Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3132342e302f32332d3234203d3e20313338313135.roa
File: 3135372e31352e3132342e302f32332d3234203d3e20313338313135.roa (raw, json)
Hash identifier: X0adaxD9g8D19/rTsR3jJjOAxmhl5Hks8ICkEpv3Iak=
Subject key identifier: FD:88:63:DD:20:E9:BD:A8:F3:4B:24:C9:FA:F6:26:08:5F:44:96:0A
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 3E3A07D6BD8F1FCBB58410F4A0047DC6A92ADC54
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3132342e302f32332d3234203d3e20313338313135.roa
Signing time: Mon 16 Dec 2024 07:59:28 +0000
ROA not before: Mon 16 Dec 2024 07:54:28 +0000
ROA not after: Mon 15 Dec 2025 07:59:28 +0000
asID: 138115
IP address blocks: 157.15.124.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 09:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3a:07:d6:bd:8f:1f:cb:b5:84:10:f4:a0:04:7d:c6:a9:2a:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 16 07:54:28 2024 GMT
Not After : Dec 15 07:59:28 2025 GMT
Subject: CN=FD8863DD20E9BDA8F34B24C9FAF626085F44960A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:09:88:9d:15:2a:e9:9a:31:23:10:91:16:
b8:0b:48:e3:17:17:43:29:52:98:b2:f4:58:d7:e4:
03:8b:94:ae:35:62:71:a3:e9:34:66:4d:73:fb:c9:
d3:99:dc:86:e6:a1:7f:5b:4d:09:8a:81:6b:b8:f8:
5d:35:2e:40:c4:dd:1b:e0:cc:f5:bb:b0:1b:13:5b:
dd:e0:f2:90:e3:ea:7b:24:02:b7:a6:90:ee:97:95:
26:e4:91:48:52:fc:b5:bb:0b:71:8e:71:d9:6c:c6:
c7:d0:ee:ab:23:83:93:8c:24:f5:54:82:38:13:6f:
c7:ea:c9:8b:28:cd:fc:20:68:62:7b:87:4a:5e:22:
5a:80:4d:ce:17:21:31:90:50:ae:b9:5f:67:1e:fc:
40:bd:66:3f:7f:f3:08:1e:47:db:97:f0:da:74:f0:
df:3b:77:18:5f:14:91:56:14:43:e6:5d:b3:0a:fd:
24:bb:b7:36:9c:0a:36:58:94:ac:97:e7:13:22:89:
0f:e0:ea:f2:ac:4b:1f:76:7c:5a:88:a8:07:62:32:
29:5d:22:27:2a:8c:18:07:7a:f1:bb:77:c7:56:2b:
aa:8b:60:2b:39:fd:b7:ed:ea:74:c3:30:a1:8d:03:
b0:f1:ca:4f:b9:45:4d:a6:71:50:8e:79:03:5c:09:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:63:DD:20:E9:BD:A8:F3:4B:24:C9:FA:F6:26:08:5F:44:96:0A
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3132342e302f32332d3234203d3e20313338313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.124.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:7c:bb:7c:8a:b3:85:c9:a1:de:ae:a4:f3:d5:5b:e2:0e:a2:
56:36:0d:02:83:38:17:ce:57:6b:2f:13:ae:7c:26:5f:66:86:
f2:51:58:37:47:97:f6:ce:24:d3:8b:f6:dc:ae:0e:62:db:9c:
f0:c6:35:fe:55:df:f1:8e:da:a1:bf:cc:10:b2:90:ec:8f:7a:
69:6b:18:86:61:80:fb:ed:7b:e6:1e:1a:fd:6f:33:ee:8a:b1:
fc:4b:28:79:03:13:17:3f:4a:e9:f0:53:b1:95:1c:c5:c8:7f:
9b:3e:b1:83:51:d7:2f:9c:91:a3:f5:b8:01:a5:e3:b7:fc:50:
46:bf:48:24:23:8e:fb:c2:ea:b7:ba:ce:98:02:46:b6:91:81:
6e:98:12:0d:f6:9c:e2:a7:f3:88:09:64:e2:06:7a:31:66:2f:
5e:4c:63:27:52:8c:c8:a0:5c:cc:9d:e3:84:52:6e:9f:b3:c0:
fa:16:8c:0d:6b:3b:01:a2:d7:77:42:27:dd:5d:d4:2e:75:4f:
7c:40:fe:1e:b3:16:bd:f2:db:71:1b:b3:32:5d:e9:ee:60:28:
db:a8:f9:53:fe:b7:2d:15:60:4d:d4:cd:46:e0:8a:55:87:06:
af:e1:90:b0:92:ce:f4:ea:f2:99:1b:f7:db:ec:aa:16:97:eb:
b4:b8:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:39:08 2025 by rpki-client