Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32332d3233203d3e20313338303737.roa
File: 3131302e34342e3137342e302f32332d3233203d3e20313338303737.roa (raw, json)
Hash identifier: UJZvAyTM6BtEaq+vzpshcgGz8kZNBMSdVnIoXhmfzyU=
Subject key identifier: 40:28:2C:09:9A:C6:B7:7E:28:57:EB:B6:2A:CF:7D:85:BE:74:42:8D
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 754DF02CB0A3EF1FD49AC3693A1B9BEEBAA6F867
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32332d3233203d3e20313338303737.roa
Signing time: Wed 21 Aug 2024 15:18:11 +0000
ROA not before: Wed 21 Aug 2024 15:13:11 +0000
ROA not after: Wed 20 Aug 2025 15:18:11 +0000
asID: 138077
IP address blocks: 110.44.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 23 Aug 2024 09:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4d:f0:2c:b0:a3:ef:1f:d4:9a:c3:69:3a:1b:9b:ee:ba:a6:f8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Aug 21 15:13:11 2024 GMT
Not After : Aug 20 15:18:11 2025 GMT
Subject: CN=40282C099AC6B77E2857EBB62ACF7D85BE74428D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:ac:79:b7:b4:93:93:5f:f5:a2:da:9d:6b:
1c:84:a8:09:8a:a6:83:8b:a0:53:35:86:bc:35:02:
16:38:8c:16:b0:3a:5e:63:41:41:c8:97:3e:9c:a2:
12:c9:21:57:1c:c5:af:a7:d7:4a:59:3b:a8:cf:f8:
b9:08:99:b2:05:9b:2f:d0:24:48:f2:5e:e5:2d:8c:
86:db:dc:70:36:e9:5b:9d:1d:83:18:28:d7:18:55:
2a:75:57:e9:4d:55:c2:b0:8f:3b:80:c6:62:12:c8:
c5:eb:26:a0:03:55:97:8f:8d:04:dc:f2:bc:5f:6a:
13:48:38:65:0e:ff:bd:2e:79:ed:29:0e:d2:58:08:
63:50:44:d0:1b:fc:e6:48:a7:8c:76:0f:a5:c4:90:
63:ec:86:8a:f1:58:c1:59:90:34:c3:ce:ed:90:28:
1b:4f:87:9e:ef:a0:eb:50:58:9f:4b:6c:6e:c4:84:
4c:62:78:76:5b:dd:1b:e5:a1:05:70:4e:24:ca:ad:
0f:b2:fa:3a:b4:e4:84:75:fc:be:4a:36:58:75:ad:
fe:06:4c:3f:7f:05:67:4d:86:7c:7b:01:01:4a:6c:
17:ba:7e:ce:ed:a5:24:7a:d8:3c:2d:df:1b:5d:af:
91:6c:7d:80:65:3b:4e:b3:eb:20:48:8a:49:14:20:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:2C:09:9A:C6:B7:7E:28:57:EB:B6:2A:CF:7D:85:BE:74:42:8D
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32332d3233203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:8b:b7:80:8d:c8:29:73:be:a1:1a:23:45:1e:ef:03:3e:ad:
42:e7:f7:4c:ea:eb:0d:f5:35:4c:fd:37:e1:72:57:9e:b8:ca:
63:36:ce:e7:68:45:c9:c7:ad:c0:66:6e:06:64:a5:f0:e5:b1:
61:65:6f:a1:d7:67:5f:02:59:52:f2:ef:af:62:7d:72:67:f5:
8e:8e:15:e7:57:05:df:41:a2:49:0b:43:ac:53:ef:9c:96:44:
0b:45:10:3e:0f:58:09:a0:cf:e8:31:d3:f6:d0:29:b0:91:99:
b5:34:ab:2e:c9:ee:82:cb:2c:c7:03:ea:2f:3c:e1:cf:8f:c7:
50:84:86:4e:28:11:5f:df:04:8a:fd:cc:40:ce:34:56:f6:b2:
51:5b:7b:bd:0d:1d:5c:b0:d6:58:c0:13:af:16:d7:45:7f:12:
c9:07:f4:97:4a:6a:82:dc:62:53:27:26:a8:90:63:a3:ea:8f:
9d:f4:77:18:7d:a6:87:0f:09:ec:06:00:81:7e:c5:61:a9:55:
61:87:da:47:e9:b1:14:ab:5a:ae:08:30:19:0f:b2:29:23:bc:
5d:b6:73:34:6b:48:50:2c:40:fe:92:df:5f:3f:b5:2d:61:dd:
b9:45:9f:ef:96:18:48:b9:aa:c8:c6:e4:97:0d:45:da:11:d1:
ff:3a:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:54:59 2024 by rpki-client on console-ams.rpki-client.org