Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136312e302f32342d3234203d3e203435373235.roa
File: 3230322e3135302e3136312e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: qKsFZMN6nhex+hvgcUqFMkBDgY/C278sqRQB9eIVFRo=
Subject key identifier: 38:9D:E0:4F:53:C3:9D:D8:4C:CD:B7:D2:48:74:F8:68:DE:75:C0:3D
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 3295E71007DE5CA9714F85BA8CA628D12D8BBC5B
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136312e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 09:00:04 +0000
ROA not before: Tue 25 Jul 2023 08:55:04 +0000
ROA not after: Tue 23 Jul 2024 09:00:04 +0000
asID: 45725
IP address blocks: 202.150.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:95:e7:10:07:de:5c:a9:71:4f:85:ba:8c:a6:28:d1:2d:8b:bc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 08:55:04 2023 GMT
Not After : Jul 23 09:00:04 2024 GMT
Subject: CN=389DE04F53C39DD84CCDB7D24874F868DE75C03D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:72:cf:ac:2a:12:bf:d3:88:ad:80:be:e9:
39:f2:29:94:f6:01:9c:79:e6:03:7d:9d:3e:0e:51:
fc:28:6f:55:87:be:28:1f:67:c4:a1:fa:e8:9e:ee:
7c:14:89:d5:c2:15:80:e6:84:92:c3:9a:f2:a3:82:
a6:7b:88:80:7e:9c:42:aa:d7:1b:39:3b:a7:cd:78:
91:f2:33:7c:43:41:0e:18:a5:f2:ff:c0:36:6b:77:
e0:5c:bb:d5:fd:5f:e7:60:1a:cc:30:46:67:6a:a4:
f6:5a:8f:c4:19:95:69:ea:d3:f8:39:1f:f3:75:4c:
1f:a8:8d:9c:24:dd:b0:29:f0:76:76:68:43:00:67:
2f:1a:79:6f:03:30:d9:11:d0:ab:fe:6d:d9:4f:05:
0d:13:d1:ed:97:7e:b6:26:69:8c:b5:9a:e6:1e:b7:
01:5d:8e:67:57:3c:63:2b:89:95:15:90:1c:f9:bb:
6a:c4:2d:d7:5f:29:6b:d2:d2:f7:c0:a0:77:17:46:
29:2f:30:8b:9f:50:ee:23:7d:33:b5:c8:5e:e5:85:
74:9d:8e:eb:2b:37:78:6f:6c:76:67:6d:f7:61:54:
c8:f5:4b:f4:2d:64:44:a1:bc:41:25:fe:0a:42:c3:
65:cd:6f:a6:e3:3a:90:29:8c:a7:bf:82:bc:07:93:
1b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:E0:4F:53:C3:9D:D8:4C:CD:B7:D2:48:74:F8:68:DE:75:C0:3D
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136312e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.150.161.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f6:dc:39:f1:18:cf:95:59:dd:82:00:fb:f8:2e:32:b7:e6:
36:bb:29:b1:0c:d0:a0:bd:b2:98:0d:f9:28:67:91:93:46:38:
1f:c4:6c:65:52:21:6f:04:56:e4:55:ba:3b:68:32:24:34:36:
90:37:06:7d:f1:3f:72:29:17:da:15:43:f3:fe:4e:ca:26:b0:
73:4f:a6:1a:6a:90:1e:04:ba:c2:45:81:dd:84:a8:ad:dc:dc:
e9:13:51:7a:12:d3:37:15:51:bf:7c:eb:88:00:77:bc:26:dc:
e2:47:d6:70:44:ba:10:d9:be:8d:7d:72:c0:54:d6:47:55:3a:
3c:76:66:53:91:6b:c2:51:a7:8e:d9:bd:fd:90:2a:0e:89:7a:
de:23:45:f9:10:f5:d9:25:d5:be:dc:1a:ff:88:75:c4:04:83:
63:43:2b:e8:0a:c4:56:ad:17:4d:66:04:27:cc:2e:17:0e:74:
26:52:1e:f0:db:4e:25:58:f0:e4:22:8d:c1:f5:0f:3d:af:56:
97:13:ee:89:23:40:08:cd:7d:9d:13:33:be:b4:c8:15:24:78:
2c:10:72:69:4d:25:67:38:79:3c:76:73:8a:0a:69:60:be:69:
b7:03:d2:d1:4d:07:2b:e1:a9:86:41:d4:9c:5a:a3:3b:af:f2:
e6:89:31:e0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMpXnEAfeXKlxT4W6jKYo0S2LvFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yMzA3MjUwODU1MDRaFw0yNDA3MjMwOTAwMDRaMDMxMTAvBgNV
BAMTKDM4OURFMDRGNTNDMzlERDg0Q0NEQjdEMjQ4NzRGODY4REU3NUMwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypXLPrCoSv9OIrYC+6TnyKZT2
AZx55gN9nT4OUfwob1WHvigfZ8Sh+uie7nwUidXCFYDmhJLDmvKjgqZ7iIB+nEKq
1xs5O6fNeJHyM3xDQQ4YpfL/wDZrd+Bcu9X9X+dgGswwRmdqpPZaj8QZlWnq0/g5
H/N1TB+ojZwk3bAp8HZ2aEMAZy8aeW8DMNkR0Kv+bdlPBQ0T0e2XfrYmaYy1muYe
twFdjmdXPGMriZUVkBz5u2rELddfKWvS0vfAoHcXRikvMIufUO4jfTO1yF7lhXSd
jusrN3hvbHZnbfdhVMj1S/QtZEShvEEl/gpCw2XNb6bjOpApjKe/grwHkxtpAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOJ3gT1PDndhMzbfSSHT4aN51wD0wHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM2MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAypahMA0GCSqG
SIb3DQEBCwUAA4IBAQBu9tw58RjPlVndggD7+C4yt+Y2uymxDNCgvbKYDfkoZ5GT
RjgfxGxlUiFvBFbkVbo7aDIkNDaQNwZ98T9yKRfaFUPz/k7KJrBzT6YaapAeBLrC
RYHdhKit3NzpE1F6EtM3FVG/fOuIAHe8JtziR9ZwRLoQ2b6NfXLAVNZHVTo8dmZT
kWvCUaeO2b39kCoOiXreI0X5EPXZJdW+3Br/iHXEBINjQyvoCsRWrRdNZgQnzC4X
DnQmUh7w204lWPDkIo3B9Q89r1aXE+6JI0AIzX2dEzO+tMgVJHgsEHJpTSVnOHk8
dnOKCmlgvmm3A9LRTQcr4amGQdScWqM7r/LmiTHg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org