Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32332d3234203d3e20313430343233.roa
File: 3136302e32322e36322e302f32332d3234203d3e20313430343233.roa (raw, json)
Hash identifier: ZpQndyiQMkYz85ab1ceb1wc062+CAJVbosoUwynE59U=
Subject key identifier: 12:16:5B:E0:C2:FF:84:0D:6B:24:E0:BF:02:BB:24:8D:CA:75:0B:9E
Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
Certificate serial: 3EE156D750C0EB94AD1C850EC3429814F4442048
Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32332d3234203d3e20313430343233.roa
Signing time: Thu 27 Jun 2024 04:19:31 +0000
ROA not before: Thu 27 Jun 2024 04:14:31 +0000
ROA not after: Thu 26 Jun 2025 04:19:31 +0000
asID: 140423
IP address blocks: 160.22.62.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 22:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e1:56:d7:50:c0:eb:94:ad:1c:85:0e:c3:42:98:14:f4:44:20:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
Validity
Not Before: Jun 27 04:14:31 2024 GMT
Not After : Jun 26 04:19:31 2025 GMT
Subject: CN=12165BE0C2FF840D6B24E0BF02BB248DCA750B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:50:1e:b5:d0:6f:51:2c:54:d6:61:61:fb:
13:dc:de:9d:2a:08:54:f2:a3:5e:15:8b:46:d8:8a:
87:4d:ff:7f:35:50:22:12:ca:46:b8:c7:e1:e1:2f:
10:6d:23:6e:ac:a0:02:e6:2e:18:09:b0:31:ad:56:
09:45:ba:8c:e5:e7:cd:1a:ae:4c:73:f2:16:a2:51:
c5:8a:5d:3f:4c:24:33:c0:ae:bf:bf:8a:7e:ad:87:
cc:a9:b0:e7:84:66:87:b1:b1:1e:c5:6a:fa:76:13:
64:c2:36:1c:f1:3e:90:90:45:31:3b:ef:cc:98:e5:
13:5e:4d:e6:77:66:65:f0:2d:84:bc:17:f5:4b:c6:
72:fd:15:71:8a:fb:58:d4:2b:1f:7a:fe:bf:9f:ae:
c5:7b:ea:8e:8a:5d:41:d5:54:0f:67:3f:48:0f:15:
d7:12:8b:56:36:c4:9f:75:2b:70:92:56:81:2d:db:
1e:eb:14:42:52:ca:89:69:c8:c4:c3:03:9d:85:3b:
3f:96:74:ea:ba:79:f7:8f:be:ac:22:42:02:2f:85:
26:8c:3a:aa:31:41:e0:f1:04:37:92:45:d2:2b:64:
f9:fc:f9:c1:1c:5d:8f:a9:da:c3:7b:a3:47:f9:95:
17:b9:cb:0c:ba:5a:f2:9c:f6:7e:d0:72:cf:dc:67:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:16:5B:E0:C2:FF:84:0D:6B:24:E0:BF:02:BB:24:8D:CA:75:0B:9E
X509v3 Authority Key Identifier:
keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32332d3234203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.62.0/23
Signature Algorithm: sha256WithRSAEncryption
67:23:c7:73:e4:1f:aa:cc:26:e0:f5:3b:da:3a:b6:db:36:44:
64:28:2b:34:cc:3e:11:e0:75:91:98:b6:bc:32:8d:56:17:08:
2e:66:25:75:15:1e:cf:f5:4a:39:90:f1:4d:6c:6f:6b:1b:1e:
e2:0d:80:cf:e8:32:74:29:de:85:ed:b6:38:ee:3f:5c:8b:fd:
d2:3e:4e:06:a4:6c:a2:8b:d1:37:17:63:1f:07:ac:74:38:4a:
ab:81:55:38:a4:6b:f9:8b:ed:d4:63:8b:39:e2:a3:1c:d4:93:
e9:84:d2:22:6a:63:55:fc:08:22:e8:fa:fb:3b:4f:a9:3e:b3:
3c:67:f1:b5:c5:41:77:61:ac:f7:15:b1:04:24:b8:7d:da:3c:
e2:b3:45:73:64:a9:47:f5:0f:6b:1b:e8:74:26:f6:c1:94:5a:
ab:12:1d:67:fa:d2:cc:a0:34:36:6f:ae:50:ea:86:b5:6a:48:
22:5c:e9:14:91:7a:a6:b1:0e:70:19:51:f1:ab:98:4c:f8:39:
fc:06:69:36:8e:85:0e:45:8d:2c:a2:cb:c4:53:19:43:ef:54:
ef:61:14:f1:9d:4e:e4:98:65:63:87:6c:c2:c8:13:c9:52:8b:
d7:09:44:80:ad:12:42:a2:2f:39:a4:b0:65:c3:1d:30:d0:02:
6f:49:ce:96
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPuFW11DA65StHIUOw0KYFPREIEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw
RDU4MDIxMDAeFw0yNDA2MjcwNDE0MzFaFw0yNTA2MjYwNDE5MzFaMDMxMTAvBgNV
BAMTKDEyMTY1QkUwQzJGRjg0MEQ2QjI0RTBCRjAyQkIyNDhEQ0E3NTBCOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/alAetdBvUSxU1mFh+xPc3p0q
CFTyo14Vi0bYiodN/381UCISyka4x+HhLxBtI26soALmLhgJsDGtVglFuozl580a
rkxz8haiUcWKXT9MJDPArr+/in6th8ypsOeEZoexsR7Favp2E2TCNhzxPpCQRTE7
78yY5RNeTeZ3ZmXwLYS8F/VLxnL9FXGK+1jUKx96/r+frsV76o6KXUHVVA9nP0gP
FdcSi1Y2xJ91K3CSVoEt2x7rFEJSyolpyMTDA52FOz+WdOq6efePvqwiQgIvhSaM
OqoxQeDxBDeSRdIrZPn8+cEcXY+p2sN7o0f5lRe5ywy6WvKc9n7Qcs/cZ4QJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUEhZb4ML/hA1rJOC/Arskjcp1C54wHwYDVR0j
BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD
NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4
MDIxMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYzY3N2ZkLWQ1NjktNGNjNS1h
NTYzLTliMGYyNDhiMWFmMS8wLzMxMzYzMDJlMzIzMjJlMzYzMjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzQzMDM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWPjANBgkqhkiG
9w0BAQsFAAOCAQEAZyPHc+Qfqswm4PU72jq22zZEZCgrNMw+EeB1kZi2vDKNVhcI
LmYldRUez/VKOZDxTWxvaxse4g2Az+gydCnehe22OO4/XIv90j5OBqRsoovRNxdj
HwesdDhKq4FVOKRr+Yvt1GOLOeKjHNST6YTSImpjVfwIIuj6+ztPqT6zPGfxtcVB
d2Gs9xWxBCS4fdo84rNFc2SpR/UPaxvodCb2wZRaqxIdZ/rSzKA0Nm+uUOqGtWpI
IlzpFJF6prEOcBlR8auYTPg5/AZpNo6FDkWNLKLLxFMZQ+9U72EU8Z1O5JhlY4ds
wsgTyVKL1wlEgK0SQqIvOaSwZcMdMNACb0nOlg==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:03 2025 by rpki-client