Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231342e302f32332d3234203d3e2030.roa
File: 3135372e31352e3231342e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: /CT4/jg0eprdTGgJ95WRG2dAPzbBtYhR7OZ6ctY5/KI=
Subject key identifier: 5D:F9:A0:98:25:73:0B:F7:9A:43:3E:09:98:33:6A:FC:AB:EF:19:79
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 78DFBD3D77384965B00B71687F2113FD2EF9EB97
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231342e302f32332d3234203d3e2030.roa
Signing time: Mon 19 Feb 2024 04:24:05 +0000
ROA not before: Mon 19 Feb 2024 04:19:05 +0000
ROA not after: Mon 17 Feb 2025 04:24:05 +0000
asID: 0
IP address blocks: 157.15.214.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 05:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:df:bd:3d:77:38:49:65:b0:0b:71:68:7f:21:13:fd:2e:f9:eb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Feb 19 04:19:05 2024 GMT
Not After : Feb 17 04:24:05 2025 GMT
Subject: CN=5DF9A09825730BF79A433E0998336AFCABEF1979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ad:2e:63:29:22:2c:72:e4:85:23:4d:9a:d8:
9c:3f:ab:d1:df:e8:b3:f4:da:9d:60:1f:36:d9:14:
26:70:91:60:9a:42:ca:25:ba:6a:3a:8f:a3:d7:50:
6c:78:45:7e:03:26:3a:27:72:d0:99:5f:cf:4c:8e:
21:54:8c:c2:9b:19:00:56:80:f6:ec:08:59:be:c0:
7e:1a:3c:98:8b:59:f4:81:c8:cf:0f:df:aa:5e:1f:
cb:aa:36:62:dc:ad:7b:bb:37:96:b9:55:91:f1:a6:
d7:bd:db:4b:ab:75:da:3e:9f:13:98:1e:71:b0:bd:
0e:8b:90:14:02:3f:b1:a9:00:a8:77:41:8b:a1:78:
6e:91:f7:ae:c5:dc:1f:3b:97:1e:25:c9:27:77:d1:
59:17:73:39:c4:82:db:59:0e:de:b6:5a:00:bd:20:
5a:c3:df:cf:96:92:ba:a4:02:00:83:65:03:56:5a:
6a:82:b6:c4:6f:93:79:18:a4:6d:4a:6f:bb:ed:18:
17:3e:87:bc:c9:34:b5:b7:07:3f:0d:d2:08:3a:eb:
7e:95:0e:73:77:32:5b:b8:62:4e:fa:f7:9c:94:56:
a5:c9:83:19:23:4b:91:32:06:92:3d:15:16:01:e8:
fb:7e:c4:b4:e3:8f:7d:81:8c:11:cb:68:cc:dd:d7:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:A0:98:25:73:0B:F7:9A:43:3E:09:98:33:6A:FC:AB:EF:19:79
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e3231342e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.214.0/23
Signature Algorithm: sha256WithRSAEncryption
91:68:57:2e:a1:f9:b1:08:d3:9b:fe:50:b1:54:ca:9d:49:6d:
13:ba:b0:f4:95:ab:96:f0:d9:5e:60:f6:a8:8f:c6:fd:b3:c4:
b5:40:43:54:67:8f:06:34:0f:4d:87:53:f7:4d:c3:6c:7f:31:
95:56:89:44:95:b5:a3:79:82:12:97:89:fb:bd:3f:23:75:87:
2b:ba:2d:63:9d:23:87:3c:2c:03:43:f1:15:8d:fd:a1:83:e6:
5f:05:27:c7:32:97:e3:1f:a5:e4:a2:81:e5:8d:8e:86:8d:27:
90:07:be:66:72:0c:08:71:ab:9d:23:3a:05:80:c9:ef:a7:d8:
3f:37:9b:4c:89:03:77:11:5c:09:28:bf:07:d1:80:c7:83:ec:
a3:77:18:7d:67:89:1b:7b:50:f4:e7:d5:56:9e:17:ae:89:a5:
25:13:b9:ed:61:ba:a8:30:37:bd:42:05:89:fe:ee:7f:e4:82:
f2:b9:ec:8e:ec:de:3c:8e:d4:ab:69:9a:06:d2:ed:a9:54:c7:
e3:2d:cf:1b:87:03:8b:1c:72:2b:ff:73:19:ee:32:87:ff:8f:
db:24:c9:5b:b3:12:ae:36:ad:0e:49:00:6b:fc:7c:02:9c:c5:
4c:10:4d:cb:fb:32:5a:6d:b1:fc:ac:99:f1:ca:18:e2:67:c9:
b5:a0:de:ab
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUeN+9PXc4SWWwC3FofyET/S7565cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDIxOTA0MTkwNVoX
DTI1MDIxNzA0MjQwNVowMzExMC8GA1UEAxMoNURGOUEwOTgyNTczMEJGNzlBNDMz
RTA5OTgzMzZBRkNBQkVGMTk3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPOtLmMpIixy5IUjTZrYnD+r0d/os/TanWAfNtkUJnCRYJpCyiW6ajqPo9dQ
bHhFfgMmOidy0Jlfz0yOIVSMwpsZAFaA9uwIWb7Afho8mItZ9IHIzw/fql4fy6o2
Ytyte7s3lrlVkfGm173bS6t12j6fE5gecbC9DouQFAI/sakAqHdBi6F4bpH3rsXc
HzuXHiXJJ3fRWRdzOcSC21kO3rZaAL0gWsPfz5aSuqQCAINlA1ZaaoK2xG+TeRik
bUpvu+0YFz6HvMk0tbcHPw3SCDrrfpUOc3cyW7hiTvr3nJRWpcmDGSNLkTIGkj0V
FgHo+37EtOOPfYGMEctozN3XBxcCAwEAAaOCAfYwggHyMB0GA1UdDgQWBBRd+aCY
JXML95pDPgmYM2r8q+8ZeTAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggrBgEFBQcwC4ZecnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS8zMTM1MzcyZTMx
MzUyZTMyMzEzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
nQ/WMA0GCSqGSIb3DQEBCwUAA4IBAQCRaFcuofmxCNOb/lCxVMqdSW0TurD0lauW
8NleYPaoj8b9s8S1QENUZ48GNA9Nh1P3TcNsfzGVVolElbWjeYISl4n7vT8jdYcr
ui1jnSOHPCwDQ/EVjf2hg+ZfBSfHMpfjH6XkooHljY6GjSeQB75mcgwIcaudIzoF
gMnvp9g/N5tMiQN3EVwJKL8H0YDHg+yjdxh9Z4kbe1D059VWnheuiaUlE7ntYbqo
MDe9QgWJ/u5/5ILyueyO7N48jtSraZoG0u2pVMfjLc8bhwOLHHIr/3MZ7jKH/4/b
JMlbsxKuNq0OSQBr/HwCnMVMEE3L+zJabbH8rJnxyhjiZ8m1oN6r
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org