Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32342d3234203d3e203435373235.roa
File: 34332e3233302e3135342e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: uAdSgEo+GV4FFypuB9YM5kpSURnnK1bBavHMEMeOhYE=
Subject key identifier: 1C:E6:15:AD:14:8A:DF:86:91:05:B2:1E:38:C6:A5:B0:AE:A0:F3:35
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 0F0F91D3EBE5C041E6F0406E74F6A7798CA71009
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 08:00:01 +0000
ROA not before: Tue 25 Jul 2023 07:55:01 +0000
ROA not after: Tue 23 Jul 2024 08:00:01 +0000
asID: 45725
IP address blocks: 43.230.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0f:91:d3:eb:e5:c0:41:e6:f0:40:6e:74:f6:a7:79:8c:a7:10:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 07:55:01 2023 GMT
Not After : Jul 23 08:00:01 2024 GMT
Subject: CN=1CE615AD148ADF869105B21E38C6A5B0AEA0F335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:12:24:49:a6:02:ca:43:57:fe:05:4d:04:
14:24:59:a4:cf:7a:9a:8d:b5:25:16:cb:d7:58:6b:
ef:c6:37:d0:99:dc:3a:f4:da:8b:7e:8a:b5:54:0a:
72:38:ac:b5:87:c3:31:b3:cd:19:89:f7:6c:16:b4:
b4:1b:e4:25:9d:62:a0:28:5e:ea:2b:48:fe:8a:e6:
af:84:93:25:f5:23:dd:0e:21:e8:a0:26:71:a9:11:
22:e6:e5:27:97:30:eb:8e:1e:55:c8:df:02:76:72:
9b:e5:36:81:d3:74:f5:79:51:5a:74:ac:90:f7:f0:
2a:56:cd:c9:1f:57:3d:51:86:a4:12:7e:0b:f1:49:
7d:5b:22:95:e9:f5:8d:21:45:fe:aa:b6:66:ca:55:
f5:94:e5:a8:45:10:b4:94:41:56:7d:dc:2a:68:23:
04:f4:9e:88:a7:58:61:46:13:8c:5c:e2:4a:7b:4f:
4a:02:d8:29:97:84:6c:51:2b:a2:4e:7c:3f:6a:c5:
51:9c:ae:1d:45:2e:35:83:00:f8:e7:0b:4a:2b:b8:
a4:9d:94:09:fd:8d:3c:cb:0c:4d:71:a8:c1:60:23:
50:29:af:20:eb:c6:fe:a2:3c:1f:78:b5:61:d6:03:
0e:93:bc:39:0a:fb:4f:5c:7d:e7:c6:06:ef:50:33:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:15:AD:14:8A:DF:86:91:05:B2:1E:38:C6:A5:B0:AE:A0:F3:35
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135342e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.154.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:ef:c0:d6:8f:ad:a3:20:5f:0f:2b:73:88:3f:57:1e:02:9e:
8c:7a:e5:95:53:df:0b:52:b0:79:74:30:fa:9c:e2:32:05:d7:
c8:a0:b3:f1:30:b8:16:99:aa:35:dc:01:99:d5:d7:15:09:f1:
f0:29:31:21:f9:ed:7f:25:41:41:3f:b0:58:d3:db:38:b9:22:
e9:4b:e5:32:5b:d9:5c:84:45:25:a8:58:f4:b5:e7:28:43:ea:
c4:fb:2b:35:2a:51:ee:3b:1e:de:85:5e:6c:e3:f0:02:2e:a8:
1e:f0:a2:df:65:da:d1:ec:19:d5:e1:09:bd:4a:7d:fc:b3:ae:
39:65:18:16:bb:65:76:38:46:2a:2f:9a:a6:22:d6:72:9e:db:
42:97:58:67:0d:0c:cb:d6:9a:2e:14:65:ec:93:9c:20:2e:d4:
0a:6f:5f:53:ff:3e:d2:13:49:e5:e1:07:16:29:d5:c1:4f:97:
bf:6f:07:0c:63:6b:3e:a7:48:49:ea:2e:0f:c6:c2:c9:92:13:
c8:62:a6:b6:64:23:db:9b:7b:35:bf:57:c4:6b:69:e0:37:a2:
68:16:41:2a:40:68:79:9a:b0:97:59:5c:24:5c:a8:5a:30:2e:
8b:7b:4b:ac:5f:56:e0:35:c8:e4:9e:c7:ec:d3:dd:c5:82:d0:
cb:68:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org