Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136392e302f32342d3234203d3e203435373235.roa
File: 3230322e3135302e3136392e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: JT1tnpHGkqno+sbq5+VuvOSaEkJvYkFR1vh709acRww=
Subject key identifier: 14:D7:A2:C6:6C:B7:83:D0:96:C1:AA:FC:51:DE:90:D9:C2:A1:45:54
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 4E0120FDBBC9BBFD61403D24CBDE3731AAD89833
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136392e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 09:00:04 +0000
ROA not before: Tue 25 Jul 2023 08:55:04 +0000
ROA not after: Tue 23 Jul 2024 09:00:04 +0000
asID: 45725
IP address blocks: 202.150.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:01:20:fd:bb:c9:bb:fd:61:40:3d:24:cb:de:37:31:aa:d8:98:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 08:55:04 2023 GMT
Not After : Jul 23 09:00:04 2024 GMT
Subject: CN=14D7A2C66CB783D096C1AAFC51DE90D9C2A14554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:a3:fd:60:86:4a:82:c8:6a:2a:58:83:23:
17:ed:2f:80:22:98:a4:0a:b2:c3:51:1f:c1:b7:c5:
5c:2c:c0:9d:6e:08:1f:93:92:b5:33:cf:55:ee:55:
99:d7:6e:f1:26:3c:56:3f:9e:89:06:be:32:60:c5:
9b:10:52:06:14:0f:8f:52:e8:a6:02:1e:e3:db:c7:
aa:e0:db:ee:7d:81:3e:fa:56:75:1f:0e:61:a3:c7:
6f:04:d1:ff:7f:39:1d:48:11:6e:f4:80:4d:ae:68:
35:f2:ed:82:b1:9a:ab:ae:3f:7f:e8:37:de:a9:1c:
5b:2d:52:c7:fe:98:15:bc:53:d2:52:da:6b:3a:b5:
c7:b0:36:9b:36:34:6b:38:a3:58:43:cf:45:29:04:
1f:28:3b:1a:f4:fc:2f:79:61:c4:0c:9b:6d:8a:a6:
d6:26:50:8a:46:6f:e7:bc:33:43:9f:e9:09:7c:5b:
87:59:4b:03:6b:f5:d1:b0:7d:2e:48:d4:b6:88:c0:
8f:2a:b8:92:33:24:d1:75:ee:8b:56:ee:64:1e:46:
52:dc:9f:70:94:b2:46:24:6c:9a:e0:21:fc:f6:e4:
13:b8:69:77:80:dd:06:92:d9:53:9a:c5:d4:82:85:
a3:3c:56:f6:cf:d1:35:9c:94:1e:9b:d7:0e:36:28:
ae:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:A2:C6:6C:B7:83:D0:96:C1:AA:FC:51:DE:90:D9:C2:A1:45:54
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3136392e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.150.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f5:57:74:9b:88:f9:db:6b:5a:90:c8:b0:40:d7:2d:ee:de:
4b:0f:e9:88:dc:6f:31:21:e8:bb:7f:e4:f1:0e:44:67:0b:a4:
8c:8f:c5:5f:5d:e4:d0:01:a5:8e:4c:24:cd:4a:2b:7f:03:9a:
b0:2d:a2:ca:9e:d9:80:65:51:2f:68:ab:c2:fb:50:cd:51:28:
46:8a:eb:0e:2b:b2:33:ba:09:db:62:33:9b:10:f5:77:76:20:
1d:e6:04:95:81:c0:61:4f:d1:ee:dc:04:65:ae:d2:fe:32:40:
46:8b:68:01:7d:70:b2:b4:89:d9:2c:c8:37:90:4f:0c:f2:3e:
ea:ff:b3:d2:64:2a:f6:75:f7:d7:b0:00:1d:1d:11:60:b9:05:
69:ee:5b:7f:09:08:b0:86:1f:69:7b:6e:a5:7f:25:d7:74:9c:
ad:79:79:cb:19:eb:a5:11:2d:7f:13:46:14:60:ee:52:27:e1:
f2:1b:a2:c8:11:b3:fd:c0:be:65:4b:bd:e3:30:eb:54:f5:87:
07:95:5d:9e:a5:1b:08:b0:86:97:33:76:0e:ce:60:cc:cd:fc:
29:ea:a7:f5:67:5e:1b:32:24:9f:99:56:9d:59:cb:59:d0:8f:
11:e3:6a:2a:50:c4:31:68:95:d8:40:f2:40:5c:19:8d:5d:ff:
dc:07:95:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org