Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39322e302f32322d3234203d3e203233363739.roa
File: 3131302e3233322e39322e302f32322d3234203d3e203233363739.roa (raw, json)
Hash identifier: 5CnHdgRLWogSSFnX+xlsT6Gbm86fSEvQVB/iy/Z32F8=
Subject key identifier: CD:61:3C:E1:CB:72:F8:D6:70:C2:5E:97:B5:8F:EE:90:39:00:33:65
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 02DA4DACA578C00AC63987409FD3D464D112CA64
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39322e302f32322d3234203d3e203233363739.roa
Signing time: Wed 02 Oct 2024 12:04:57 +0000
ROA not before: Wed 02 Oct 2024 11:59:57 +0000
ROA not after: Wed 01 Oct 2025 12:04:57 +0000
asID: 23679
IP address blocks: 110.232.92.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 12:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:da:4d:ac:a5:78:c0:0a:c6:39:87:40:9f:d3:d4:64:d1:12:ca:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Oct 2 11:59:57 2024 GMT
Not After : Oct 1 12:04:57 2025 GMT
Subject: CN=CD613CE1CB72F8D670C25E97B58FEE9039003365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f4:fb:fa:7c:71:4d:8a:af:e7:de:0d:63:59:
d6:11:4a:8a:8f:41:3e:8c:f0:b9:40:4c:c6:12:98:
e7:e4:3b:90:e4:7f:0f:49:f4:20:79:09:5a:9e:4c:
0f:d6:45:25:b4:d4:0c:00:2c:fb:81:5f:b1:ba:df:
40:63:83:0e:0c:c6:62:0d:b6:42:04:21:57:ca:be:
8b:90:dd:c6:f7:8e:b6:88:80:49:e3:70:01:cb:44:
02:e4:19:69:0f:04:47:af:48:d8:c3:4f:48:6c:86:
ca:15:2a:cf:12:24:f1:a3:92:ec:5b:ac:cb:87:73:
d9:98:b7:ca:1e:2d:cf:80:26:34:11:7a:ea:d5:09:
15:05:3a:4f:ea:45:19:70:69:58:96:a3:0f:1d:5b:
39:8e:67:23:21:cb:8d:82:a3:5f:1f:2f:ac:80:f8:
b0:c5:ab:ba:b3:51:f2:6d:6d:8c:6a:c0:ba:3c:f9:
72:9e:c0:bc:41:bf:8b:d6:6f:92:e0:fa:16:17:1a:
fa:6b:c5:d7:fc:7d:9e:13:5a:96:25:af:1e:63:3e:
ff:74:50:3a:6d:e6:ba:87:59:f7:50:35:52:59:96:
ed:31:36:ce:c1:d6:03:81:49:fd:9b:b8:0b:19:a9:
f2:a3:93:c7:2c:8e:60:7c:6c:73:83:f8:7e:ac:03:
11:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:61:3C:E1:CB:72:F8:D6:70:C2:5E:97:B5:8F:EE:90:39:00:33:65
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39322e302f32322d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:85:4e:49:18:b9:2d:4c:b4:17:70:36:56:76:79:1a:33:4d:
b9:04:fc:71:96:3e:3c:c9:17:98:02:4d:25:1c:8c:63:a7:3a:
7c:b4:b6:b3:67:55:af:1a:e2:26:35:f0:b3:3f:85:f5:ff:3e:
a8:1b:20:b0:c0:4e:a9:5b:ad:ac:56:4b:2b:cc:63:18:5f:dc:
11:60:51:6f:c7:9a:06:43:7a:c5:d5:61:a9:12:47:43:44:6b:
ec:f3:96:1a:72:53:71:40:34:19:5d:11:84:da:75:2f:bf:07:
9e:18:5a:19:98:d1:77:76:fe:74:d0:1c:fe:e6:5f:89:83:29:
e7:3a:c9:f8:53:ac:5a:4f:e1:e2:b6:8a:f8:ef:57:e6:b2:b4:
c9:07:46:ef:92:72:50:20:6d:46:e1:23:74:dd:71:ac:74:5e:
a4:65:c5:ba:08:9b:f9:5b:fb:3c:34:a7:a2:68:44:0e:1f:a4:
cf:6d:0f:41:a5:6e:e5:ff:35:4f:3d:90:b7:69:0d:8c:60:82:
1c:e1:07:59:e4:32:08:b0:c3:1d:e3:5b:dc:6e:85:da:1f:cd:
f4:4e:f4:36:f4:34:fd:69:97:f0:f9:8b:a0:1a:c3:68:ce:8c:
8e:81:1e:1a:79:96:dd:58:7c:6a:47:23:a7:e4:69:b7:1e:b4:
3a:c0:05:e7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAtpNrKV4wArGOYdAn9PUZNESymQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yNDEwMDIxMTU5NTdaFw0yNTEwMDExMjA0NTdaMDMxMTAvBgNV
BAMTKENENjEzQ0UxQ0I3MkY4RDY3MEMyNUU5N0I1OEZFRTkwMzkwMDMzNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx9Pv6fHFNiq/n3g1jWdYRSoqP
QT6M8LlATMYSmOfkO5Dkfw9J9CB5CVqeTA/WRSW01AwALPuBX7G630Bjgw4MxmIN
tkIEIVfKvouQ3cb3jraIgEnjcAHLRALkGWkPBEevSNjDT0hshsoVKs8SJPGjkuxb
rMuHc9mYt8oeLc+AJjQReurVCRUFOk/qRRlwaViWow8dWzmOZyMhy42Co18fL6yA
+LDFq7qzUfJtbYxqwLo8+XKewLxBv4vWb5Lg+hYXGvprxdf8fZ4TWpYlrx5jPv90
UDpt5rqHWfdQNVJZlu0xNs7B1gOBSf2buAsZqfKjk8csjmB8bHOD+H6sAxEFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUzWE84cty+NZwwl6XtY/ukDkAM2UwHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzOTMyMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm7oXDANBgkqhkiG
9w0BAQsFAAOCAQEAP4VOSRi5LUy0F3A2VnZ5GjNNuQT8cZY+PMkXmAJNJRyMY6c6
fLS2s2dVrxriJjXwsz+F9f8+qBsgsMBOqVutrFZLK8xjGF/cEWBRb8eaBkN6xdVh
qRJHQ0Rr7POWGnJTcUA0GV0RhNp1L78HnhhaGZjRd3b+dNAc/uZfiYMp5zrJ+FOs
Wk/h4raK+O9X5rK0yQdG75JyUCBtRuEjdN1xrHRepGXFugib+Vv7PDSnomhEDh+k
z20PQaVu5f81Tz2Qt2kNjGCCHOEHWeQyCLDDHeNb3G6F2h/N9E70NvQ0/WmX8PmL
oBrDaM6MjoEeGnmW3Vh8akcjp+Rptx60OsAF5w==
-----END CERTIFICATE-----
Generated at Mon Oct 7 16:59:03 2024 by rpki-client on console-fra.rpki-client.org