Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa
File: 3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier: lrZyXTqnBLN+Vp8Bx2tHrD6wnpDSFZgl2ICCfCT2mrA=
Subject key identifier: C5:8D:C8:F3:43:DB:40:F6:17:8C:3D:DE:BA:93:8B:5D:AB:AE:1F:F7
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 29261B9DA2224B3170E1E6664A61F51576622043
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa
Signing time: Wed 25 Oct 2023 08:00:01 +0000
ROA not before: Wed 25 Oct 2023 07:55:01 +0000
ROA not after: Wed 23 Oct 2024 08:00:01 +0000
asID: 45725
IP address blocks: 202.150.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:26:1b:9d:a2:22:4b:31:70:e1:e6:66:4a:61:f5:15:76:62:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Oct 25 07:55:01 2023 GMT
Not After : Oct 23 08:00:01 2024 GMT
Subject: CN=C58DC8F343DB40F6178C3DDEBA938B5DABAE1FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:3b:32:47:60:0b:96:9d:46:65:b9:93:25:
bc:0a:b2:62:82:eb:0a:56:48:e6:4d:b2:92:ca:be:
e1:3f:56:77:1b:92:e6:81:0a:6e:b3:2c:8f:88:be:
82:59:cd:d3:5b:f1:fa:54:f2:0f:b9:f2:1e:26:d5:
31:1f:0d:b8:25:35:e6:c0:1f:97:9b:1b:34:6e:f6:
6b:cc:2b:e9:21:c1:7f:8b:eb:cb:95:80:be:2e:80:
2f:74:d8:b3:fc:18:5e:31:d7:b0:99:34:49:70:83:
0a:d9:a8:16:ae:06:61:f1:22:d0:b7:a2:5e:b6:d6:
c9:b6:7f:c1:64:e1:10:5e:dc:9d:db:65:c4:73:5c:
33:3e:7e:96:29:34:34:11:66:1d:5e:23:97:eb:a5:
be:2a:b5:d9:a8:2f:b5:81:a2:94:c5:13:3d:16:e1:
7e:a6:ff:9a:e7:39:79:ce:15:32:61:72:fb:b7:8c:
ff:75:87:0d:14:46:d6:e9:64:e3:ab:7c:4e:79:c3:
74:20:fc:90:5b:a5:50:5c:95:ca:99:3a:e6:5d:c1:
3a:d8:6f:f2:c9:19:9b:22:8e:9d:3d:27:05:06:09:
1c:83:96:6d:28:2f:aa:25:d7:60:02:66:d5:ca:e9:
64:14:8d:33:09:a8:7f:b7:e4:99:1e:82:aa:3d:5c:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8D:C8:F3:43:DB:40:F6:17:8C:3D:DE:BA:93:8B:5D:AB:AE:1F:F7
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.150.164.0/23
Signature Algorithm: sha256WithRSAEncryption
29:f7:8f:6e:bb:2d:30:a1:8b:55:e5:6f:3a:f7:ff:1a:a1:5e:
f9:1b:fc:b9:be:cc:37:e2:a8:d9:a3:1b:a5:6c:28:b1:22:fd:
c8:35:fc:9c:3f:a6:cf:10:6f:6e:09:11:b3:b9:3e:ea:2b:d0:
60:ad:64:80:cb:4c:30:c9:6d:fe:14:a6:6f:6c:22:94:97:11:
f5:5e:c9:4c:4e:57:75:e9:79:4e:43:0a:f0:47:5d:b8:12:5d:
b3:7f:3b:84:11:4d:16:0c:05:70:03:12:ca:55:28:72:91:24:
de:b2:bb:2c:da:70:de:74:56:ed:e1:34:2a:83:f3:1e:97:52:
04:db:db:e7:d5:49:44:6d:2d:65:2f:f6:af:1d:6a:09:7e:49:
90:87:25:be:91:34:ca:ae:17:66:94:3d:1f:55:8e:d6:ea:8c:
73:40:3f:a8:39:b2:b3:b6:be:48:d4:21:c0:ab:15:8c:fe:6b:
32:f8:92:54:26:84:79:f0:40:9a:5b:8b:87:7b:80:b6:69:4c:
92:f5:86:2d:15:2f:6c:44:fd:d0:9f:bf:34:74:68:25:cc:92:
38:25:21:03:7b:62:29:7c:74:c4:65:c9:9c:5f:a7:52:85:dd:
71:a5:c5:9f:0d:b0:fb:f8:19:ad:18:61:91:bb:83:79:38:02:
6a:68:59:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org