Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e20313333383039.roa
File: 3230322e35312e35382e302f32332d3233203d3e20313333383039.roa (raw, json)
Hash identifier: COZW8A4Pidp1jJOZZMmu1poRCI9vlE7GBLYblpRpRmU=
Subject key identifier: 56:3F:59:36:3B:22:ED:12:5C:F4:CB:EC:76:36:B0:34:26:67:36:F9
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 5B305DCA82B4104923F0B3FD37EE6C8AF5498BD4
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e20313333383039.roa
Signing time: Mon 22 Apr 2024 10:02:12 +0000
ROA not before: Mon 22 Apr 2024 09:57:12 +0000
ROA not after: Mon 21 Apr 2025 10:02:12 +0000
asID: 133809
IP address blocks: 202.51.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 24 Jul 2024 15:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:30:5d:ca:82:b4:10:49:23:f0:b3:fd:37:ee:6c:8a:f5:49:8b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Apr 22 09:57:12 2024 GMT
Not After : Apr 21 10:02:12 2025 GMT
Subject: CN=563F59363B22ED125CF4CBEC7636B034266736F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0d:71:9c:5c:a6:52:d3:ba:68:13:83:dc:1d:
10:ed:82:4b:df:24:20:27:97:10:19:c1:b7:6d:a8:
63:88:5c:5d:4c:e5:8d:cb:dc:aa:33:19:6e:45:50:
53:87:a9:be:ae:c8:ec:70:f9:e6:ff:90:59:a7:b0:
29:5c:08:28:4c:5f:03:95:c4:0c:d8:10:95:13:58:
d0:a6:c9:e5:70:77:dd:fb:62:e6:9d:0c:05:4b:ae:
25:b5:8a:e5:65:b2:be:06:a3:9a:ae:56:0a:52:be:
00:bd:5a:4b:b3:4e:69:be:dd:bf:06:6d:29:0d:8f:
d3:40:c4:39:88:d4:d3:dd:75:94:01:5c:82:74:fa:
3d:73:42:22:9d:9f:23:a3:46:b9:0a:ef:01:56:71:
50:e1:a9:d0:3f:d7:da:b7:6b:e2:63:d8:6d:cc:57:
28:16:14:d2:22:46:65:3e:04:23:d3:05:03:17:ed:
f2:25:45:d2:0e:0f:49:02:74:1a:5f:9c:c2:ef:2b:
18:73:79:c0:99:a9:89:13:85:76:cb:13:e1:f8:90:
00:17:70:32:95:e1:a2:98:2d:62:9a:19:62:77:4b:
49:92:d8:d1:a9:49:15:75:5b:49:f2:36:b5:21:2a:
46:13:8c:2f:2d:25:52:8b:14:7b:65:01:eb:c3:83:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:59:36:3B:22:ED:12:5C:F4:CB:EC:76:36:B0:34:26:67:36:F9
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e20313333383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.58.0/23
Signature Algorithm: sha256WithRSAEncryption
24:87:2a:43:16:1f:4f:3d:c6:cc:4a:9a:55:7b:8e:ec:41:b9:
92:56:5c:eb:05:c0:19:ba:c6:30:45:90:be:80:ad:bc:3a:dd:
39:81:cf:dc:a4:76:22:d2:f8:91:5b:58:5e:d2:71:ed:5e:e1:
5e:0e:3f:5a:75:20:ef:c4:67:72:dd:1b:59:36:6d:ff:56:94:
a1:1d:49:60:a8:c9:60:6e:fd:75:ec:8b:84:a7:10:08:4e:59:
31:48:e8:42:ea:4f:ff:3e:e6:d1:e7:0d:8c:50:06:73:24:30:
85:58:88:9b:9d:89:f0:90:1e:db:6e:da:98:20:ee:5c:28:59:
6a:38:a1:90:fd:46:61:89:5b:24:5e:32:40:4c:44:24:36:32:
64:77:15:8b:12:5a:3b:4f:ae:84:2a:d4:81:78:43:7f:e9:a0:
8d:29:ea:28:77:a5:ab:fc:f6:63:7f:e5:80:dc:ab:b8:72:7f:
70:ed:8a:df:0e:18:24:6b:57:4f:ed:49:bb:39:d2:9c:2d:2b:
34:14:56:a4:59:08:a8:c1:40:79:b4:b0:c1:05:63:63:2b:e8:
5d:24:31:eb:c6:6f:a4:04:18:cb:1e:34:2e:38:38:04:df:04:
44:d3:8e:64:b2:02:a0:1c:34:da:ab:48:19:95:2a:7f:6d:1d:
4c:4b:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 18:15:02 2024 by rpki-client on console-fra.rpki-client.org