Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34352e302f32342d3234203d3e20313532333931.roa
File: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (raw, json)
Hash identifier: YEzV0WYcndWL/2icrtnRnxaAlR0I0pdfkp09IRn7QT8=
Subject key identifier: 3C:C0:2A:1D:A8:B9:7B:8C:9F:D1:D7:20:B8:57:0B:1A:2F:6B:64:EE
Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B
Certificate serial: 205EF15DB06365972BED6EA1643AC3B5BE0B5006
Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34352e302f32342d3234203d3e20313532333931.roa
Signing time: Fri 29 Mar 2024 05:55:12 +0000
ROA not before: Fri 29 Mar 2024 05:50:12 +0000
ROA not after: Fri 28 Mar 2025 05:55:12 +0000
asID: 152391
IP address blocks: 157.15.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 08:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5e:f1:5d:b0:63:65:97:2b:ed:6e:a1:64:3a:c3:b5:be:0b:50:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B
Validity
Not Before: Mar 29 05:50:12 2024 GMT
Not After : Mar 28 05:55:12 2025 GMT
Subject: CN=3CC02A1DA8B97B8C9FD1D720B8570B1A2F6B64EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:28:4a:ef:98:d4:1e:0a:5d:74:21:c0:bb:
be:c9:e7:a2:b7:51:be:04:87:66:5c:a4:b7:5f:82:
9e:65:07:83:dc:ed:b4:95:0a:ff:1a:24:71:db:8c:
3c:10:b3:ab:f8:cb:33:af:c4:5e:20:30:dd:4e:85:
26:1f:35:91:ca:32:7c:e3:47:d7:f8:8b:bc:38:f5:
e4:82:a0:ef:d1:3a:4e:0b:ee:73:ae:03:d4:84:6b:
a6:d2:2e:6f:22:20:e7:ad:c5:d2:43:62:40:51:d3:
db:f4:f5:ac:7c:1b:9b:6a:aa:75:a1:6b:dd:6a:ad:
83:5f:cc:4e:8d:b2:21:b4:ba:ad:4c:db:d2:83:80:
d3:ce:05:ee:ee:5d:21:7b:88:12:d1:dc:52:5f:e9:
23:85:6a:da:8f:7a:22:c7:c8:09:2c:8e:5b:e1:4b:
86:00:67:98:e1:56:98:56:89:16:8a:59:4d:3c:00:
23:f5:f9:3f:45:2b:7c:7b:7d:07:3c:1d:86:43:1b:
6a:2a:d2:cb:5b:a5:83:1d:78:ee:eb:a4:26:18:3b:
08:11:15:02:bc:dc:26:6a:c9:3b:15:36:fc:35:e3:
f1:4a:d9:2a:cc:31:c6:95:05:6b:00:93:4e:62:2c:
0f:98:b9:5b:f4:8a:c7:59:e6:08:8a:87:38:1a:1d:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C0:2A:1D:A8:B9:7B:8C:9F:D1:D7:20:B8:57:0B:1A:2F:6B:64:EE
X509v3 Authority Key Identifier:
keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34352e302f32342d3234203d3e20313532333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.45.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f3:a9:35:54:1f:ad:d3:71:48:d5:b3:42:7e:24:a3:ae:46:
af:3c:d3:78:d4:26:27:12:02:f7:3c:58:c0:b9:70:27:4b:f1:
f9:34:8d:ba:40:27:d2:e7:c7:c0:50:7c:df:ee:1d:0a:bb:9c:
5f:60:17:f6:7b:13:65:03:5a:bb:56:4a:d8:53:01:3f:42:67:
12:f7:76:47:dc:44:b4:f6:b1:ff:32:ab:a6:00:29:c5:a2:0f:
d0:57:11:ad:19:83:cb:b4:eb:d9:91:8b:44:22:07:f6:e3:84:
bf:0e:3a:e6:6a:4a:6c:2d:c0:d8:56:6c:a4:3d:f6:02:06:30:
ed:8b:da:1f:eb:88:3e:e9:f8:08:e1:c2:fe:4c:ce:93:8a:8e:
cb:ac:d9:24:12:d3:dc:97:a3:c9:dd:cf:57:af:0f:20:95:f3:
83:63:66:44:9a:25:4d:3d:4a:50:61:1b:d7:50:7d:8a:f6:47:
0c:13:5d:d9:00:96:01:58:52:58:07:32:8b:7a:99:ec:2e:e6:
aa:ca:82:e7:6c:f5:13:37:27:cd:63:ac:19:b2:c9:db:05:48:
4c:cb:43:d0:ef:a9:a4:31:9e:19:d3:38:a4:2d:73:69:28:5c:
2c:bb:6f:a4:22:db:75:ec:04:67:f3:1c:99:cd:c8:95:32:b0:
3f:e6:ab:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org