Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137322e302f32342d3234203d3e203435373235.roa
File: 3230322e3135302e3137322e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: tI+w3R2/yDYfaCz+NZuVClqASZK/DJSgYr4BkGWfeWw=
Subject key identifier: DA:77:77:0B:AA:F8:CA:96:68:A2:D6:25:71:A0:E3:9E:EB:2C:AE:35
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 4A48BB673EC33D9A50D258520A92E7BD676AE930
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137322e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 09:00:05 +0000
ROA not before: Tue 25 Jul 2023 08:55:05 +0000
ROA not after: Tue 23 Jul 2024 09:00:05 +0000
asID: 45725
IP address blocks: 202.150.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:48:bb:67:3e:c3:3d:9a:50:d2:58:52:0a:92:e7:bd:67:6a:e9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 08:55:05 2023 GMT
Not After : Jul 23 09:00:05 2024 GMT
Subject: CN=DA77770BAAF8CA9668A2D62571A0E39EEB2CAE35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:15:46:4c:68:51:4e:1a:9f:d5:be:a0:41:
29:13:c0:5a:d3:dd:b5:d3:4d:3c:63:31:7b:b4:4e:
40:8e:79:36:a1:b8:1a:b5:18:fd:33:25:a6:df:ba:
de:cb:3b:f2:f8:24:03:0d:aa:f6:96:a4:21:cb:41:
82:14:66:c3:71:17:40:f1:f4:e7:73:fc:10:41:c2:
f7:42:f7:2d:1d:ef:3d:0c:af:4d:e5:23:b3:f8:3f:
09:6a:5c:94:6b:98:a4:8a:e0:dc:6d:f2:69:76:c3:
93:47:66:a4:d6:38:f8:f1:45:3f:e2:6d:d6:4f:ae:
3c:88:af:d8:d6:24:9e:ab:b5:7c:a2:ee:0e:c3:04:
01:cb:36:b9:6e:84:f9:cb:c4:3d:5d:5b:a0:3d:79:
bc:59:63:1c:d6:2b:0f:eb:4b:68:06:14:de:87:d6:
da:75:4e:61:35:94:6a:95:8b:02:99:83:63:77:f9:
98:5f:c4:2b:5a:a0:7b:bf:48:a2:d4:4b:f8:eb:e6:
b9:1c:19:77:63:20:44:5f:62:34:04:de:39:d8:04:
36:37:d6:e8:61:08:ce:9f:1a:26:59:bd:a5:9d:96:
62:72:14:b0:cb:75:05:15:b4:1e:59:09:39:8d:97:
8e:18:5c:ab:94:a9:8a:d3:88:de:fe:b9:d8:f1:be:
57:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:77:77:0B:AA:F8:CA:96:68:A2:D6:25:71:A0:E3:9E:EB:2C:AE:35
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3230322e3135302e3137322e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.150.172.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ab:bf:36:45:5d:c5:28:3b:17:37:d8:d9:55:21:db:f4:f8:
ad:81:a8:a3:c4:02:49:8b:31:e1:77:f9:00:03:6d:db:e5:7d:
b0:df:68:35:1c:64:8e:39:86:01:fb:f7:90:a5:bb:d1:33:0b:
09:f6:4a:ab:1d:19:ef:91:51:ea:66:ab:48:61:75:5c:31:81:
76:2c:0b:ad:d9:45:ee:36:e2:ff:e0:75:ab:7d:e8:32:b6:05:
c2:74:c3:f6:00:06:4e:8d:42:2e:1d:cb:ce:a4:3b:48:b9:cf:
a6:54:1d:bf:8a:1a:4e:0f:ac:32:bf:08:62:f7:b5:00:f5:a3:
2a:d8:ca:9c:0b:12:c1:a2:f5:38:ec:7d:8d:0d:29:98:42:24:
4b:e8:fb:ed:a9:ad:43:a4:01:15:cd:b6:92:e2:f0:4e:71:f9:
d3:6f:15:ee:6f:41:c7:e7:83:3f:82:1d:82:09:be:99:cf:ee:
7d:a8:d7:f0:ab:71:2e:3a:74:51:9b:f1:a8:8a:a1:53:b5:fd:
4e:64:56:27:41:8e:5c:b6:a9:01:2b:f7:dc:86:b7:3f:99:50:
6d:9d:ea:7c:8f:e6:47:c8:c8:a8:ad:03:04:17:e3:a4:c3:d0:
84:61:5a:2a:12:f3:49:74:a4:e1:dc:c3:eb:bc:c4:5f:1f:5e:
0f:c7:fe:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org