Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32332d3233203d3e20313338303737.roa
File: 3131302e34342e3137322e302f32332d3233203d3e20313338303737.roa (raw, json)
Hash identifier: ANrVO7Pdr2nb0cESoYkMeB/xyi9+08sALiQhisFN1xk=
Subject key identifier: 9F:06:B7:77:F3:50:0F:2C:2A:A5:C2:F5:51:10:33:BC:B8:D5:50:7A
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 26AF2124CB310299306E4B730FF57E6B22B09BC5
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32332d3233203d3e20313338303737.roa
Signing time: Wed 21 Aug 2024 15:02:00 +0000
ROA not before: Wed 21 Aug 2024 14:57:00 +0000
ROA not after: Wed 20 Aug 2025 15:02:00 +0000
asID: 138077
IP address blocks: 110.44.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 23 Aug 2024 09:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:af:21:24:cb:31:02:99:30:6e:4b:73:0f:f5:7e:6b:22:b0:9b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Aug 21 14:57:00 2024 GMT
Not After : Aug 20 15:02:00 2025 GMT
Subject: CN=9F06B777F3500F2C2AA5C2F5511033BCB8D5507A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:e5:54:ac:2a:c3:de:65:2f:64:16:20:bf:
05:9c:91:bd:b6:d1:88:15:04:a3:45:b6:ca:af:7c:
de:05:b9:aa:a5:75:ea:8a:3a:c0:86:74:0e:40:fd:
44:f8:f6:50:f6:9f:65:8a:64:8d:24:fb:4e:f3:fa:
2c:5b:d9:7f:cb:76:ab:82:57:58:4e:bf:a4:b1:4f:
07:fe:10:16:2b:8c:3d:19:c6:ae:4e:10:fb:a2:f2:
fa:d1:38:76:24:fa:4f:df:37:05:32:b7:93:ee:2e:
15:bb:e7:b0:0d:94:08:08:18:b9:65:46:28:e0:15:
b2:1b:e7:2b:06:b1:82:14:c1:b2:1c:38:ae:41:b5:
75:1e:3c:1b:a7:91:6e:87:fc:bf:02:4f:fd:87:a8:
3b:66:d5:20:13:5b:dc:90:82:17:d6:6b:24:c0:da:
b1:bb:7d:39:94:33:80:8d:18:28:dd:65:d6:c1:46:
7b:6b:19:a0:b6:2f:7c:93:32:bf:ca:4a:5c:95:b9:
b7:4d:53:12:0d:49:ab:b5:58:fe:2e:97:b8:ef:4f:
23:2d:65:62:7c:81:85:9a:08:9b:7a:39:b2:30:5d:
57:bc:a2:4f:d1:5d:3f:96:ba:24:16:98:91:65:4a:
e9:67:77:7e:52:f3:e6:ce:44:c4:8c:3e:26:b3:4c:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:B7:77:F3:50:0F:2C:2A:A5:C2:F5:51:10:33:BC:B8:D5:50:7A
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32332d3233203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.172.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:58:68:d7:bd:2c:f5:b3:3c:24:4f:bf:d1:64:36:7e:8a:b1:
44:22:71:ed:a5:8a:08:b1:26:ee:be:59:8c:e2:83:5c:ae:7c:
19:24:a0:cc:50:e8:63:c7:5b:09:b6:df:e2:fd:e2:6e:53:4c:
0e:a0:8a:4d:91:27:f0:24:52:25:c8:b6:97:f6:46:a4:3f:56:
6a:a7:fa:f6:b6:4e:74:87:4b:b2:88:0d:86:43:18:91:da:be:
ad:f3:d8:85:de:56:d6:bb:13:7f:1e:a6:bb:d2:80:c5:3a:c4:
03:8f:dc:61:b7:89:3d:7b:b7:a0:fa:b9:f3:ab:62:02:53:e0:
1f:d6:8c:a6:c5:cd:e0:04:e9:b9:b1:36:c2:7a:6d:21:e5:e5:
ff:fb:4f:ee:00:75:7e:cf:41:f7:22:95:4f:3f:4d:d9:cd:10:
90:49:cc:e0:0c:13:b6:1f:08:f5:1b:f9:f4:2b:a6:6f:d5:ff:
c4:c9:e3:18:1c:21:f8:70:2b:52:47:9a:aa:cf:44:f2:35:6e:
7c:96:8b:d8:e5:11:54:c7:9a:46:fe:24:ef:f1:2a:2b:cc:b4:
01:62:a6:4f:2d:3b:c0:7d:b0:c2:d1:66:71:d6:e5:3b:9d:3f:
06:af:ad:30:fe:c4:a2:a2:eb:f5:45:17:5f:58:a9:c9:e6:99:
20:c7:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:54:58 2024 by rpki-client on console-ams.rpki-client.org