Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137332e302f32342d3234203d3e20313338303737.roa
File: 3131302e34342e3137332e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier: Yq/XaAs0lxDcSvLvB0MHJQh8pOxpoKxtFzAHMQ2W6FU=
Subject key identifier: A1:49:49:35:43:84:E2:32:99:E5:BC:2B:28:6E:FA:48:88:31:78:DF
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 767B6DDC894D4DCFCE1E638C3A90DFC4248D6CAD
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137332e302f32342d3234203d3e20313338303737.roa
Signing time: Wed 21 Aug 2024 14:51:18 +0000
ROA not before: Wed 21 Aug 2024 14:46:18 +0000
ROA not after: Wed 20 Aug 2025 14:51:18 +0000
asID: 138077
IP address blocks: 110.44.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 09:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7b:6d:dc:89:4d:4d:cf:ce:1e:63:8c:3a:90:df:c4:24:8d:6c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Aug 21 14:46:18 2024 GMT
Not After : Aug 20 14:51:18 2025 GMT
Subject: CN=A14949354384E23299E5BC2B286EFA48883178DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:7f:45:59:1c:35:0b:5c:b8:2a:84:30:73:
ed:74:78:f0:8e:c3:8a:45:40:cf:0c:67:aa:41:58:
e4:b0:db:23:dc:db:37:eb:97:01:05:41:62:87:73:
4f:27:1b:65:23:8b:af:ba:85:12:d7:f0:f8:0f:df:
27:e1:f3:3a:0d:48:0d:88:48:82:98:1f:89:aa:e1:
49:c7:e7:7a:8f:b0:97:f6:ed:48:44:3c:bb:e4:45:
82:55:cb:e5:31:bb:11:79:b6:ab:70:e9:12:a8:ec:
d7:fa:77:88:5c:24:f5:b8:fd:a5:fd:3c:dd:e3:81:
1d:3e:ba:28:a5:e9:00:57:0c:9c:ea:f0:01:14:8e:
9c:b3:ea:f1:31:24:db:82:2f:f5:d2:cb:b2:6b:2e:
5e:99:1b:4c:b2:27:ba:ab:43:92:7b:07:2f:35:48:
2c:4d:61:b3:a8:ae:07:4e:29:c7:6d:22:14:d5:be:
5c:26:a5:bd:18:5d:ed:fb:d5:6d:70:6e:52:b8:ed:
12:32:fa:51:7a:a9:0f:ae:b5:78:ff:19:95:53:f5:
12:2c:fd:69:ee:8f:52:c5:d6:ce:23:83:4e:41:ed:
dc:24:33:43:a0:64:5a:b4:a3:62:3e:a3:3d:69:9d:
4e:c0:a8:6a:29:b4:8e:81:d3:26:8c:74:0c:a9:b2:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:49:49:35:43:84:E2:32:99:E5:BC:2B:28:6E:FA:48:88:31:78:DF
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137332e302f32342d3234203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.173.0/24
Signature Algorithm: sha256WithRSAEncryption
99:28:1d:97:e5:68:8e:92:1d:f2:da:be:fc:0d:40:d9:6c:77:
66:4a:d7:c0:96:ee:63:33:80:25:a4:cc:85:f8:71:24:51:53:
dc:ce:43:19:06:ef:32:51:1c:9b:b9:c4:44:07:31:6a:e2:df:
77:a5:87:1b:fc:de:94:3a:5b:ae:06:36:12:ec:39:3b:3f:d2:
11:03:03:d5:74:d1:fb:c2:95:ca:04:50:e8:4e:a8:ef:fa:7b:
2f:e3:86:18:0e:9e:e9:42:c6:07:d7:33:dd:48:e8:52:8c:91:
6b:f1:92:43:e3:0b:2f:7d:dc:63:63:4a:c6:d5:34:9b:51:2a:
c9:f1:e4:64:62:09:d8:48:51:53:79:81:cc:11:cd:38:37:31:
83:c2:10:a5:cf:6b:29:25:ad:fe:06:ef:04:54:20:27:75:16:
c9:e4:c6:92:ca:1a:b7:b5:23:5e:61:dc:91:ba:ab:8b:2a:1b:
03:28:44:60:54:ba:91:ff:17:16:1a:15:37:45:ac:c4:de:51:
6e:c9:81:25:de:db:dd:56:49:4b:11:b1:22:ef:5a:88:fa:59:
b7:7b:15:43:e5:7a:c5:91:31:55:8d:3a:51:f2:92:3f:b2:52:
75:6c:6c:13:1a:00:fe:c7:45:b1:10:02:98:0d:8b:06:25:d8:
19:16:44:03
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdntt3IlNTc/OHmOMOpDfxCSNbK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC
MEMxMDhBOTAeFw0yNDA4MjExNDQ2MThaFw0yNTA4MjAxNDUxMThaMDMxMTAvBgNV
BAMTKEExNDk0OTM1NDM4NEUyMzI5OUU1QkMyQjI4NkVGQTQ4ODgzMTc4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh339FWRw1C1y4KoQwc+10ePCO
w4pFQM8MZ6pBWOSw2yPc2zfrlwEFQWKHc08nG2Uji6+6hRLX8PgP3yfh8zoNSA2I
SIKYH4mq4UnH53qPsJf27UhEPLvkRYJVy+UxuxF5tqtw6RKo7Nf6d4hcJPW4/aX9
PN3jgR0+uiil6QBXDJzq8AEUjpyz6vExJNuCL/XSy7JrLl6ZG0yyJ7qrQ5J7By81
SCxNYbOorgdOKcdtIhTVvlwmpb0YXe371W1wblK47RIy+lF6qQ+utXj/GZVT9RIs
/Wnuj1LF1s4jg05B7dwkM0OgZFq0o2I+oz1pnU7AqGoptI6B0yaMdAypssqfAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUoUlJNUOE4jKZ5bwrKG76SIgxeN8wHwYDVR0j
BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD
NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx
MDhBOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05
MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNzMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbiytMA0GCSqG
SIb3DQEBCwUAA4IBAQCZKB2X5WiOkh3y2r78DUDZbHdmStfAlu5jM4AlpMyF+HEk
UVPczkMZBu8yURybucREBzFq4t93pYcb/N6UOluuBjYS7Dk7P9IRAwPVdNH7wpXK
BFDoTqjv+nsv44YYDp7pQsYH1zPdSOhSjJFr8ZJD4wsvfdxjY0rG1TSbUSrJ8eRk
YgnYSFFTeYHMEc04NzGDwhClz2spJa3+Bu8EVCAndRbJ5MaSyhq3tSNeYdyRuquL
KhsDKERgVLqR/xcWGhU3RazE3lFuyYEl3tvdVklLEbEi71qI+lm3exVD5XrFkTFV
jTpR8pI/slJ1bGwTGgD+x0WxEAKYDYsGJdgZFkQD
-----END CERTIFICATE-----
Generated at Fri Aug 23 12:54:58 2024 by rpki-client on console-ams.rpki-client.org