Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135352e302f32342d3234203d3e203435373235.roa
File: 34332e3233302e3135352e302f32342d3234203d3e203435373235.roa (raw, json)
Hash identifier: /Qc59YLAntgIcLpKAy7HLNy4eJzZbuwXho+rT4a7HQo=
Subject key identifier: AB:99:9D:FB:6F:72:29:D6:67:EE:6A:E6:60:82:30:6E:B2:E4:90:49
Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Certificate serial: 0E3D151AD8A10B12651838787C6518C8B3DECDEE
Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135352e302f32342d3234203d3e203435373235.roa
Signing time: Tue 25 Jul 2023 08:00:00 +0000
ROA not before: Tue 25 Jul 2023 07:55:00 +0000
ROA not after: Tue 23 Jul 2024 08:00:00 +0000
asID: 45725
IP address blocks: 43.230.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:3d:15:1a:d8:a1:0b:12:65:18:38:78:7c:65:18:c8:b3:de:cd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103
Validity
Not Before: Jul 25 07:55:00 2023 GMT
Not After : Jul 23 08:00:00 2024 GMT
Subject: CN=AB999DFB6F7229D667EE6AE66082306EB2E49049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:9b:f5:d4:a3:4b:1e:aa:88:74:c6:0f:38:
10:d2:71:c4:42:b0:10:90:0e:ee:fc:5e:0d:53:25:
cc:37:41:06:36:3b:e5:21:dd:64:18:a9:21:bb:16:
a2:cf:48:81:af:75:7d:84:b3:6f:77:20:10:10:1a:
5e:34:8f:38:26:71:ed:ed:32:7a:09:83:c9:ab:ef:
41:d8:44:cf:90:30:de:cd:35:9c:35:be:c6:dd:b0:
33:e7:db:ec:e8:c0:e5:42:07:bf:51:99:b4:40:a3:
0c:b3:37:c1:a2:96:e1:d8:fd:3a:e6:b7:ba:13:1f:
7d:a4:80:df:c3:81:d5:1b:ca:4f:82:85:6d:d9:34:
f2:9a:65:c2:6b:58:1c:0b:eb:5c:a2:ad:8a:ed:7d:
f7:49:c3:06:fa:9f:2d:0b:e1:0a:b2:07:1e:57:cc:
ab:12:f8:dd:57:9a:57:e7:15:7d:c2:d1:13:98:fc:
5f:62:cb:a0:ad:5d:c7:a7:c2:6e:d8:93:2d:3c:e7:
4c:0d:bf:40:27:2a:e3:fa:7e:75:ea:c1:45:53:5c:
fa:2f:41:1e:4a:b3:59:0a:5a:5e:36:8a:23:c9:42:
8c:31:3a:9a:92:78:1f:39:48:5b:f7:04:7b:a8:f2:
c5:88:5a:dd:23:91:10:72:69:19:1f:90:72:ce:ed:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:99:9D:FB:6F:72:29:D6:67:EE:6A:E6:60:82:30:6E:B2:E4:90:49
X509v3 Authority Key Identifier:
keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/34332e3233302e3135352e302f32342d3234203d3e203435373235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.155.0/24
Signature Algorithm: sha256WithRSAEncryption
01:55:5d:2d:7b:46:0f:dc:c9:55:a4:d9:3a:0d:d6:91:b9:d5:
94:da:f3:f0:cc:ee:55:7b:9a:1f:65:d6:83:77:67:cd:86:64:
c6:e9:ed:ba:16:76:51:35:87:c4:ef:12:17:1c:06:17:ea:32:
99:44:c2:8b:94:20:1f:b5:35:54:04:0e:bc:68:7f:f9:8d:6d:
ae:87:1b:85:b9:09:b4:6a:de:f2:a4:63:36:3d:26:72:ba:d0:
d0:49:6c:58:71:f5:3a:52:5d:ff:75:96:b5:5d:a3:1d:08:7c:
c7:8f:91:86:8d:31:67:8b:d5:92:44:2b:1d:ed:a4:6d:ee:f5:
1f:61:bb:2d:29:c0:42:00:3f:d0:df:f0:51:90:1d:f0:1c:f8:
01:47:6e:bb:fe:1c:d4:c4:0b:bb:c3:21:1b:ed:10:42:01:4a:
65:a4:f2:9e:94:74:8a:e2:03:a3:5b:56:c3:64:a0:86:80:88:
f9:3d:62:ef:ce:5e:74:ff:be:90:03:97:87:ac:b7:c6:43:5b:
d8:e3:ba:17:77:2e:01:fe:62:c7:48:eb:96:dd:3d:09:45:ed:
da:1e:ac:d4:c8:a1:65:0b:a4:cf:a9:96:0a:e2:68:a1:13:13:
35:3e:d2:1e:88:88:ca:87:06:65:25:89:73:dd:6a:7a:08:b5:
dd:ef:bd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org