Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e203234323036.roa
File: 3131302e34342e3137322e302f32322d3232203d3e203234323036.roa (raw, json)
Hash identifier: HTFYmHnVp1yBUnEya7CDVisRATEQAvG/zNuseZjoANM=
Subject key identifier: C6:EA:17:D0:D0:45:A5:27:F4:68:06:FC:52:1F:BD:8E:2A:0C:5E:B7
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 59F60D3EDE1A8BB7926A6321E39E8065650D5590
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e203234323036.roa
Signing time: Fri 23 Aug 2024 11:19:14 +0000
ROA not before: Fri 23 Aug 2024 11:14:14 +0000
ROA not after: Fri 22 Aug 2025 11:19:14 +0000
asID: 24206
IP address blocks: 110.44.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 07 Apr 2025 04:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f6:0d:3e:de:1a:8b:b7:92:6a:63:21:e3:9e:80:65:65:0d:55:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Aug 23 11:14:14 2024 GMT
Not After : Aug 22 11:19:14 2025 GMT
Subject: CN=C6EA17D0D045A527F46806FC521FBD8E2A0C5EB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:cc:5b:d5:50:39:39:f8:5c:3b:cb:46:49:
b3:32:57:80:e6:6b:44:7e:59:42:53:21:c9:d0:41:
fa:83:6c:7c:f6:a7:38:52:b1:d1:26:97:87:de:db:
9d:da:72:3e:33:7b:9f:92:74:5b:f9:51:4b:ca:ee:
96:b8:63:79:6b:a1:8e:f3:7e:10:8f:26:b2:de:f9:
3e:35:80:f8:45:b9:c5:dd:c7:ae:71:0d:c9:d8:d2:
1d:69:b8:23:9b:df:58:21:2c:f4:34:6b:bf:9e:ff:
ee:9b:7e:67:00:a9:24:2d:d1:43:47:60:9a:10:6b:
ed:6a:00:89:aa:13:e6:1b:31:5a:1f:45:86:67:8e:
69:91:5d:04:b2:65:6d:3b:07:45:32:53:23:f1:3e:
b9:68:72:47:4a:d8:aa:a4:9a:59:bf:7e:0a:db:1a:
8c:c8:31:1e:e6:91:f6:c4:d8:01:77:77:52:59:5e:
f0:03:75:54:c2:70:ae:9d:da:37:fa:06:cc:78:ba:
ac:b2:67:59:b2:b1:ca:33:7a:a6:4a:0a:cd:8a:f7:
d4:9b:f7:c8:86:b2:87:dd:0a:a6:cb:47:aa:7c:02:
f4:6e:7b:01:a6:50:11:94:71:e5:bf:1a:21:93:92:
31:e5:74:98:af:8c:92:f7:e3:01:9c:9f:f9:52:aa:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EA:17:D0:D0:45:A5:27:F4:68:06:FC:52:1F:BD:8E:2A:0C:5E:B7
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.172.0/22
Signature Algorithm: sha256WithRSAEncryption
32:8b:6c:71:30:ea:86:8a:3c:a4:fe:36:5b:9e:3c:ea:5a:10:
31:9b:85:2c:9d:8d:c8:28:12:a1:37:70:af:07:b5:12:83:db:
21:a0:6e:8e:c2:3c:aa:3a:0f:05:fc:cc:51:83:89:3a:54:e5:
92:fa:f6:18:b4:bb:c8:4c:c0:9f:0b:2d:aa:c3:a8:78:80:01:
ab:7f:b2:d0:19:90:5b:05:c8:11:dc:90:64:25:fc:d6:07:45:
39:c7:e5:4e:83:98:f2:50:a2:32:8c:f1:a3:0e:d9:53:69:22:
d3:9e:89:8e:fc:b1:33:f7:e9:89:86:69:84:4a:ea:69:a5:2b:
33:23:23:d9:7e:48:4d:6e:07:1b:f0:7d:36:10:46:ed:5d:87:
63:8a:14:f3:76:b8:61:ca:a2:b0:73:e4:39:cd:9f:6d:f7:30:
63:23:6a:60:2f:e2:9a:79:18:71:ee:74:dd:43:c0:57:46:8b:
89:d7:b8:d2:90:3a:b2:bd:81:3d:83:40:77:ac:9c:46:64:a1:
b8:0d:a5:54:33:1a:c4:00:a9:b2:3d:16:ff:15:50:c7:53:b7:
d0:12:84:50:32:c5:a8:24:37:b1:09:5e:78:f5:fa:a8:ae:92:
57:c8:ea:d8:d9:0c:00:4e:48:74:e2:47:db:06:f4:fe:2b:8c:
51:3e:ed:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:39:29 2025 by rpki-client