Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133392e302f32342d3234203d3e203234323036.roa
File: 3230332e38342e3133392e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier: I4QNJugcXgd0sX9fFlEmXmSPQ4PNYqYfthM86b6UTtk=
Subject key identifier: 56:24:DF:A3:B0:28:F5:F2:70:46:10:4D:B4:1A:0E:95:9B:C3:B1:2A
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 5E7DEA781DED46E4264F982B22BD0E89694C9061
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133392e302f32342d3234203d3e203234323036.roa
Signing time: Tue 23 Jul 2024 11:48:03 +0000
ROA not before: Tue 23 Jul 2024 11:43:03 +0000
ROA not after: Tue 22 Jul 2025 11:48:03 +0000
asID: 24206
IP address blocks: 203.84.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 06:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7d:ea:78:1d:ed:46:e4:26:4f:98:2b:22:bd:0e:89:69:4c:90:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Jul 23 11:43:03 2024 GMT
Not After : Jul 22 11:48:03 2025 GMT
Subject: CN=5624DFA3B028F5F27046104DB41A0E959BC3B12A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:6b:c9:aa:67:cb:30:f9:4c:75:3c:a6:cb:
4b:c4:c3:53:a1:a4:c0:30:2b:a0:f5:b4:d5:d0:4d:
16:15:9e:2b:d6:cc:d1:9a:70:3f:40:91:a9:58:00:
6d:71:56:64:1c:81:7e:4f:a0:81:9e:46:4c:e3:d7:
d1:7f:3d:c7:41:b8:93:f0:1d:bd:4d:e3:f8:16:e8:
20:e7:cc:98:e7:f2:a4:af:a6:cd:90:43:26:a3:c1:
2c:9d:ff:b8:35:a7:2a:84:74:e4:bc:61:58:78:e0:
ec:61:17:f4:8a:63:42:c9:0d:d1:cd:6c:42:d9:ff:
55:a6:fc:3c:82:47:d7:20:07:a5:ef:1d:76:88:12:
c4:89:31:ee:4a:73:b2:91:5f:fb:25:6b:17:f4:c0:
e8:cd:57:7c:8a:b2:f2:8c:03:fd:af:46:12:2d:ca:
27:8d:5e:e6:7e:d9:da:0c:f6:b7:e3:ee:17:d2:99:
b6:39:bb:37:ac:b6:bb:9e:b4:99:2d:56:a6:cc:98:
57:c9:80:e6:73:50:5e:f9:be:00:6b:26:0a:aa:90:
0a:c3:64:7a:72:70:88:42:a1:a0:39:a3:65:f7:01:
2c:24:21:79:4a:20:2c:a2:7e:08:ef:4e:ea:9f:c4:
08:ee:8b:f4:71:70:2e:c9:0c:e7:24:d9:c8:9d:b3:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:24:DF:A3:B0:28:F5:F2:70:46:10:4D:B4:1A:0E:95:9B:C3:B1:2A
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133392e302f32342d3234203d3e203234323036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.84.139.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bd:45:a5:fa:04:f9:02:23:4e:8a:04:16:2d:1e:1c:4d:13:
de:a6:e4:be:37:55:49:28:36:73:f0:3b:63:9a:a8:3b:48:60:
ae:c3:62:7b:d1:86:f4:23:8d:d8:e9:90:ca:50:cf:b0:dd:2d:
a5:bb:f8:39:c0:a1:dc:43:bb:32:51:1b:6e:e1:83:b7:6f:ac:
02:52:85:c4:9d:f9:eb:1a:95:fd:37:ca:76:71:72:ea:73:71:
bb:2e:af:99:e4:3f:9c:14:5c:59:62:c8:53:f3:84:9f:74:0e:
cb:64:20:d8:bf:b5:1e:99:be:85:d5:c1:71:d4:28:f2:3a:0f:
3b:1a:3a:14:c5:14:76:82:5b:0e:e3:10:63:0d:dd:38:f4:30:
d2:cd:94:94:20:19:d5:dc:fc:15:fb:e9:04:07:71:98:2a:f1:
89:de:35:9d:eb:c1:a1:78:49:82:cb:09:31:6d:f2:fe:fd:03:
02:ba:00:1e:b1:ff:dc:ed:84:3e:26:86:7d:60:09:8d:25:09:
b1:d1:26:24:c2:ea:70:bc:a5:ec:fc:ec:92:68:08:80:07:ae:
8c:9b:33:49:00:a1:c1:aa:d0:a6:aa:03:43:b8:ab:de:bf:79:
4e:e3:24:f2:80:03:09:56:49:35:b3:2f:a6:66:f2:e0:1b:7a:
64:a2:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 09:34:10 2024 by rpki-client on console-ams.rpki-client.org