Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32342d3234203d3e20313338303737.roa
File: 3131302e34342e3137342e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier: i0/ITv98YP5sZ2TaFjW/0YZUBLseUS8fgc3L1nglu6E=
Subject key identifier: EF:83:35:50:C8:9D:EF:20:2E:39:85:77:13:D1:B6:8A:50:1F:CA:3B
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 744D2F194E7D5C2F439664D2DC0B4C852D464FD3
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32342d3234203d3e20313338303737.roa
Signing time: Wed 21 Aug 2024 15:09:56 +0000
ROA not before: Wed 21 Aug 2024 15:04:56 +0000
ROA not after: Wed 20 Aug 2025 15:09:56 +0000
asID: 138077
IP address blocks: 110.44.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 09:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:4d:2f:19:4e:7d:5c:2f:43:96:64:d2:dc:0b:4c:85:2d:46:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Aug 21 15:04:56 2024 GMT
Not After : Aug 20 15:09:56 2025 GMT
Subject: CN=EF833550C89DEF202E39857713D1B68A501FCA3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:dd:5e:52:18:cf:26:64:84:ae:18:fc:de:
50:51:c1:6c:78:9a:ab:cb:b4:0d:f6:5f:03:18:e8:
f4:d7:c8:88:66:08:82:6a:f9:cb:f4:19:50:ea:11:
50:33:01:0a:4b:6d:56:b2:8c:8c:e3:81:88:aa:1a:
2a:d2:eb:e9:45:c3:8b:65:4d:aa:6c:34:3d:7f:5e:
96:77:89:9e:6a:4b:5e:b5:c9:b8:3f:2a:dd:59:fc:
a9:4f:02:25:41:72:ff:22:54:22:aa:a4:01:47:4e:
3c:d7:7d:e8:f6:58:8a:94:ef:c6:a2:bb:d9:c5:5f:
97:e4:f1:64:d3:a3:0a:6e:0e:03:04:22:66:75:21:
ce:4e:cc:55:5d:af:bc:8e:4e:0d:0c:6a:7b:d2:e2:
e1:80:03:6c:1e:6f:0c:96:59:3d:13:7b:c8:5e:60:
69:53:97:8b:19:f1:aa:95:ae:6a:13:49:35:ff:43:
73:66:4c:34:02:27:97:8c:75:c0:8b:e0:fb:f2:5c:
11:da:2c:2f:21:7e:44:34:ef:11:28:d4:75:97:a4:
47:38:da:ae:bd:2c:f8:cf:d0:fb:0c:de:a7:d4:9a:
79:b1:81:c7:3a:a3:5d:28:21:8a:b5:e5:d0:7f:80:
b1:80:62:27:b1:4c:61:29:03:f5:17:25:35:f6:13:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:83:35:50:C8:9D:EF:20:2E:39:85:77:13:D1:B6:8A:50:1F:CA:3B
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32342d3234203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.174.0/24
Signature Algorithm: sha256WithRSAEncryption
32:cb:ea:98:92:e4:50:aa:22:0d:95:50:54:7b:8d:d1:4c:2d:
11:d8:7e:07:cc:76:d0:11:cb:44:93:0c:49:97:63:ba:24:0b:
c8:d8:50:b7:7e:84:fa:ab:3e:d3:f2:07:e5:ef:bc:f3:cb:79:
29:95:29:54:84:e4:dd:5a:da:80:bb:1f:2c:89:35:4a:c6:f5:
be:52:fe:d4:27:f6:bf:ba:7a:c8:af:88:f3:a5:bb:88:0d:3f:
67:bd:2c:79:68:19:6e:a5:f9:27:cb:72:f0:fb:7b:21:cb:53:
67:ea:ce:8b:bb:3f:e3:89:c3:b5:1b:d0:e8:79:0c:e1:44:95:
4d:08:91:be:a0:31:15:95:23:18:06:92:13:db:26:54:43:06:
0f:db:97:d1:1f:3a:c4:a1:d1:a4:56:c1:ae:66:21:21:5d:16:
06:cd:9f:59:bb:ee:57:ac:b8:e3:9c:4f:0f:c4:2c:1c:f0:bb:
c7:22:a0:12:85:cd:a7:ae:1d:44:b0:7d:62:53:00:c2:59:26:
8e:76:da:f3:7a:b0:9d:50:8e:78:dc:e1:f6:e4:a3:b6:3a:41:
7c:4d:e3:59:e4:b2:02:2e:16:e2:2d:a0:d5:62:40:cc:ec:45:
12:95:c4:2b:29:3d:13:ee:f5:94:07:35:ce:87:41:f0:dc:31:
36:85:10:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 12:54:59 2024 by rpki-client on console-ams.rpki-client.org