/hcPy5l
QsYB3RXOkjs/aC0M8BdXi4lxiRUlhVHSyMSOy+vBubAxZQlZxU5XIuVZaIusnAdq
X4W1JIyD8q1G7REGo1aj4909oGbcNIbPqe6DnxvON9smlvXMoxZnjk8mU/YR2S6G
BRsZAIbFoDWZj2NJ4zGxlow4mxqYhAUdAkPxNAUvuf/PlqjPx21nX8foEW1so7jn
rT9IGrtGqSyWo9FsxsHM81PWaIpPTYurahbIGSx1vOoz9XSXGaGBovDPAwNpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUzDWKYMm2C9tSY9Nfqdm34hrqXoQwHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG7oWjANBgkqhkiG
9w0BAQsFAAOCAQEAKZQU5JZ01NCxxxkyBkGKAIpd5UVv3DRsIWuvDKKzfjrbq9MB
nM8WQWM6bJm7F1gn/vBCNnjbSoEyqnULGYvqWN/nokz6tF9OuewamUv1en8QXDFQ
fTmqqu0XC15NXghcN/TCmAM8mIQHBNWIzI+TxZzSO04O9eh8bDaLrjJ4Sw2+mVt6
eWMnXMLpjHJW4eizTmU+ggFdnYggCa557ooaHLRdydDQPcdxL60xU5XgGBsNG1MI
Tv8FmydNJT+XbYkR6tP3Upg9XB2c8WAhOX3IKXzMhvtG8Tz2lgI4aChFnKCzq0LV
12gvK4eBxGgPlc8NSWTeXBzPX/Svh1XxBHTr7g==
-----END CERTIFICATE-----
Generated at Mon Oct 7 08:47:20 2024 by rpki-client on console-ams.rpki-client.org