Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32342d3234203d3e203435373235.roa
File: 3230322e3135302e3136382e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: jTYGc1gw4U1W3q7SbnqUGVYvpiqhmgc/6fu2mTsXX0o=
Subject key identifier: 94:93:7B:78:35:E6:D4:DA:AA:ED:D7:DE:55:68:AB:1B:88:82:C8:FA
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 5A01E54C9C74C74A1A075419A9943B5F7D8D1245
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 09:00:02 +0000
ROA not before: Tue 25 Jul 2023 08:55:02 +0000
ROA not after: Tue 23 Jul 2024 09:00:02 +0000
asID: 45725
IP address blocks: 202.150.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:01:e5:4c:9c:74:c7:4a:1a:07:54:19:a9:94:3b:5f:7d:8d:12:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 08:55:02 2023 GMT
Not After : Jul 23 09:00:02 2024 GMT
Subject: CN=94937B7835E6D4DAAAEDD7DE5568AB1B8882C8FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:c9:9e:f1:98:be:49:fd:77:98:ad:93:aa:
7b:7c:1e:8e:51:58:5c:ee:17:6b:6a:f4:e2:3c:a5:
69:a3:80:d0:83:36:60:8c:e0:01:20:3d:34:93:d2:
22:2b:3b:53:4d:b3:22:46:03:47:c5:76:b8:4c:47:
ae:98:c8:1c:1e:15:33:27:e6:4d:2d:89:99:db:d0:
c4:fb:a4:a1:74:28:b5:9e:fd:b5:64:51:d6:84:12:
81:8b:a4:24:3c:8d:31:19:e6:65:ec:95:f7:2b:15:
29:c5:16:60:02:7d:06:c8:cb:01:a0:67:75:f0:41:
9d:c7:42:11:2c:5d:c5:d9:1d:4b:d2:e8:22:45:be:
1e:3d:0b:f2:f2:f1:44:90:91:e9:ca:0c:19:2e:97:
18:63:92:c0:44:d0:9c:f2:71:60:22:2a:ff:a7:11:
99:76:f9:33:61:eb:52:14:21:76:08:ae:f4:3f:c5:
94:ac:b9:fb:da:0a:93:0f:2f:02:6b:40:9b:b3:82:
af:d9:09:98:f6:04:ca:17:11:2d:86:ca:fa:80:3b:
69:fb:3d:de:ff:4c:df:85:a9:ea:36:cf:31:a5:9d:
90:a1:fe:9c:e7:bf:31:55:5c:29:97:10:03:d3:aa:
8c:05:03:23:9c:c3:87:e4:60:5f:76:6e:96:36:41:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:93:7B:78:35:E6:D4:DA:AA:ED:D7:DE:55:68:AB:1B:88:82:C8:FA
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136382e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.150.168.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:0f:1f:22:6d:11:1c:e6:24:c3:45:02:e5:40:45:7d:94:a6:
53:a3:35:64:36:ed:b4:c5:9f:9a:93:ee:79:33:83:37:c9:b2:
8e:55:59:fd:a6:ee:14:06:fc:03:00:ba:60:3c:d9:06:d0:ae:
51:2c:0f:f0:c1:f5:0f:9d:2b:26:83:32:9f:d0:40:23:ac:2a:
71:55:3b:b8:39:7b:0d:7b:c9:bf:53:d4:d9:8e:03:e0:9c:14:
dc:c5:ac:45:2e:9b:19:a3:dc:03:ba:3c:a2:41:5e:a9:bc:ad:
94:20:d2:b9:10:df:e4:7c:e4:27:f3:78:a9:2d:21:33:da:e3:
73:14:57:cc:7c:af:e1:60:d6:a2:23:68:0f:47:52:be:46:2d:
e5:ab:38:c3:d2:bd:73:91:b9:af:38:35:bb:b0:4e:27:82:52:
64:27:45:1e:12:af:cc:7d:2f:a3:04:b1:59:50:be:30:ea:b4:
0e:78:43:4e:85:0d:c9:be:8c:d8:66:34:43:b5:fc:35:f1:21:
13:22:c7:bb:1c:88:1f:d0:b6:38:f0:8b:bf:be:6c:78:7c:a0:
5a:ff:7c:2f:5a:91:fe:fb:5d:db:2a:63:71:24:35:16:0a:9c:
15:fc:23:94:9d:e5:91:b8:ea:ad:0b:29:69:8f:39:28:b5:c9:
41:d0:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org