Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa
File: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (raw, json)
Hash identifier: Wj74HONm48vPptTyAc3IEMxC0T5ZsE9b7vUvFfSf5Zg=
Subject key identifier: 9E:29:60:DD:99:94:51:C0:33:27:DE:98:B3:26:46:2A:AC:C7:46:F1
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 7738F593F11561CF282419CFAF744C7CB9659C90
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa
Signing time: Mon 14 Oct 2024 02:51:30 +0000
ROA not before: Mon 14 Oct 2024 02:46:30 +0000
ROA not after: Mon 13 Oct 2025 02:51:30 +0000
asID: 153127
IP address blocks: 160.187.150.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 06:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:38:f5:93:f1:15:61:cf:28:24:19:cf:af:74:4c:7c:b9:65:9c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Oct 14 02:46:30 2024 GMT
Not After : Oct 13 02:51:30 2025 GMT
Subject: CN=9E2960DD999451C03327DE98B326462AACC746F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:da:61:ac:94:b7:96:e7:5e:b2:3a:43:9e:07:
da:52:1a:77:81:0e:4e:b3:f9:09:e6:78:d7:de:1d:
af:5d:fe:07:96:e2:6f:d3:b6:c3:eb:ee:e8:38:aa:
33:2b:f4:59:c2:a7:ad:2e:f9:e4:64:e5:da:91:4f:
02:ff:f7:6e:93:84:58:95:38:65:58:96:d3:da:ad:
89:7b:ed:1a:bd:e2:ca:3e:22:e6:c4:c8:7e:04:12:
5a:f2:f4:a4:4c:80:28:ff:dc:e8:8b:bc:7d:bf:ab:
6b:49:2b:75:9d:74:72:08:5c:93:41:8d:08:c9:98:
38:09:43:ce:4b:21:c4:bf:01:1d:14:7f:00:df:6a:
74:6c:69:00:33:a9:a4:e0:f3:df:50:26:54:53:1a:
45:46:b3:f5:68:9e:ae:09:a5:82:2c:bc:43:49:81:
b0:8e:5e:b5:22:cb:a5:64:50:9a:da:07:2e:15:c0:
66:4a:5f:97:62:72:0c:d8:db:ad:47:4f:88:c2:67:
f3:b6:cf:5e:64:75:76:8b:1e:46:41:19:4f:07:72:
6e:92:64:8b:37:ba:60:de:e2:c2:dc:0b:b6:ed:0d:
56:a2:0d:b5:ae:91:b1:a1:9f:d7:bd:73:e2:d3:a7:
9a:6c:07:4d:b3:81:fc:4d:d7:9d:c6:35:9a:9c:64:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:29:60:DD:99:94:51:C0:33:27:DE:98:B3:26:46:2A:AC:C7:46:F1
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.187.150.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:b1:1c:cd:85:12:9a:14:8d:79:27:71:24:e5:17:21:4b:da:
b7:28:3c:91:02:e4:8b:55:99:8a:69:e6:17:be:2b:c6:3e:27:
7e:8b:d4:70:63:d8:ea:2f:1b:37:28:36:a4:3b:97:c2:2d:c4:
88:b7:b2:d4:c3:0d:3f:9f:1f:bb:7d:70:74:b7:7d:20:5c:a7:
da:41:0b:7a:e1:dd:51:77:fc:e9:60:c4:50:06:92:cf:fd:5e:
b3:91:3e:ae:fc:99:dd:d6:d2:0f:19:af:ec:bc:76:81:71:3f:
e4:c2:3b:82:3e:f5:7f:07:33:f2:8b:96:4d:06:eb:36:b4:2b:
a7:97:f8:9b:40:e1:cb:61:7a:1f:8f:75:1b:e7:5f:84:c3:21:
59:29:81:5d:3d:9d:4e:6e:19:11:69:b2:3f:bc:14:41:e9:24:
ad:f7:5b:77:d6:f8:6a:f1:84:2e:62:6f:7b:68:44:a8:f9:01:
21:ec:cf:68:06:6f:1b:3e:e6:ef:f7:0b:25:02:0d:96:d6:f0:
dd:63:c6:0d:c8:c2:b7:b9:36:98:ae:1c:b4:4e:98:e6:ba:21:
a8:40:0b:2d:10:44:6d:af:7c:aa:52:a5:45:f6:8b:6e:c0:3b:
54:9f:4d:c5:ec:96:f1:fb:5e:59:b0:cb:10:2d:55:29:1b:5c:
01:77:34:92
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUdzj1k/EVYc8oJBnPr3RMfLllnJAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTAxNDAyNDYzMFoX
DTI1MTAxMzAyNTEzMFowMzExMC8GA1UEAxMoOUUyOTYwREQ5OTk0NTFDMDMzMjdE
RTk4QjMyNjQ2MkFBQ0M3NDZGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANnaYayUt5bnXrI6Q54H2lIad4EOTrP5CeZ4194dr13+B5bib9O2w+vu6Diq
Myv0WcKnrS755GTl2pFPAv/3bpOEWJU4ZViW09qtiXvtGr3iyj4i5sTIfgQSWvL0
pEyAKP/c6Iu8fb+ra0krdZ10cghck0GNCMmYOAlDzkshxL8BHRR/AN9qdGxpADOp
pODz31AmVFMaRUaz9Wiergmlgiy8Q0mBsI5etSLLpWRQmtoHLhXAZkpfl2JyDNjb
rUdPiMJn87bPXmR1doseRkEZTwdybpJkize6YN7iwtwLtu0NVqINta6RsaGf171z
4tOnmmwHTbOB/E3XncY1mpxk5J0CAwEAAaOCAgMwggH/MB0GA1UdDgQWBBSeKWDd
mZRRwDMn3pizJkYqrMdG8TAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNjMwMmUz
MTM4MzcyZTMxMzUzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzIz
Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaC7ljANBgkqhkiG9w0BAQsFAAOCAQEACrEczYUSmhSNeSdx
JOUXIUvatyg8kQLki1WZimnmF74rxj4nfovUcGPY6i8bNyg2pDuXwi3EiLey1MMN
P58fu31wdLd9IFyn2kELeuHdUXf86WDEUAaSz/1es5E+rvyZ3dbSDxmv7Lx2gXE/
5MI7gj71fwcz8ouWTQbrNrQrp5f4m0Dhy2F6H491G+dfhMMhWSmBXT2dTm4ZEWmy
P7wUQekkrfdbd9b4avGELmJve2hEqPkBIezPaAZvGz7m7/cLJQINltbw3WPGDcjC
t7k2mK4ctE6Y5rohqEALLRBEba98qlKlRfaLbsA7VJ9NxeyW8fteWbDLEC1VKRtc
AXc0kg==
-----END CERTIFICATE-----
Generated at Tue Oct 15 07:36:27 2024 by rpki-client on console-ams.rpki-client.org