Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e20313333383039.roa
File: 3230322e35312e35382e302f32342d3234203d3e20313333383039.roa (raw, json)
Hash identifier: cqeQwHrHLnmtE9TbQ4Wl2rA2Jr2qCQd6H1k09S8SWJY=
Subject key identifier: 78:65:63:A8:28:B0:05:46:85:0E:70:05:77:A1:D0:A9:4D:F1:9D:F5
Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Certificate serial: 12E3C964282A27C9A39F1D9A7D418D94183DAE49
Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e20313333383039.roa
Signing time: Mon 22 Apr 2024 10:02:11 +0000
ROA not before: Mon 22 Apr 2024 09:57:11 +0000
ROA not after: Mon 21 Apr 2025 10:02:11 +0000
asID: 133809
IP address blocks: 202.51.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jul 2024 15:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e3:c9:64:28:2a:27:c9:a3:9f:1d:9a:7d:41:8d:94:18:3d:ae:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C
Validity
Not Before: Apr 22 09:57:11 2024 GMT
Not After : Apr 21 10:02:11 2025 GMT
Subject: CN=786563A828B00546850E700577A1D0A94DF19DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:f5:81:4d:a3:af:90:47:29:e1:47:31:19:
b3:08:bf:f8:ac:47:e1:88:d1:1f:16:36:9f:2a:4d:
67:ae:7c:63:8a:00:96:cf:f4:bb:f2:48:d0:55:f1:
43:82:b9:3e:98:1c:98:55:c1:a0:0f:61:21:b0:d1:
8d:01:17:ba:c0:25:f1:f0:84:14:8c:02:43:6f:10:
50:0b:e2:c2:16:6e:80:81:ee:a8:eb:b5:3a:e9:5b:
39:57:c5:39:5d:08:19:e4:5c:fe:c6:fd:bb:e6:e1:
b0:44:15:31:9b:a6:6f:b9:a5:12:86:0e:bc:37:e2:
99:6a:f9:7c:61:7e:88:3e:da:13:31:97:f6:9d:72:
4b:4e:a7:28:3d:5a:f1:b6:b8:86:b5:8b:03:39:6d:
57:25:d4:ba:a5:a6:fa:49:07:b8:c7:ea:df:1b:3d:
13:9f:c6:f9:ba:68:55:9f:72:24:9c:d3:6d:c1:1c:
9b:7e:a9:81:be:be:02:29:d5:9f:8a:43:08:93:57:
74:ce:6d:7d:38:9b:b9:3f:ef:71:3b:02:08:04:92:
4e:32:ee:3f:92:67:ff:1f:f7:b5:34:37:7b:5f:e0:
ff:6e:f8:60:f1:24:7c:d6:42:21:0f:93:b8:46:7b:
d3:44:77:a7:1c:20:a3:a9:9b:06:06:4a:6d:ae:9c:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:65:63:A8:28:B0:05:46:85:0E:70:05:77:A1:D0:A9:4D:F1:9D:F5
X509v3 Authority Key Identifier:
keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32342d3234203d3e20313333383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.58.0/24
Signature Algorithm: sha256WithRSAEncryption
61:fb:f3:85:00:fe:e8:96:22:9f:26:c7:1a:1b:fa:98:ac:6f:
04:b9:08:2a:57:37:f5:82:46:52:d8:44:d0:d7:de:2d:56:2a:
b0:af:92:47:1a:c8:c9:82:09:3f:41:d7:67:9c:cd:13:a3:55:
8f:1e:d4:a7:87:8a:c2:05:f6:43:48:4b:69:16:c5:36:ef:a0:
99:02:b9:45:17:44:c9:76:69:b3:d7:a5:1c:fc:d1:ec:a4:11:
f6:a7:c4:5a:8f:d4:26:e1:81:fc:49:57:c8:ca:43:52:c6:77:
1e:47:51:20:39:40:1c:cc:d7:5c:97:1f:ca:f6:15:29:cd:13:
58:09:4e:d7:2f:de:2b:57:e9:15:be:44:74:0b:f5:c5:4f:5f:
16:34:c2:d0:7c:ce:ec:fe:99:7b:f4:79:91:66:51:dc:73:da:
8e:28:7e:38:c6:6a:1c:c7:50:50:39:61:d4:9a:27:9f:ec:3e:
b8:0d:8d:2e:e4:ec:7c:87:5c:1b:60:59:4e:d1:e1:09:48:85:
43:5d:79:bc:80:cf:a5:26:b6:e1:d7:83:29:52:1a:d9:bc:3c:
e4:eb:36:fa:78:22:47:05:0e:a0:a1:05:66:ad:a7:d3:22:11:
ae:b0:b2:e6:0e:28:8e:86:99:90:a7:6d:28:cd:ea:50:69:e1:
b4:84:07:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 19:37:41 2024 by rpki-client on console-ams.rpki-client.org