Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32342d3234203d3e203435373235.roa
File: 3230322e3135302e3136302e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: Tuobz6kIEXSTl+bwrYqkwrxBfb2ozkjWMAc+QQkxXdo=
Subject key identifier: 0A:3E:EB:25:C0:C5:45:5E:CF:72:7A:EF:C5:37:7E:B4:A1:05:A9:CD
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 123A046A661DB1212C1ECD786C9CD07722C6AA25
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 09:00:02 +0000
ROA not before: Tue 25 Jul 2023 08:55:02 +0000
ROA not after: Tue 23 Jul 2024 09:00:02 +0000
asID: 45725
IP address blocks: 202.150.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3a:04:6a:66:1d:b1:21:2c:1e:cd:78:6c:9c:d0:77:22:c6:aa:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 08:55:02 2023 GMT
Not After : Jul 23 09:00:02 2024 GMT
Subject: CN=0A3EEB25C0C5455ECF727AEFC5377EB4A105A9CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:90:46:f2:e0:6a:59:e6:75:d6:3d:51:b4:
21:dd:61:26:f6:28:5b:4e:8d:9a:7c:b2:6a:8b:93:
82:12:05:b7:4e:23:eb:3c:4a:9e:86:01:a0:10:61:
1d:4e:90:47:ab:32:ff:06:38:0a:24:17:7b:db:9a:
92:6a:b4:10:a7:1e:70:39:ec:26:0d:68:d0:c3:7b:
63:e1:c6:c5:89:fd:b0:63:24:ac:22:e2:e2:d2:92:
d7:5b:d6:91:15:e5:2c:18:ea:66:5f:59:89:49:ff:
42:6a:a3:52:a6:31:a7:3f:a1:b4:68:6e:d7:eb:44:
7d:ee:ba:e9:37:c7:6f:11:ec:f1:db:63:d5:13:bc:
c2:ab:28:dd:0e:ed:85:ea:51:39:f1:10:f7:61:38:
1e:77:88:22:ff:8e:89:e7:93:97:0a:df:1f:0d:69:
fa:3b:33:c8:8a:ee:1b:bd:1b:06:31:b4:e0:11:e4:
fc:05:27:a4:5d:df:5d:79:a4:29:2c:0d:b5:25:d1:
ba:46:9a:2a:e7:d4:b0:25:9d:ef:95:52:4f:85:ca:
03:48:1a:79:be:46:cc:fe:09:e9:29:8b:16:58:aa:
7c:f5:72:73:e2:78:40:08:63:a7:19:1f:65:33:a6:
f7:aa:ce:64:74:c3:56:b3:6c:4f:26:74:86:39:33:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:EB:25:C0:C5:45:5E:CF:72:7A:EF:C5:37:7E:B4:A1:05:A9:CD
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136302e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.150.160.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:34:de:ca:95:3f:e2:99:0c:df:43:a6:4c:52:a1:cf:70:06:
a5:20:84:ee:d4:c7:ff:52:41:00:97:e3:f4:0b:ae:14:24:58:
fd:23:3a:20:f4:36:50:4d:4c:26:96:2f:6e:de:28:57:6c:24:
89:8e:5e:19:9f:d5:08:a1:f3:0b:06:aa:c3:2f:98:0b:f1:88:
c7:ce:04:3a:f7:f6:59:7d:10:bf:9c:df:d1:2f:a5:7c:d9:13:
60:c2:e4:77:94:f6:12:79:5d:c1:2f:49:c7:90:55:07:c2:3f:
ee:23:00:4a:52:6c:53:22:74:e5:83:3f:0d:41:21:90:ab:88:
0e:59:73:2c:f3:1d:29:5c:73:a8:29:00:a4:71:21:f2:7c:f7:
dc:8e:f4:2d:7a:24:66:08:05:2a:e0:66:9b:53:39:3c:7f:3f:
e7:cc:4f:d3:65:9b:77:1b:1e:0c:d8:6c:94:53:a5:4b:2c:c4:
da:a3:3d:67:5d:29:c8:6e:6f:88:9b:e5:ad:a1:32:52:54:0e:
02:a2:cf:a9:56:a1:f3:78:c3:88:44:27:60:f1:74:e5:c5:48:
60:7b:ea:32:0b:b1:31:b7:17:1f:fc:cf:43:1b:d1:b1:f2:ac:
e2:2f:f5:67:54:9b:8d:3a:2f:91:6d:49:9f:7f:f8:62:da:99:
7e:f7:60:54
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEjoEamYdsSEsHs14bJzQdyLGqiUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yMzA3MjUwODU1MDJaFw0yNDA3MjMwOTAwMDJaMDMxMTAvBgNV
BAMTKDBBM0VFQjI1QzBDNTQ1NUVDRjcyN0FFRkM1Mzc3RUI0QTEwNUE5Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHpBG8uBqWeZ11j1RtCHdYSb2
KFtOjZp8smqLk4ISBbdOI+s8Sp6GAaAQYR1OkEerMv8GOAokF3vbmpJqtBCnHnA5
7CYNaNDDe2PhxsWJ/bBjJKwi4uLSktdb1pEV5SwY6mZfWYlJ/0Jqo1KmMac/obRo
btfrRH3uuuk3x28R7PHbY9UTvMKrKN0O7YXqUTnxEPdhOB53iCL/jonnk5cK3x8N
afo7M8iK7hu9GwYxtOAR5PwFJ6Rd3115pCksDbUl0bpGmirn1LAlne+VUk+FygNI
Gnm+Rsz+CekpixZYqnz1cnPieEAIY6cZH2UzpveqzmR0w1azbE8mdIY5Mxv3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUCj7rJcDFRV7PcnrvxTd+tKEFqc0wHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM2MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypagMA0GCSqG
SIb3DQEBCwUAA4IBAQC8NN7KlT/imQzfQ6ZMUqHPcAalIITu1Mf/UkEAl+P0C64U
JFj9Izog9DZQTUwmli9u3ihXbCSJjl4Zn9UIofMLBqrDL5gL8YjHzgQ69/ZZfRC/
nN/RL6V82RNgwuR3lPYSeV3BL0nHkFUHwj/uIwBKUmxTInTlgz8NQSGQq4gOWXMs
8x0pXHOoKQCkcSHyfPfcjvQteiRmCAUq4GabUzk8fz/nzE/TZZt3Gx4M2GyUU6VL
LMTaoz1nXSnIbm+Im+WtoTJSVA4Cos+pVqHzeMOIRCdg8XTlxUhge+oyC7Extxcf
/M9DG9Gx8qziL/VnVJuNOi+RbUmff/hi2pl+92BU
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org