Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32342d3234203d3e203435373235.roa
File: 34332e3233302e3135322e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: WElvwtqJfukxVsHvyPiK2h8zYulGaytVo1tW207T7DY=
Subject key identifier: A8:6A:20:BA:CA:0E:12:07:91:EC:7A:30:2F:79:D8:A0:20:CA:A7:A0
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 58CEC1044B2FC6C60A10DF401B4F74C5E53297DF
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 08:00:00 +0000
ROA not before: Tue 25 Jul 2023 07:55:00 +0000
ROA not after: Tue 23 Jul 2024 08:00:00 +0000
asID: 45725
IP address blocks: 43.230.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ce:c1:04:4b:2f:c6:c6:0a:10:df:40:1b:4f:74:c5:e5:32:97:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 07:55:00 2023 GMT
Not After : Jul 23 08:00:00 2024 GMT
Subject: CN=A86A20BACA0E120791EC7A302F79D8A020CAA7A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:a3:2c:e2:ef:de:61:df:e8:dd:02:ed:26:
fc:29:e3:73:11:b0:4a:11:98:f8:45:1b:dc:2a:25:
8e:d7:58:16:de:a5:9b:db:fe:99:a4:68:86:ea:68:
77:32:e7:86:0d:47:40:7c:e6:46:f4:b6:2f:dd:22:
e4:3e:90:e8:69:55:b3:c8:c4:2e:3f:bb:66:7c:11:
fc:35:3e:ab:7b:2d:5a:ac:17:1b:57:02:aa:de:3a:
a6:e4:a7:16:f5:db:59:4d:5c:87:4f:e8:68:de:0a:
02:4b:a0:2d:1f:df:07:04:5b:8b:a9:a7:8a:83:a0:
fb:c9:26:a0:2a:46:32:8d:e6:ea:5b:b1:4b:fe:ef:
9c:fb:c4:29:31:72:f6:12:8f:74:b3:55:a0:6e:1d:
1a:96:41:b6:55:86:96:bc:0b:e7:bd:6b:fb:8f:84:
da:a4:35:12:2a:e5:44:83:c9:c6:4f:00:6a:0a:2c:
8f:d5:29:e5:3a:70:37:bc:73:e0:c0:8a:a4:35:13:
9e:10:10:93:30:94:a1:3f:94:03:13:fe:a8:dd:31:
4e:7f:72:48:59:b8:41:3f:7a:18:7f:48:ad:54:ea:
67:03:c5:99:b8:0a:da:1c:32:0f:31:86:9d:5a:23:
28:a7:cb:dc:56:90:6d:9b:d9:c1:30:c3:25:2a:a7:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6A:20:BA:CA:0E:12:07:91:EC:7A:30:2F:79:D8:A0:20:CA:A7:A0
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135322e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.152.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7f:9b:0b:06:dd:b8:3f:2a:be:05:0b:f9:15:3f:a9:76:d1:
16:46:24:3e:b2:7b:69:5a:82:6b:b2:97:29:2e:b4:8f:1f:1b:
19:cb:48:e4:33:ba:c5:c7:59:e6:cf:28:2c:a2:c4:d5:ee:c4:
74:94:fa:0c:f2:1c:fd:b6:40:e7:55:78:6b:55:01:35:f7:f7:
9d:40:9b:7a:91:a4:53:f0:57:77:5e:f4:92:8f:be:a9:3b:bc:
a2:01:c2:a9:e5:17:3f:29:93:b3:49:ef:bd:e5:2b:49:d7:96:
af:52:10:56:1a:2d:46:e8:81:4d:dc:46:bd:fc:b3:3d:1c:e4:
b6:01:b8:5c:e6:5b:dc:0a:07:37:c6:fe:c5:b6:2a:0b:83:ca:
49:d8:d8:af:50:c0:cb:a2:67:ba:5a:9c:94:4a:fd:4c:b0:d0:
40:b2:0a:c5:e5:83:26:1c:f5:24:90:72:e3:45:37:08:b4:16:
a4:4d:8a:f1:29:bc:6d:13:ef:19:56:a3:bb:8d:56:5b:ee:56:
b3:a1:50:6c:0b:d3:65:fa:23:b2:03:67:f3:8c:85:b1:e8:32:
52:83:78:9d:d0:a0:4e:31:04:cc:64:e3:ab:f4:0e:9a:47:97:
24:f6:ba:94:61:de:b7:a7:97:5c:5d:8b:01:d0:d5:53:11:7f:
4c:0a:ab:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org