Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa
File: 34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier: 2kAVmdv93moCIn6WvPt1V15jENP5OhgJy8YSLyz85y8=
Subject key identifier: E9:17:63:E4:5F:9B:FB:79:8F:2D:F0:08:67:ED:86:33:5F:27:4B:86
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 13F9CD561E65FEF4E687D69ED02A41C37AE6A048
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa
Signing time: Wed 25 Oct 2023 08:00:00 +0000
ROA not before: Wed 25 Oct 2023 07:55:00 +0000
ROA not after: Wed 23 Oct 2024 08:00:00 +0000
asID: 45725
IP address blocks: 43.230.154.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:f9:cd:56:1e:65:fe:f4:e6:87:d6:9e:d0:2a:41:c3:7a:e6:a0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Oct 25 07:55:00 2023 GMT
Not After : Oct 23 08:00:00 2024 GMT
Subject: CN=E91763E45F9BFB798F2DF00867ED86335F274B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:7e:b0:21:d2:de:63:ac:16:5d:a1:f1:ba:
af:90:c2:be:1d:08:4f:5c:a8:62:18:30:bb:46:0e:
39:a9:69:f3:7f:71:6e:c6:1f:7b:9f:23:2c:24:88:
78:31:1a:4b:89:f1:ce:71:f4:8c:55:b4:d3:c6:5e:
c4:bb:7f:03:64:41:e1:18:87:5e:44:ae:f4:e9:03:
79:7b:d6:53:9c:36:3e:84:0d:97:65:51:02:d7:a2:
82:ea:4f:40:b1:d8:f9:37:80:60:21:d3:11:57:ae:
83:0d:7f:0f:fd:fa:7d:aa:69:c3:55:7c:8e:65:b4:
be:fc:f2:2c:1d:9e:69:86:db:6b:a0:88:fd:24:62:
ee:ee:72:e7:eb:25:a0:b4:6b:3e:a1:ae:85:b6:58:
9e:8a:fd:11:af:ae:ad:6a:d5:3c:1a:ed:e6:f8:4a:
77:08:04:cb:25:84:92:53:62:3c:19:85:eb:a9:35:
16:b9:9c:ae:6f:ec:c0:a8:0d:22:4f:0e:1a:04:4d:
33:f9:56:d8:fc:8e:65:24:c2:bb:75:61:a9:4f:42:
a9:9c:69:cf:cf:95:e6:33:6d:e0:4e:7d:1a:cc:44:
4a:b5:1f:34:ab:d4:34:ce:07:85:0c:00:5c:1e:63:
ea:8c:52:19:dc:47:16:50:ed:6d:45:54:68:b7:ab:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:17:63:E4:5F:9B:FB:79:8F:2D:F0:08:67:ED:86:33:5F:27:4B:86
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32332d3233203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.154.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:07:e5:b0:e7:4d:c7:62:b4:51:50:94:99:a8:38:54:88:eb:
9e:e9:a7:f1:d2:d6:5f:7a:5c:f3:f3:9b:d7:4f:6b:07:b3:40:
ad:31:2d:6b:9e:c3:c7:13:91:40:b3:8f:82:c8:cf:a6:9f:9a:
d1:8c:16:2a:2a:9d:23:d6:17:19:26:82:cb:9c:0e:5f:9a:43:
a6:b9:d8:cf:c9:42:e5:b9:fa:14:4c:b1:4f:b0:9c:f2:be:ca:
ce:f9:0f:dc:dd:21:04:58:d6:b5:b2:f8:ee:90:80:ad:40:7f:
b1:f2:42:2d:95:31:b4:68:68:d8:6d:74:87:f1:97:20:69:14:
6c:59:8d:17:8a:a0:21:78:18:8a:59:ea:89:56:73:24:46:e0:
87:3c:51:e9:c9:9c:9f:af:12:41:a3:e5:a1:9e:ef:a4:f6:39:
e3:34:e6:7e:0d:2a:d7:d5:e8:e9:bb:83:e3:af:39:97:4a:04:
a2:48:12:57:50:23:64:d5:0b:36:3d:de:91:f6:96:aa:3e:e0:
93:0d:e3:0a:e3:07:2f:91:ab:09:2f:be:33:8d:06:db:32:df:
f8:08:49:b2:e0:26:fb:5f:06:35:9f:2d:d1:3a:53:44:f5:78:
9b:b4:b0:cf:a3:64:70:2d:97:c0:f7:8a:82:23:6c:1d:09:68:
9b:50:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org