Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32342d3234203d3e20313338303737.roa
File: 3131302e34342e3137322e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier: EIXZQXlYubnOEzCVkkiMmu+ZfRN+8WZucYoLebEDMOc=
Subject key identifier: A5:07:34:C6:85:45:90:D0:46:C0:EB:B5:62:F8:4C:E7:3E:6C:3C:46
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 35987829B4F18638E11D08C60965E28947D17838
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32342d3234203d3e20313338303737.roa
Signing time: Wed 21 Aug 2024 05:54:47 +0000
ROA not before: Wed 21 Aug 2024 05:49:47 +0000
ROA not after: Wed 20 Aug 2025 05:54:47 +0000
asID: 138077
IP address blocks: 110.44.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 09:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:98:78:29:b4:f1:86:38:e1:1d:08:c6:09:65:e2:89:47:d1:78:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Aug 21 05:49:47 2024 GMT
Not After : Aug 20 05:54:47 2025 GMT
Subject: CN=A50734C6854590D046C0EBB562F84CE73E6C3C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c4:80:6b:b1:ad:72:14:61:3f:d3:f9:28:f6:
92:a8:ee:03:80:2f:07:28:90:f5:be:88:fc:c5:63:
15:a8:80:0e:6c:32:dc:7c:9b:e4:2d:ee:72:ab:28:
a4:2c:3f:7f:4b:1c:18:8b:6b:6b:39:5b:83:01:93:
1d:c7:18:60:1f:c0:77:9a:38:dd:80:50:57:8f:11:
9f:7f:ae:ce:f0:62:5b:a0:d0:b2:8d:ef:e5:09:c3:
6e:0b:ea:3c:9a:15:8e:86:a4:d0:33:6c:f6:fa:02:
8a:4e:9c:71:cb:5b:2c:9d:7d:90:0c:d3:89:ac:49:
86:34:98:9c:ad:ab:12:11:66:08:90:f8:97:ef:6c:
a3:6d:79:d5:4c:2c:5c:15:01:4d:c2:7c:06:25:cd:
0d:e7:b8:4a:91:6d:b9:10:de:04:e5:2b:f3:d6:42:
57:21:d6:2e:04:c6:15:ed:6d:c9:bf:7e:5a:70:a3:
3a:ee:03:0b:92:dd:25:6a:24:d5:0d:0a:70:f9:f3:
15:b8:46:73:67:17:80:68:d8:2b:c5:9b:84:32:2a:
50:b8:b7:0d:61:10:12:37:cf:ee:9d:1e:eb:0d:5a:
71:58:d4:92:cf:f7:7b:8c:47:f1:b6:ea:c5:c6:45:
89:81:fe:8e:12:4e:df:31:07:d7:c8:b1:aa:b3:d4:
e2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:07:34:C6:85:45:90:D0:46:C0:EB:B5:62:F8:4C:E7:3E:6C:3C:46
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32342d3234203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.172.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1f:5a:b9:36:cb:67:f3:f0:9d:03:40:8b:aa:1e:f8:f2:53:
29:4f:ac:59:c9:13:7a:e7:c4:05:fe:c3:63:08:0a:f1:9b:b7:
a8:6d:f8:8b:ef:8e:68:4f:fa:44:20:e6:93:17:d2:cd:6e:48:
fe:ce:ed:39:bd:b3:3d:17:60:0b:26:80:10:e5:cb:f3:ce:af:
af:e3:61:bf:24:e4:69:d7:6b:61:a6:3b:da:bc:44:20:98:40:
d2:6b:87:05:8c:ef:16:0c:34:8d:46:71:6d:2b:27:03:e6:96:
43:32:1c:f7:d9:b7:6e:22:b9:60:e3:44:d0:56:9f:62:31:1a:
3d:4c:12:42:c7:61:29:2c:be:29:fa:98:19:cb:a6:1a:74:11:
92:23:83:a0:b9:ce:36:11:00:02:7b:50:56:0c:0b:e3:4f:7d:
3c:84:6f:32:2f:c4:0b:7b:72:7f:b5:38:18:7a:47:33:56:35:
e5:ff:af:61:db:33:04:af:78:5e:9c:ed:e1:85:60:10:ff:3b:
c5:42:4b:21:f8:90:81:17:73:a8:1f:b2:53:a1:0c:3d:ab:e5:
21:99:76:fd:36:a2:bd:9e:ca:0e:1b:f0:9e:dc:69:61:09:43:
54:40:63:4f:21:da:2f:38:01:4e:54:31:4d:bd:33:fb:cb:c4:
75:e6:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:45 2024 by rpki-client on console-fra.rpki-client.org