Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32312d3231203d3e203234323036.roa
File: 3131302e34342e3136382e302f32312d3231203d3e203234323036.roa (raw, json)
Hash identifier: YTCUYZYSpechdAZS2cX/zW2hhKKHDF20S0N5+26BMsA=
Subject key identifier: 02:EA:13:7E:71:19:17:A7:5E:4B:A5:9E:9D:61:55:89:73:80:D8:20
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 5C20DC89A65A8B3CF858C0164BF969068CE6D5A4
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32312d3231203d3e203234323036.roa
Signing time: Wed 10 Jul 2024 12:00:00 +0000
ROA not before: Wed 10 Jul 2024 11:55:00 +0000
ROA not after: Wed 09 Jul 2025 12:00:00 +0000
asID: 24206
IP address blocks: 110.44.168.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 21 Aug 2024 15:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:20:dc:89:a6:5a:8b:3c:f8:58:c0:16:4b:f9:69:06:8c:e6:d5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Jul 10 11:55:00 2024 GMT
Not After : Jul 9 12:00:00 2025 GMT
Subject: CN=02EA137E711917A75E4BA59E9D6155897380D820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:e6:51:82:eb:3b:91:eb:17:67:1f:27:41:
7a:cf:46:22:32:9f:48:1f:50:9b:32:d9:11:fd:70:
d2:a1:74:76:50:a0:26:4e:59:94:8d:40:6a:58:ed:
6e:ef:54:9f:73:66:0d:fc:3a:d5:71:3a:0e:06:87:
68:92:a4:06:f6:09:50:ee:67:94:34:bd:05:80:bd:
20:30:21:83:a8:9f:20:37:bd:93:7c:d7:d3:22:69:
4d:3b:fc:07:b7:d6:33:14:37:8d:27:9c:a0:9b:ab:
52:9c:f9:c3:7f:f3:59:f2:83:fe:34:d6:80:68:e8:
36:96:ad:80:3c:47:db:b7:a2:c5:66:21:89:22:17:
d3:03:48:53:df:e3:2c:a6:3e:15:73:b9:6e:0a:0d:
b0:b8:bd:be:d3:c0:aa:2b:4c:f4:3c:ce:ec:40:33:
f3:2d:5c:40:b5:8f:84:77:76:af:41:c9:9f:2e:5f:
1c:07:13:0f:dc:c1:ac:20:5e:b9:33:6a:b3:20:77:
fb:da:8b:63:d9:95:f8:11:d8:0f:e5:6e:1f:a8:77:
e3:e1:a6:ee:95:bf:c8:7d:cd:92:5f:73:01:58:90:
01:8a:15:ac:68:b2:af:8b:77:ed:66:e0:16:a1:bb:
20:0c:9d:ed:aa:b0:36:69:ab:97:90:84:a3:91:7d:
60:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EA:13:7E:71:19:17:A7:5E:4B:A5:9E:9D:61:55:89:73:80:D8:20
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32312d3231203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.168.0/21
Signature Algorithm: sha256WithRSAEncryption
60:cf:45:d1:04:8c:16:f3:a8:09:5b:80:08:4d:7a:96:b8:21:
4d:53:16:1e:18:03:1e:70:2c:53:5b:c3:b4:1e:e5:74:64:0c:
fe:15:0a:32:dc:ac:48:40:79:1c:9b:61:82:9b:9c:c7:50:af:
3c:20:7a:cb:ce:a1:84:1c:b6:74:94:f9:11:64:08:f4:d0:6e:
6d:0d:fa:82:da:cd:52:20:42:55:73:1e:2d:32:38:b8:9a:39:
3e:26:69:6d:84:7c:41:75:f3:a6:97:ce:94:30:c8:d8:38:f3:
a4:d3:6b:ff:c8:f6:32:c5:78:9e:2b:fe:2f:27:c5:31:2f:cd:
39:90:a7:8d:cd:14:70:37:b6:6b:dd:d7:4e:12:96:db:8a:a3:
d0:36:cf:3d:3e:dd:c0:16:d0:32:af:32:28:5a:e2:3a:16:7e:
6e:40:ea:eb:ba:5a:d6:4d:f6:44:6c:2a:81:45:8d:55:cd:5e:
ed:f1:87:b7:d2:2c:38:82:f1:15:af:93:50:84:bd:38:cb:26:
b3:ec:5c:19:4a:0b:43:1c:ad:30:b7:ec:42:93:02:8d:85:05:
4f:cb:7e:a2:00:b0:c1:d3:4e:b3:6a:5c:f7:b0:d6:d8:7a:f1:
ff:47:71:77:68:d7:36:2c:cf:5f:f3:2d:6c:14:c3:8c:b5:f9:
68:55:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:59:36 2024 by rpki-client on console-ams.rpki-client.org