Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38392e302f32342d3234203d3e203435373235.roa
File: 3138302e3231312e38392e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: VZXhwG6/T/WGLJxaMsrhsCvt+xY651TEqAuVewgKgMo=
Subject key identifier: 87:8E:C2:6A:58:50:99:26:D1:C4:4B:85:26:75:A8:D6:E6:A9:AE:E2
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 5AD9B1DB903EAAC4B2C7EB33B283803A10CCE148
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38392e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 09:00:03 +0000
ROA not before: Tue 25 Jul 2023 08:55:03 +0000
ROA not after: Tue 23 Jul 2024 09:00:03 +0000
asID: 45725
IP address blocks: 180.211.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d9:b1:db:90:3e:aa:c4:b2:c7:eb:33:b2:83:80:3a:10:cc:e1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 08:55:03 2023 GMT
Not After : Jul 23 09:00:03 2024 GMT
Subject: CN=878EC26A58509926D1C44B852675A8D6E6A9AEE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:23:17:da:6e:e8:53:da:67:08:d8:32:07:
6b:cc:9d:79:68:ec:5f:fa:e1:de:13:7a:8b:9f:ff:
73:6d:e5:a2:bb:8a:23:6f:c0:1e:d3:79:5b:9a:b1:
0b:1f:69:09:ae:d1:89:e0:58:81:a7:62:f0:4c:2f:
14:83:b3:db:2c:02:ad:8a:e6:8e:ee:90:70:2c:3e:
b1:f9:11:91:14:f4:9d:fe:89:88:d7:42:59:d0:ba:
ba:b1:ff:8a:b9:46:48:08:94:79:f2:22:38:3c:49:
0f:d0:90:04:9f:92:f7:d8:60:a3:90:78:6d:61:7e:
82:4b:bd:63:b4:c0:8e:45:b5:44:cb:85:23:f6:5b:
b4:9e:ac:a4:01:cb:88:96:2b:1a:72:61:a2:6b:5d:
19:44:07:e0:ba:c2:c5:f5:c2:df:d9:6d:36:e0:ff:
7f:87:44:6f:14:92:ed:e1:ed:4d:65:dc:82:4f:6b:
73:55:7e:6a:0d:3b:50:9b:06:31:0a:66:fc:21:e1:
be:66:4c:0d:3c:38:cf:0f:90:36:c4:67:13:72:2f:
3e:ec:3b:56:37:6a:cc:d1:37:51:1b:ab:26:9f:ce:
3a:45:23:03:9a:e0:0b:1a:18:c3:c5:dd:d6:1c:86:
ab:ba:b8:7e:6d:0b:53:2b:07:91:43:a6:57:55:3f:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:C2:6A:58:50:99:26:D1:C4:4B:85:26:75:A8:D6:E6:A9:AE:E2
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3138302e3231312e38392e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.211.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:54:4e:c9:89:ce:75:ee:84:fc:3a:08:36:2d:94:2e:57:b2:
a1:ac:bb:35:f1:25:f5:1b:77:f2:5f:f2:a6:20:5a:13:11:d9:
92:ec:0a:13:9a:48:35:0d:ba:1a:a6:cf:db:94:65:9d:a4:08:
53:c4:3b:a8:7d:a2:0d:f7:da:80:9a:81:ae:9d:32:5c:cd:7c:
98:3e:ed:e4:44:09:e3:28:35:e3:2d:f8:d2:6d:e9:70:f0:cc:
53:0b:d7:7f:8f:d1:05:73:70:ee:cb:f7:5c:29:70:31:2d:53:
3a:e3:ec:65:1d:82:32:76:d4:d5:4d:a3:62:09:ef:07:61:80:
3d:5c:e5:31:54:2e:c9:f1:0f:d6:65:ae:92:ac:18:ee:04:2e:
2b:fd:a3:3c:48:3e:fd:40:5d:09:7a:99:38:eb:8f:10:d8:d4:
f8:95:31:9d:67:be:02:93:e9:94:46:f2:74:9f:89:00:e7:f8:
ab:60:45:73:d5:88:c7:a5:30:8e:84:5a:96:af:60:ff:4b:bb:
f8:38:bf:ac:e9:fc:bb:99:1a:27:ed:5c:33:62:ea:d4:4e:57:
af:60:cc:9d:82:1b:33:b6:a2:28:4a:63:af:8d:73:0b:3f:eb:
54:d7:82:63:cc:79:b3:b7:0b:9a:4c:1d:dc:7c:e2:05:32:4b:
74:1e:7e:ae
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWtmx25A+qsSyx+szsoOAOhDM4UgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yMzA3MjUwODU1MDNaFw0yNDA3MjMwOTAwMDNaMDMxMTAvBgNV
BAMTKDg3OEVDMjZBNTg1MDk5MjZEMUM0NEI4NTI2NzVBOEQ2RTZBOUFFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPiMX2m7oU9pnCNgyB2vMnXlo
7F/64d4Teouf/3Nt5aK7iiNvwB7TeVuasQsfaQmu0YngWIGnYvBMLxSDs9ssAq2K
5o7ukHAsPrH5EZEU9J3+iYjXQlnQurqx/4q5RkgIlHnyIjg8SQ/QkASfkvfYYKOQ
eG1hfoJLvWO0wI5FtUTLhSP2W7SerKQBy4iWKxpyYaJrXRlEB+C6wsX1wt/ZbTbg
/3+HRG8Uku3h7U1l3IJPa3NVfmoNO1CbBjEKZvwh4b5mTA08OM8PkDbEZxNyLz7s
O1Y3aszRN1EbqyafzjpFIwOa4AsaGMPF3dYchqu6uH5tC1MrB5FDpldVP3ljAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUh47CalhQmSbRxEuFJnWo1uapruIwHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMxMzgzMDJlMzIzMTMxMmUzODM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTM3MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALTTWTANBgkqhkiG
9w0BAQsFAAOCAQEAD1ROyYnOde6E/DoINi2ULleyoay7NfEl9Rt38l/ypiBaExHZ
kuwKE5pINQ26GqbP25RlnaQIU8Q7qH2iDffagJqBrp0yXM18mD7t5EQJ4yg14y34
0m3pcPDMUwvXf4/RBXNw7sv3XClwMS1TOuPsZR2CMnbU1U2jYgnvB2GAPVzlMVQu
yfEP1mWukqwY7gQuK/2jPEg+/UBdCXqZOOuPENjU+JUxnWe+ApPplEbydJ+JAOf4
q2BFc9WIx6UwjoRalq9g/0u7+Di/rOn8u5kaJ+1cM2Lq1E5Xr2DMnYIbM7aiKEpj
r41zCz/rVNeCY8x5s7cLmkwd3HziBTJLdB5+rg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org