Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133382e302f32342d3234203d3e203435373235.roa
File: 3130332e3234352e3133382e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: AhfQVzZM22Mw7ot2P+I8E8awRak9jjIi43BV8bt16iQ=
Subject key identifier: 0F:17:50:57:65:0C:4B:F3:E6:BD:52:C5:E5:54:C3:C5:C6:DA:59:57
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 253EB92B6E0EB0E83918A0E014A4F54B0A9EF43D
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133382e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 09:00:01 +0000
ROA not before: Tue 25 Jul 2023 08:55:01 +0000
ROA not after: Tue 23 Jul 2024 09:00:01 +0000
asID: 45725
IP address blocks: 103.245.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3e:b9:2b:6e:0e:b0:e8:39:18:a0:e0:14:a4:f5:4b:0a:9e:f4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 08:55:01 2023 GMT
Not After : Jul 23 09:00:01 2024 GMT
Subject: CN=0F175057650C4BF3E6BD52C5E554C3C5C6DA5957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:0e:ba:f3:ee:fd:11:c6:57:ee:2b:6b:df:
f7:03:98:42:51:33:db:35:31:6a:44:92:2e:fa:1b:
df:b7:08:31:4a:99:2d:03:12:6f:e6:74:79:d9:76:
46:70:99:0a:7e:03:90:63:67:0e:4d:62:41:f2:8a:
9a:aa:52:f7:f1:5f:55:6c:9c:7b:c7:c7:52:4a:94:
a0:47:41:fe:75:69:23:ea:75:b4:6e:e7:2c:4d:42:
48:93:b0:ff:5f:c1:be:90:c7:5e:31:9f:e1:51:fc:
c9:23:58:36:b7:77:99:6e:2d:ca:60:e7:72:49:a5:
06:54:67:e5:d7:d4:24:36:f3:99:bf:18:1c:21:84:
38:a0:c4:2d:c6:9f:4c:18:84:81:18:3e:eb:5b:c6:
5a:21:10:e4:9e:af:5d:79:bf:30:37:69:4f:ea:4c:
7b:63:37:94:8d:99:48:b5:7f:ce:49:66:81:43:d1:
6d:09:53:f4:0e:23:e8:89:ce:4a:1c:8a:97:ac:5d:
42:1a:ff:bb:0b:9c:6e:1b:b1:df:8d:55:51:0c:79:
bc:6e:2d:38:17:df:40:03:50:c2:8b:50:73:d6:5d:
06:4a:17:8a:bc:bb:fa:25:40:ee:d5:89:68:f1:0a:
f4:d6:c5:cb:31:82:14:4e:07:58:db:da:b6:dd:91:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:17:50:57:65:0C:4B:F3:E6:BD:52:C5:E5:54:C3:C5:C6:DA:59:57
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133382e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.138.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:96:05:bd:50:1d:d8:7f:d8:b0:c8:a4:cf:10:c0:36:12:32:
db:bc:0b:aa:6c:df:0b:65:b7:91:79:08:4d:78:83:20:29:90:
5a:d0:bc:68:34:ce:62:b9:37:fa:9c:b1:98:4e:fa:dc:28:93:
d0:8d:31:ab:e2:95:5b:85:17:05:21:b4:a5:51:fe:a2:4d:2c:
d9:ff:7a:0a:d3:d6:ee:8a:73:c9:88:27:3d:d6:eb:61:d4:a2:
de:f4:25:b2:a1:2a:4f:37:6f:a7:ee:ad:33:57:6c:50:9d:d7:
2e:93:39:05:bb:04:e1:e3:f0:20:b6:6a:40:9a:1f:d3:78:b3:
94:82:3d:41:0f:55:ea:11:0f:d2:f2:d9:06:f8:5e:b3:4f:7e:
dd:dd:87:ad:e9:98:ee:dc:f6:15:cb:90:a6:73:41:22:b6:97:
75:ff:e8:be:6e:99:f5:8f:d8:18:e1:1b:43:8d:d3:dc:b1:9e:
18:35:07:c9:91:d4:f3:83:62:96:45:07:c7:18:2d:3a:f7:36:
39:1a:a7:96:01:fc:9c:29:4f:67:04:c3:db:ce:df:48:c6:95:
49:ae:c0:5d:fb:d4:c0:e6:ff:97:22:0d:80:cd:73:de:8c:97:
30:fe:9d:97:c7:87:35:98:0d:56:bc:cd:34:8e:15:2c:33:84:
2c:93:a9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org