Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133372e302f32342d3234203d3e203435373235.roa
File: 3130332e3234352e3133372e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: 3+EetmgUU38I515q+U2LIIlcnCiK9JXC2IRVColZmRs=
Subject key identifier: C2:AF:78:A0:F5:5C:E7:C2:E4:6E:4C:F7:EE:49:7F:F9:41:45:A8:EC
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 1B4E897C0A359E8ADEBF5A04B3B8C4A387FD8B36
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133372e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 09:00:00 +0000
ROA not before: Tue 25 Jul 2023 08:55:00 +0000
ROA not after: Tue 23 Jul 2024 09:00:00 +0000
asID: 45725
IP address blocks: 103.245.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4e:89:7c:0a:35:9e:8a:de:bf:5a:04:b3:b8:c4:a3:87:fd:8b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 08:55:00 2023 GMT
Not After : Jul 23 09:00:00 2024 GMT
Subject: CN=C2AF78A0F55CE7C2E46E4CF7EE497FF94145A8EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:b9:23:6a:a5:2c:19:ef:49:f1:a4:47:46:
1a:dc:fd:74:09:2d:8e:06:49:a7:da:e2:fc:b5:45:
0c:9d:36:f8:6f:68:94:10:31:f6:bb:5f:c9:ac:8e:
52:74:a6:86:88:f9:c9:a5:2e:0b:fd:81:3a:47:9f:
a7:73:77:81:c2:01:83:68:87:c8:ba:73:15:07:06:
f8:5d:74:1f:15:7a:17:b4:1a:05:34:06:17:1d:6a:
34:e8:3f:d9:fc:fc:99:9d:8d:12:b9:fe:2e:b6:94:
9e:20:da:f7:10:05:74:20:e3:b7:6e:16:28:e5:4c:
d0:6b:be:16:59:3a:6e:50:e8:aa:9b:e7:c8:79:36:
0d:3b:60:67:a5:50:e6:11:b5:bc:00:ee:2c:a8:56:
95:b2:79:60:ef:52:75:bc:01:06:27:f6:01:7e:0a:
76:e1:a5:b2:80:32:f7:37:93:dc:52:66:45:33:b0:
4d:23:b3:2d:bb:29:0c:70:0f:20:0f:a4:71:af:4b:
d1:4e:4a:25:b9:6f:43:f7:3d:22:9a:32:4b:19:c7:
63:49:a7:34:72:c0:c4:7a:38:9a:93:ed:0f:96:9b:
b5:2a:41:6b:f7:30:c2:ab:3a:39:16:53:37:97:3b:
af:0e:99:18:1c:7f:b0:51:f0:e7:e0:b9:d9:67:2b:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AF:78:A0:F5:5C:E7:C2:E4:6E:4C:F7:EE:49:7F:F9:41:45:A8:EC
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133372e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ef:24:19:6f:8c:a0:df:b3:1a:58:ce:e8:1a:58:bb:9d:7a:
e1:07:6d:fe:52:1b:06:00:54:da:b9:a6:8f:93:27:cb:38:f5:
9f:5b:4f:5b:fa:ba:39:dc:bf:bf:e4:26:eb:1e:85:ed:8c:cb:
bd:f9:3b:0e:38:3d:a9:4a:d5:ed:6c:d7:9b:61:40:0b:99:60:
7f:34:68:36:9e:9f:55:3a:92:06:84:96:52:53:bd:90:ba:1e:
a7:29:96:86:18:b2:42:62:ca:4a:41:f7:3b:28:41:52:63:95:
df:be:3b:fe:e0:3b:99:af:ab:55:72:01:84:ac:f1:89:fc:85:
55:bc:53:be:68:3f:db:72:f4:7a:6d:97:5e:6b:dd:23:45:33:
76:20:31:ab:67:77:e8:2e:db:14:18:fd:e5:f2:dd:1c:a5:79:
1e:be:1f:d8:75:17:4d:f7:1c:f5:5e:64:0b:aa:56:c3:b7:e1:
da:fc:6e:ad:fc:bf:9f:14:df:27:1a:52:5b:d7:9d:83:9f:00:
3e:f4:f3:68:74:38:e6:76:be:6c:30:b1:de:2c:b0:ca:d1:d7:
18:8a:90:df:76:60:86:b3:20:6e:4d:43:3b:74:c5:37:16:a7:
80:8d:6c:e5:de:20:4b:51:9c:4e:7e:6f:14:ea:81:0b:d2:dd:
67:0f:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org