Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e32302e3233322e302f32342d3234203d3e20313431303536.roa
File: 3135372e32302e3233322e302f32342d3234203d3e20313431303536.roa (raw, json)
Hash identifier: 1Vf2bb62lz0/wHT/4trlCf+Y/8TL1d80zmQ0xSUsbSw=
Subject key identifier: E8:88:32:26:F2:1F:77:36:B7:13:CE:25:C1:DA:A5:9D:18:4F:57:9F
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 1DCAEE4660E9C85D0AA69DD18DE28138064A9116
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e32302e3233322e302f32342d3234203d3e20313431303536.roa
Signing time: Tue 26 Mar 2024 06:28:04 +0000
ROA not before: Tue 26 Mar 2024 06:23:04 +0000
ROA not after: Tue 25 Mar 2025 06:28:04 +0000
asID: 141056
IP address blocks: 157.20.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 02:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ca:ee:46:60:e9:c8:5d:0a:a6:9d:d1:8d:e2:81:38:06:4a:91:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Mar 26 06:23:04 2024 GMT
Not After : Mar 25 06:28:04 2025 GMT
Subject: CN=E8883226F21F7736B713CE25C1DAA59D184F579F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:9f:40:41:47:d0:8a:16:a7:14:0d:b0:91:
ce:f9:72:14:aa:f6:6a:a3:d6:fc:31:5a:ed:40:1a:
d8:a7:f1:ab:3b:2a:e0:61:a0:23:7f:67:16:69:e8:
dc:64:2a:cd:95:60:34:1b:6b:33:64:a6:61:e5:83:
df:5c:76:f1:78:16:9e:03:fa:99:c4:88:30:ad:9c:
bd:b9:4c:d9:50:0b:db:ea:b4:db:6d:9f:f8:e2:6b:
7f:87:2e:d1:3b:0e:05:ca:f7:5d:ad:5b:3b:8c:47:
56:a2:dd:20:25:4a:ea:e5:57:07:e1:68:dd:12:05:
12:e8:d8:40:f3:15:e5:62:b7:0a:e7:d5:a5:80:73:
62:e3:d0:49:4a:55:41:81:26:d8:5a:05:27:56:36:
59:bb:d2:75:27:e4:8d:c7:f4:4d:50:28:2c:d4:91:
b2:e5:a6:34:71:c3:6e:b1:a6:3f:b5:15:a8:97:6d:
bc:21:18:21:56:6a:9c:7c:b8:c3:66:35:d2:68:ee:
37:16:2d:07:29:95:7f:f9:49:bd:b8:a7:15:ee:70:
d1:52:03:10:1c:27:75:ca:8a:12:4d:5b:7d:d4:10:
05:78:60:59:c8:c9:a6:11:b4:50:f3:11:96:09:4e:
41:ba:d4:c5:a0:03:6b:5c:f2:55:35:f4:e3:1b:4e:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:32:26:F2:1F:77:36:B7:13:CE:25:C1:DA:A5:9D:18:4F:57:9F
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e32302e3233322e302f32342d3234203d3e20313431303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.20.232.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a0:56:f7:4c:db:44:17:21:af:88:46:35:b8:90:d7:57:9f:
e7:00:fd:8c:ba:a2:12:c0:63:55:0d:c8:31:10:a0:da:3f:ba:
ef:5c:c9:72:ee:9d:46:f0:22:4e:01:aa:8b:9b:5c:65:0d:a6:
42:f6:5a:9e:89:5d:5a:74:41:25:bd:75:ea:ec:d2:d8:df:68:
78:a0:60:22:1c:1d:ea:8c:54:13:81:99:02:ef:c6:84:d6:a6:
40:a4:d3:e0:25:30:92:2e:94:fa:2b:49:a8:44:8f:a4:5f:66:
f2:0d:b1:22:32:8d:a0:ae:ea:38:a7:65:93:2c:4e:f5:3d:d8:
3a:da:3b:54:4b:83:28:50:bd:7d:fb:64:58:e3:0d:46:2e:cd:
6c:ff:5d:ec:94:ee:3f:00:a3:18:3e:f6:83:d9:cc:be:79:a6:
43:44:ac:9a:be:cd:24:62:da:0c:6f:3c:f2:f5:d6:b0:ba:93:
c1:dc:77:8f:50:4e:f7:18:1d:43:db:54:bf:72:74:96:3f:d8:
04:d6:d5:f1:85:c7:7b:ca:4c:03:35:a2:b5:37:83:5a:fb:3c:
21:30:ec:de:e5:57:05:af:31:32:fc:af:87:39:94:f0:32:98:
b0:79:6d:a3:35:4a:b1:d9:ba:70:98:1d:49:3e:31:08:e2:83:
ca:62:fa:94
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIUHcruRmDpyF0Kpp3RjeKBOAZKkRYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDMyNjA2MjMwNFoX
DTI1MDMyNTA2MjgwNFowMzExMC8GA1UEAxMoRTg4ODMyMjZGMjFGNzczNkI3MTND
RTI1QzFEQUE1OUQxODRGNTc5RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALrzn0BBR9CKFqcUDbCRzvlyFKr2aqPW/DFa7UAa2Kfxqzsq4GGgI39nFmno
3GQqzZVgNBtrM2SmYeWD31x28XgWngP6mcSIMK2cvblM2VAL2+q0222f+OJrf4cu
0TsOBcr3Xa1bO4xHVqLdICVK6uVXB+Fo3RIFEujYQPMV5WK3CufVpYBzYuPQSUpV
QYEm2FoFJ1Y2WbvSdSfkjcf0TVAoLNSRsuWmNHHDbrGmP7UVqJdtvCEYIVZqnHy4
w2Y10mjuNxYtBymVf/lJvbinFe5w0VIDEBwndcqKEk1bfdQQBXhgWcjJphG0UPMR
lglOQbrUxaADa1zyVTX04xtODpECAwEAAaOCAgEwggH9MB0GA1UdDgQWBBToiDIm
8h93NrcTziXB2qWdGE9XnzAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuGaHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNTM3MmUz
MjMwMmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM1MzYu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO
MAwEAgABMAYDBACdFOgwDQYJKoZIhvcNAQELBQADggEBAEOgVvdM20QXIa+IRjW4
kNdXn+cA/Yy6ohLAY1UNyDEQoNo/uu9cyXLunUbwIk4BqoubXGUNpkL2Wp6JXVp0
QSW9ders0tjfaHigYCIcHeqMVBOBmQLvxoTWpkCk0+AlMJIulPorSahEj6RfZvIN
sSIyjaCu6jinZZMsTvU92DraO1RLgyhQvX37ZFjjDUYuzWz/XeyU7j8Aoxg+9oPZ
zL55pkNErJq+zSRi2gxvPPL11rC6k8Hcd49QTvcYHUPbVL9ydJY/2ATW1fGFx3vK
TAM1orU3g1r7PCEw7N7lVwWvMTL8r4c5lPAymLB5baM1SrHZunCYHUk+MQjig8pi
+pQ=
-----END CERTIFICATE-----
Generated at Wed Apr 3 04:01:36 2024 by rpki-client on console-ams.rpki-client.org