Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32332d3233203d3e203234323036.roa
File: 3131302e34342e3137322e302f32332d3233203d3e203234323036.roa (raw, json)
Hash identifier: LiP2cM4Ev8FDRwlKOUXIrIRaEzOBJ+ZuyUD70SUM5aw=
Subject key identifier: EE:CB:7B:DE:B4:5E:11:3C:24:E1:22:A0:26:E6:2E:A5:DE:BE:34:4A
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 7ED41AF0D793D6BF8E9C271D9A4C9B0B495FF724
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32332d3233203d3e203234323036.roa
Signing time: Thu 11 Jul 2024 09:00:00 +0000
ROA not before: Thu 11 Jul 2024 08:55:00 +0000
ROA not after: Thu 10 Jul 2025 09:00:00 +0000
asID: 24206
IP address blocks: 110.44.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 21 Aug 2024 05:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d4:1a:f0:d7:93:d6:bf:8e:9c:27:1d:9a:4c:9b:0b:49:5f:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Jul 11 08:55:00 2024 GMT
Not After : Jul 10 09:00:00 2025 GMT
Subject: CN=EECB7BDEB45E113C24E122A026E62EA5DEBE344A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:0c:d6:63:0d:75:51:eb:90:78:25:b2:ac:
d5:cc:92:96:0a:54:b8:6c:ad:27:50:98:a2:70:59:
a5:80:b4:34:dd:05:fa:60:59:3b:1f:24:a4:94:ff:
b4:16:fe:66:58:58:0c:59:aa:d3:23:4c:a7:41:a7:
8f:d4:47:47:10:b4:fe:55:f6:28:68:77:59:94:cd:
17:1c:b2:78:8e:4b:f0:cb:ad:53:15:3e:e4:fd:85:
2e:d7:c8:56:a4:94:a3:37:ce:9f:0f:f5:aa:63:57:
00:35:09:38:92:9a:38:cd:ac:ab:1f:3b:cf:13:5d:
8a:36:11:d7:f7:a0:ae:c1:41:8c:4e:bb:05:dd:ca:
36:78:d0:35:d2:51:15:b1:7e:13:6e:5d:c6:25:10:
97:94:ba:f1:d5:28:e6:a3:43:d6:be:2e:3f:7a:1e:
fe:7a:96:db:06:f5:a6:3a:99:cd:15:3a:c0:37:c1:
81:d0:a6:07:23:7d:00:17:98:77:76:38:4f:56:6b:
9c:af:79:69:12:c6:92:69:e5:f3:b3:c4:09:8b:66:
16:d2:f1:3b:bc:3a:fd:36:16:0e:67:e4:27:f2:59:
b1:b9:7b:b2:06:b6:97:69:ee:d3:92:0e:99:fd:9d:
32:13:6f:74:0a:08:7d:b3:fe:c1:11:b1:f1:0b:fd:
7f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CB:7B:DE:B4:5E:11:3C:24:E1:22:A0:26:E6:2E:A5:DE:BE:34:4A
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32332d3233203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.172.0/23
Signature Algorithm: sha256WithRSAEncryption
54:aa:87:ff:fb:57:d3:bf:02:0f:01:05:82:0e:e8:ee:3a:7a:
a4:be:0a:5f:ea:43:a6:cc:0a:f4:9c:94:66:b1:ec:6e:83:3f:
d5:c4:09:75:62:7c:f7:35:46:fd:5d:ac:93:8a:ea:cc:33:d0:
1a:8a:0d:33:e5:76:8c:2e:dd:24:cf:1b:08:e1:52:0f:be:bf:
3c:75:fa:06:cd:f5:08:06:ff:49:cd:69:1f:f7:7c:72:9f:19:
c6:3d:9e:a9:9e:ef:02:39:2d:52:3b:28:30:04:27:e5:44:cd:
13:6e:98:a9:cb:2d:4d:3b:67:b4:b8:a4:c7:67:33:26:0a:57:
5d:19:7b:a6:64:c3:a2:7e:85:26:ec:73:f0:ae:db:86:9b:9b:
9e:db:54:54:f6:3c:45:2e:69:0c:9c:b4:60:4c:9e:3e:09:db:
70:56:ad:1b:b8:b5:ba:31:7f:e6:50:6f:cb:14:23:0c:fb:3f:
05:99:c6:8b:4b:d8:5f:c2:ed:ea:95:41:42:c1:2f:3b:88:62:
9d:9e:c4:49:ab:ef:9a:ef:5d:6d:d8:c0:3a:d7:fd:af:e3:7c:
20:1f:09:27:4f:77:e7:55:be:82:3c:45:26:35:1f:36:50:27:
e1:a2:52:c7:77:23:0c:fb:a2:24:f6:4e:4a:92:9d:08:26:4c:
45:d7:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 07:45:44 2024 by rpki-client on console-ams.rpki-client.org