Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137312e302f32342d3234203d3e203435373235.roa
File: 3230322e3135302e3137312e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: Wb1DhD8HMEx4b/w+tB4ohs9YLhlVh/1KMvPWzaQ8U70=
Subject key identifier: D8:98:F4:AA:78:74:FC:EC:72:13:51:94:E6:8B:D2:4A:B5:8B:42:14
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 595B8C0B67B459873EBB3ABF764F99D7E8336E77
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137312e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 09:00:03 +0000
ROA not before: Tue 25 Jul 2023 08:55:03 +0000
ROA not after: Tue 23 Jul 2024 09:00:03 +0000
asID: 45725
IP address blocks: 202.150.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:5b:8c:0b:67:b4:59:87:3e:bb:3a:bf:76:4f:99:d7:e8:33:6e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 08:55:03 2023 GMT
Not After : Jul 23 09:00:03 2024 GMT
Subject: CN=D898F4AA7874FCEC72135194E68BD24AB58B4214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:ce:c9:b5:72:f6:8c:b9:4c:29:9e:81:86:
e3:10:8f:8d:f9:a2:e5:e5:17:51:fe:a7:65:5d:3f:
3a:5b:ec:22:95:45:6b:1a:6a:f8:49:a8:27:4c:a7:
6c:b8:b9:71:4a:fd:d6:5c:6c:3b:5a:78:8b:9d:cb:
16:d6:90:4b:0d:2c:21:63:a4:a5:2a:4e:16:7a:22:
78:64:b6:42:c9:b7:8c:9e:5a:5f:a5:0c:4c:f3:f0:
d8:ab:4a:6b:00:91:33:cd:48:64:23:19:d8:00:c4:
82:50:92:d7:af:a2:8b:a3:17:09:8f:5a:a4:6f:b2:
24:4b:07:c1:5c:0b:2e:d2:63:1f:71:fb:f3:86:d2:
9d:3c:30:d6:d5:89:57:d2:f7:95:97:a6:0e:e9:7b:
d3:40:4f:47:39:48:c0:4a:a5:66:cf:78:bc:f3:0a:
80:af:ee:d5:83:93:19:ca:48:bd:53:a8:c2:8f:04:
db:64:3c:49:b3:9b:ab:f8:15:d4:f2:47:00:a7:a1:
b5:f3:f6:89:7e:c7:fa:f5:79:ee:0b:51:13:bf:7b:
98:ef:72:ee:16:de:a9:de:57:82:b0:f8:21:c6:f5:
ba:db:4a:37:63:47:9d:25:98:e5:47:c7:6a:cd:fd:
46:e4:59:ed:e7:16:96:f1:78:f8:69:03:50:f6:df:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:98:F4:AA:78:74:FC:EC:72:13:51:94:E6:8B:D2:4A:B5:8B:42:14
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137312e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.150.171.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ee:48:11:88:7e:ac:0d:cf:f6:27:39:e2:6d:4b:10:00:52:
1d:89:13:e0:db:94:e9:e3:73:fe:c0:6b:0b:62:8a:61:e5:af:
41:02:e8:33:b3:63:06:28:82:7a:04:e3:19:5b:d3:5d:86:55:
13:6f:8f:71:58:ec:b4:4b:14:a7:65:82:70:51:29:bc:14:ef:
2b:9a:40:cd:1d:e1:01:92:ba:1c:05:f9:4c:f9:94:0c:94:e1:
29:3e:f2:7f:dc:0c:59:36:14:19:49:86:37:5d:e6:ef:de:1d:
e4:20:b7:19:40:0c:d0:2e:e8:8a:7a:98:1c:ee:fd:16:d3:c6:
16:0c:8b:dd:99:78:bb:a6:b2:94:38:cf:47:54:5b:d1:cd:9b:
a5:cd:ba:bf:ae:ef:bd:31:97:30:4e:5b:1f:44:98:5f:5a:69:
de:c7:70:51:47:44:5d:9f:44:1c:81:f2:de:8e:18:4b:66:07:
33:d3:c3:4f:d3:e0:b7:d9:c1:08:90:d6:b1:1a:0f:e7:6b:1e:
c8:39:a3:7b:86:5e:e2:07:db:eb:af:0e:3b:95:e0:77:89:1d:
04:92:af:97:57:ce:1a:49:66:04:8e:85:ec:0d:4b:a2:ca:93:
aa:47:ee:a2:9d:31:05:6d:e1:61:b0:43:0f:b6:3a:57:b7:b9:
e1:7e:2a:b1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWVuMC2e0WYc+uzq/dk+Z1+gzbncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy
NzQ1ODEwMzAeFw0yMzA3MjUwODU1MDNaFw0yNDA3MjMwOTAwMDNaMDMxMTAvBgNV
BAMTKEQ4OThGNEFBNzg3NEZDRUM3MjEzNTE5NEU2OEJEMjRBQjU4QjQyMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fc7JtXL2jLlMKZ6BhuMQj435
ouXlF1H+p2VdPzpb7CKVRWsaavhJqCdMp2y4uXFK/dZcbDtaeIudyxbWkEsNLCFj
pKUqThZ6InhktkLJt4yeWl+lDEzz8NirSmsAkTPNSGQjGdgAxIJQktevooujFwmP
WqRvsiRLB8FcCy7SYx9x+/OG0p08MNbViVfS95WXpg7pe9NAT0c5SMBKpWbPeLzz
CoCv7tWDkxnKSL1TqMKPBNtkPEmzm6v4FdTyRwCnobXz9ol+x/r1ee4LURO/e5jv
cu4W3qneV4Kw+CHG9brbSjdjR50lmOVHx2rN/UbkWe3nFpbxePhpA1D2383fAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2Jj0qnh0/OxyE1GU5ovSSrWLQhQwHwYDVR0j
BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND
NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1
ODEwMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0NDIxNmQ4LTcwY2UtNDkwOC1h
NzJiLWVjMjczZjQzYmJjMi8wLzMyMzAzMjJlMzEzNTMwMmUzMTM3MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzczMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyparMA0GCSqG
SIb3DQEBCwUAA4IBAQAf7kgRiH6sDc/2JznibUsQAFIdiRPg25Tp43P+wGsLYoph
5a9BAugzs2MGKIJ6BOMZW9NdhlUTb49xWOy0SxSnZYJwUSm8FO8rmkDNHeEBkroc
BflM+ZQMlOEpPvJ/3AxZNhQZSYY3Xebv3h3kILcZQAzQLuiKepgc7v0W08YWDIvd
mXi7prKUOM9HVFvRzZulzbq/ru+9MZcwTlsfRJhfWmnex3BRR0Rdn0QcgfLejhhL
Zgcz08NP0+C32cEIkNaxGg/nax7IOaN7hl7iB9vrrw47leB3iR0Ekq+XV84aSWYE
joXsDUuiypOqR+6inTEFbeFhsEMPtjpXt7nhfiqx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org