Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e38302e302f32342d3234203d3e20313532333834.roa
File: 3135372e31352e38302e302f32342d3234203d3e20313532333834.roa (raw, json)
Hash identifier: tSGp+hCnQcIb5sYsfoQhXu+ykpxvd4UDez5Hb8oE0as=
Subject key identifier: 88:2B:E0:7F:C7:53:E4:03:F8:BB:6B:B1:D4:84:3F:61:99:94:D6:77
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 355CB7C85D8622A29F07D69F0432384668FA897A
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e38302e302f32342d3234203d3e20313532333834.roa
Signing time: Fri 31 Jan 2025 09:00:00 +0000
ROA not before: Fri 31 Jan 2025 08:55:00 +0000
ROA not after: Fri 30 Jan 2026 09:00:00 +0000
asID: 152384
IP address blocks: 157.15.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 09:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5c:b7:c8:5d:86:22:a2:9f:07:d6:9f:04:32:38:46:68:fa:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Jan 31 08:55:00 2025 GMT
Not After : Jan 30 09:00:00 2026 GMT
Subject: CN=882BE07FC753E403F8BB6BB1D4843F619994D677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:70:b9:fc:4b:e1:40:ed:76:24:d1:97:22:
e0:9c:19:51:6d:17:3c:0a:e1:25:62:52:ac:f6:08:
b4:6a:c4:f1:ec:9a:ce:57:92:3e:eb:ee:6c:9c:a5:
ac:39:75:f3:dd:2f:00:44:24:ee:c7:3d:a0:59:1b:
73:3c:7d:29:f4:00:90:02:4e:63:ab:4b:7f:73:7f:
0d:a0:b0:c9:f4:97:9c:26:b0:5d:63:c2:63:86:7a:
ac:36:5f:71:15:5e:f8:e2:db:0c:9f:fb:05:1f:ea:
e6:b0:23:f9:7c:1a:ec:18:bf:f7:df:89:4a:76:c1:
6f:08:00:d0:5a:23:ce:d7:40:99:d7:42:69:f8:b2:
92:4f:16:b2:b0:84:2b:be:17:14:8c:de:56:19:5f:
5d:15:94:da:8a:10:37:fd:e3:4c:6e:74:ab:5b:49:
04:ae:91:19:8c:0e:52:e5:ad:1c:50:ff:2a:f1:06:
ca:9b:c7:11:aa:c2:49:8a:06:94:10:0f:8c:e9:81:
ec:07:eb:35:b6:3a:29:18:58:9d:19:b3:c3:a9:59:
e1:2b:9f:6a:75:6e:72:01:94:c4:cc:f6:e1:bc:42:
23:e1:28:f1:a1:93:f1:82:88:cb:86:8e:85:cf:94:
75:90:7a:db:21:2f:56:08:4b:ad:04:07:cb:b3:5b:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:E0:7F:C7:53:E4:03:F8:BB:6B:B1:D4:84:3F:61:99:94:D6:77
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3135372e31352e38302e302f32342d3234203d3e20313532333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.80.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e8:f6:34:9e:6f:33:05:bb:f3:b0:8f:e5:8a:14:1a:10:c4:
8c:9a:43:fa:ca:1c:1e:69:dd:d3:47:6e:7f:76:a8:71:0c:b2:
43:23:fe:6d:6e:ff:21:f6:1f:6f:b6:11:69:b1:d4:a8:5a:ec:
eb:6e:11:6c:72:f1:29:90:5e:63:35:4d:93:3a:35:82:b4:c3:
77:b7:43:ef:17:28:eb:39:9e:a6:98:59:76:56:ee:6f:e0:84:
ef:b8:58:f6:b3:92:87:8e:4b:db:fe:26:0b:b4:78:c0:25:a5:
6a:bd:50:6b:2d:a3:68:56:f8:e1:2e:53:c2:8d:74:58:82:37:
3f:d7:8a:f1:8a:86:36:30:15:9c:b3:eb:50:9d:4c:2f:e9:99:
ba:23:6f:e9:fe:c7:91:b3:7c:eb:25:8f:ff:ac:49:04:d4:cc:
c7:44:54:10:df:c3:38:af:a6:ac:fa:6c:ed:10:8e:09:2e:d0:
70:a1:1b:64:c9:98:b5:a5:a8:4d:7f:4c:8c:b1:7e:1b:0f:86:
db:2f:8d:c6:72:dd:dd:b1:2f:b9:19:b7:f8:ed:0f:30:d9:6b:
55:ce:32:2f:77:19:bd:27:e9:da:93:87:10:c0:a1:f5:9f:c9:
b4:a9:6a:33:a3:03:d9:9f:7d:32:0d:f4:84:c8:85:09:20:66:
04:56:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:11 2025 by rpki-client