Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/3136302e32352e3137382e302f32332d3233203d3e20313533303735.roa
File: 3136302e32352e3137382e302f32332d3233203d3e20313533303735.roa (raw, json)
Hash identifier: SyM+DtWn+FDo+EBEyOYT9TAWAEwztlbUv4iZSNzpCsI=
Subject key identifier: 91:2F:16:0C:42:4B:D2:27:B4:64:EB:B6:0D:CC:0D:7D:4E:76:23:F0
Certificate issuer: /CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45
Certificate serial: 5ECAA4C87345E267D18A544BED51436512111A82
Authority key identifier: 29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/3136302e32352e3137382e302f32332d3233203d3e20313533303735.roa
Signing time: Thu 25 Jul 2024 08:20:51 +0000
ROA not before: Thu 25 Jul 2024 08:15:51 +0000
ROA not after: Thu 24 Jul 2025 08:20:51 +0000
asID: 153075
IP address blocks: 160.25.178.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 25 Jul 2024 09:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ca:a4:c8:73:45:e2:67:d1:8a:54:4b:ed:51:43:65:12:11:1a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45
Validity
Not Before: Jul 25 08:15:51 2024 GMT
Not After : Jul 24 08:20:51 2025 GMT
Subject: CN=912F160C424BD227B464EBB60DCC0D7D4E7623F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:aa:04:49:b7:3b:89:51:54:e4:12:d3:ca:86:
e3:61:2d:07:da:89:d2:e0:5e:22:29:b4:80:f8:1b:
7d:b3:43:63:95:c8:28:f7:34:de:b0:d4:f5:7a:6e:
16:cc:7a:e0:ee:e0:d9:d7:a0:59:1f:5f:31:75:6c:
cf:ba:30:e5:f4:b6:56:ba:5c:85:0a:59:e6:ee:e1:
0a:2a:90:8e:09:88:b9:86:14:95:7e:94:53:5d:e1:
a8:86:c7:5d:0a:13:86:ac:79:9c:5a:a6:e1:c6:5a:
d0:19:89:65:87:6e:8e:69:63:6b:f6:a5:bd:84:25:
8f:4e:6d:99:b8:51:4c:94:17:9a:c4:cc:20:e6:9d:
a9:0a:65:55:cf:72:95:da:76:57:10:fa:c9:e5:bf:
f9:33:d2:4f:d3:b0:ff:ab:0d:83:0e:4d:da:58:24:
eb:d2:e4:92:be:81:1c:e0:2e:57:8a:97:98:df:ce:
78:e0:f0:7b:93:3d:22:31:94:8f:ee:2e:6c:22:68:
9c:ac:43:de:0d:30:46:cd:99:c1:a2:aa:da:44:f1:
77:02:37:e0:0f:fc:68:94:eb:8a:ca:50:25:fe:b2:
dc:57:c9:89:15:73:da:61:12:a8:6a:0b:de:23:30:
a8:b1:5f:84:01:d4:52:11:62:fc:8d:fd:79:8d:d0:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2F:16:0C:42:4B:D2:27:B4:64:EB:B6:0D:CC:0D:7D:4E:76:23:F0
X509v3 Authority Key Identifier:
keyid:29:76:AD:C7:44:8B:F0:CA:9B:57:DC:D7:88:49:A1:E0:F9:5F:2B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2976ADC7448BF0CA9B57DCD78849A1E0F95F2B45.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/3136302e32352e3137382e302f32332d3233203d3e20313533303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.178.0/23
Signature Algorithm: sha256WithRSAEncryption
68:fa:59:c0:32:b1:72:50:b2:60:1a:72:2f:40:18:11:a4:e5:
35:7d:58:b0:68:11:52:0f:61:8e:35:f1:79:f7:78:68:4a:d3:
ad:cd:3f:c0:4b:56:f0:ed:5a:cc:db:7a:11:5d:26:95:d2:bc:
75:79:2e:93:03:e3:3a:b6:7a:c2:16:af:b3:47:83:54:ce:35:
07:d6:c0:1c:7f:83:b0:82:d0:d9:55:71:25:e5:1a:dc:09:eb:
05:4e:a5:d0:17:7b:40:17:b2:87:40:df:f7:45:5e:0d:f2:71:
35:b4:ef:92:e2:aa:b2:c3:21:77:0f:75:4b:27:b6:f8:48:39:
74:52:79:a7:8f:d0:9b:da:71:0f:99:26:09:71:bc:50:02:4c:
81:9c:a3:6e:db:e8:48:97:ef:0b:60:a8:0e:64:c9:2e:3e:fe:
f7:76:65:18:1c:fb:74:af:3a:0b:73:e3:61:96:e6:23:71:e9:
6e:6b:1b:35:b8:f9:4b:e5:60:fc:40:a1:33:73:48:6c:85:3c:
44:8c:bc:0b:fe:e7:29:ab:00:31:27:d2:4e:d4:db:d0:51:64:
83:e2:e2:99:19:1c:6b:9f:cf:10:0a:b2:a9:ac:6b:24:c5:7a:
9e:dd:3c:b5:f1:12:95:c1:ac:c3:5d:97:6a:83:07:23:2a:9d:
18:5c:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 12:39:07 2024 by rpki-client on console-fra.rpki-client.org