Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230362e302f32332d3233203d3e20313532383235.roa
File: 3136302e32322e3230362e302f32332d3233203d3e20313532383235.roa (raw, json)
Hash identifier: DK1mw2FCedjdfxRJ1Nqpk9m0OAQpjYpMd2Es7duQTSw=
Subject key identifier: 67:D5:9B:86:CC:FA:2F:C1:F3:73:16:B9:F8:8B:AA:FF:15:6B:54:8B
Certificate issuer: /CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5
Certificate serial: 403FF8D9D0ADD7A319089D915D09FAA8C467BCCA
Authority key identifier: 9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230362e302f32332d3233203d3e20313532383235.roa
Signing time: Wed 03 Jul 2024 03:22:13 +0000
ROA not before: Wed 03 Jul 2024 03:17:13 +0000
ROA not after: Wed 02 Jul 2025 03:22:13 +0000
asID: 152825
IP address blocks: 160.22.206.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 18 Feb 2025 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:3f:f8:d9:d0:ad:d7:a3:19:08:9d:91:5d:09:fa:a8:c4:67:bc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5
Validity
Not Before: Jul 3 03:17:13 2024 GMT
Not After : Jul 2 03:22:13 2025 GMT
Subject: CN=67D59B86CCFA2FC1F37316B9F88BAAFF156B548B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:fc:5e:20:26:51:1a:50:ab:69:9c:27:f0:
c6:27:fc:3c:98:36:c6:d8:de:bf:62:c2:ae:37:a3:
14:88:69:fa:12:70:af:db:fc:e0:7c:78:37:53:8f:
36:64:a7:f8:30:c6:81:68:94:0b:4b:68:1f:fa:28:
7a:ab:0b:ca:a0:cb:1e:3c:f6:0b:6b:da:b4:c4:1f:
38:95:90:eb:e9:58:cf:c0:c5:c8:ec:5d:8c:13:8a:
f6:95:2c:95:e1:0c:10:fa:b4:49:c7:47:00:66:54:
11:e3:63:93:69:13:d6:d9:76:e5:cc:1b:f7:2c:16:
2b:23:73:ed:b7:a7:76:8c:51:f1:d0:0e:01:9e:ef:
1a:2a:78:d6:00:ef:58:22:10:8e:69:2d:c6:5c:3d:
fa:5f:ab:6f:0a:0d:fa:a4:92:2a:d4:16:83:e5:e0:
4b:98:f0:7d:ba:f9:14:f9:e1:d0:9e:72:73:22:8a:
10:e9:bd:7c:12:d7:d1:21:34:06:bd:9d:4b:40:dd:
9b:ad:12:a2:1d:ec:45:da:5b:cb:d3:a5:80:1a:c2:
36:4a:7f:a9:ee:60:bd:0f:61:6c:8d:12:a7:f3:cc:
00:d8:bb:e7:da:28:51:92:6a:bc:b5:d2:ec:e7:7f:
ee:af:29:b9:f7:18:32:8a:9d:7c:8f:a8:c8:3d:94:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D5:9B:86:CC:FA:2F:C1:F3:73:16:B9:F8:8B:AA:FF:15:6B:54:8B
X509v3 Authority Key Identifier:
keyid:9C:94:8B:B5:F7:C6:53:9D:B5:D4:58:5D:BE:EA:F3:5A:E2:3D:DC:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C948BB5F7C6539DB5D4585DBEEAF35AE23DDCA5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/356e42e6-c6cd-4ccd-bda7-5ae9a246044a/0/3136302e32322e3230362e302f32332d3233203d3e20313532383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.206.0/23
Signature Algorithm: sha256WithRSAEncryption
14:bd:4e:8a:9d:52:6e:42:5c:0e:da:15:db:45:22:ab:47:c0:
41:91:89:d1:9c:b2:33:88:f9:1a:91:68:e0:c4:8d:8c:a3:57:
d8:06:10:aa:60:6a:dd:35:85:1f:b4:ee:e4:50:59:37:b7:e3:
45:87:15:17:10:c4:d2:79:8d:70:b3:9c:00:76:c0:34:51:45:
f8:2c:0d:18:f3:ca:93:61:83:10:2c:29:19:ac:12:a6:43:aa:
52:10:5f:0f:60:cd:7f:11:b8:8f:d2:68:4a:c7:3f:38:7f:7d:
b7:90:2e:a1:b8:29:ae:fb:97:d9:ab:df:6d:59:e6:50:c6:79:
ed:d3:ac:49:83:39:a4:29:b3:d6:dc:8b:79:2e:3b:5c:5f:7d:
8a:9d:13:a9:ed:86:b4:8a:23:4a:aa:8d:bf:06:12:e1:3e:14:
e4:ac:0d:18:10:0b:f4:c8:3a:83:8b:44:69:79:56:ef:fc:e1:
84:95:d6:bc:66:f3:f5:9d:9e:4c:da:ac:de:95:9f:4c:5a:68:
c6:73:64:ab:b2:89:30:2e:3a:d8:47:74:87:86:a3:4a:29:af:
ac:63:5e:3e:0d:dc:4c:a2:c4:0d:dd:3e:d4:4a:b1:18:e0:36:
5f:07:94:d8:b3:e3:1f:f0:8a:cd:24:92:c8:57:4e:4f:43:84:
55:e0:54:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:02 2025 by rpki-client