Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32332d3233203d3e203435373235.roa
File: 3138302e3231312e38382e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier: rAkDEe2ZS+ErQS3/pDwWkO9D9wbt+uy7JryrPkKUMLY=
Subject key identifier: 5D:5F:AF:04:34:FF:DE:C5:92:89:3D:5B:DB:C8:8B:E0:8B:11:84:B0
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 38257A77C90FFFFD3707860854589FD665C6E56B
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32332d3233203d3e203435373235.roa
Signing time: Wed 25 Oct 2023 08:00:03 +0000
ROA not before: Wed 25 Oct 2023 07:55:03 +0000
ROA not after: Wed 23 Oct 2024 08:00:03 +0000
asID: 45725
IP address blocks: 180.211.88.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:25:7a:77:c9:0f:ff:fd:37:07:86:08:54:58:9f:d6:65:c6:e5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Oct 25 07:55:03 2023 GMT
Not After : Oct 23 08:00:03 2024 GMT
Subject: CN=5D5FAF0434FFDEC592893D5BDBC88BE08B1184B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:bf:6e:05:18:c9:37:55:1e:27:50:07:a3:
31:d6:92:80:45:fa:f0:35:a5:14:4c:3c:6e:01:90:
fa:c0:40:87:50:e3:a6:cd:c1:d9:4d:1f:86:8e:d0:
95:36:42:ef:b1:9d:71:f0:67:f6:d2:20:de:14:00:
05:58:9a:57:3d:c3:75:56:ba:2e:e1:06:d6:f1:24:
62:cd:89:e2:b5:36:c8:f2:a5:77:46:02:41:45:74:
12:38:6c:d3:9f:4a:5e:10:f1:d4:a0:53:14:69:15:
4c:81:3b:68:86:85:ee:c3:f9:e9:45:3f:df:8e:6b:
77:53:e3:a4:d3:cf:3d:ff:4a:da:66:90:0f:bd:68:
4d:76:d3:2f:cd:3f:7a:d0:2b:74:40:f6:ec:9b:21:
3b:51:16:7a:91:a2:ed:e0:0b:2a:79:a7:90:75:a2:
bf:b0:5d:ca:8c:cf:c7:de:89:17:0c:df:63:ce:b2:
ac:05:cd:51:7f:11:b9:f5:11:ad:6d:24:5c:85:2f:
a7:20:85:34:9a:71:ce:19:f0:b6:fb:20:e0:51:44:
54:f6:e6:b5:17:90:84:d5:bb:d7:d6:8f:6e:61:0f:
ce:71:58:05:23:23:50:aa:17:d4:77:0f:7e:36:a9:
a9:64:f6:e1:3a:2e:32:dd:aa:20:5b:35:47:eb:6e:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5F:AF:04:34:FF:DE:C5:92:89:3D:5B:DB:C8:8B:E0:8B:11:84:B0
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38382e302f32332d3233203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.211.88.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:0e:fc:d8:5a:c6:e4:ec:47:81:5e:c3:33:06:1d:ba:66:3f:
cd:3f:98:77:29:1c:f4:26:c0:25:cc:08:36:61:50:90:0d:ed:
81:cf:c8:1c:92:38:09:c8:ae:98:08:79:1d:91:0a:03:4b:66:
e7:fd:fe:f1:89:c1:33:d1:19:c6:21:13:7b:1e:5d:c8:9b:17:
6f:ee:b1:d0:2d:b7:7d:72:13:86:40:69:8e:07:b1:bb:c2:bf:
a5:ed:4c:d7:35:eb:d2:6d:b8:f9:d8:86:fd:6a:53:9a:8f:40:
f9:78:f5:d6:56:71:ed:03:3d:b0:1a:73:01:e4:6c:6f:b1:20:
29:4d:be:7a:6b:8c:10:0f:ec:81:8d:c8:37:92:ec:b3:19:a6:
a7:ab:02:28:eb:b8:0b:97:ad:66:0a:1a:83:3c:31:c8:96:e7:
95:78:1d:f4:28:ac:9b:a6:69:56:c7:31:86:44:39:fc:19:5c:
48:6a:25:46:92:bd:a6:cb:af:e9:d5:76:02:32:16:72:a8:5a:
c0:0d:47:6a:1a:91:c0:c1:90:0f:c9:ed:5c:19:53:e7:da:15:
58:f5:24:ee:1e:a9:21:5b:49:8b:d7:be:c9:1e:de:49:88:94:
4b:c5:68:4b:d2:ec:38:ab:38:24:8a:1e:00:7f:22:74:96:ce:
5f:a1:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org