Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3139312e3139322e302f32332d3234203d3e20313533313535.roa
File: 3136302e3139312e3139322e302f32332d3234203d3e20313533313535.roa (raw, json)
Hash identifier: KIfljNPDaZWDo18hE2t8gJP8PIeMqO3Ie4Sm5dBvw5s=
Subject key identifier: 29:CA:36:5C:E3:89:66:80:EA:D4:C6:23:17:85:91:AE:BD:80:BE:EA
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 7E3648F245B89A66A0E0DFF574CEAEEB160E3CE2
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3139312e3139322e302f32332d3234203d3e20313533313535.roa
Signing time: Tue 31 Dec 2024 01:42:20 +0000
ROA not before: Tue 31 Dec 2024 01:37:20 +0000
ROA not after: Tue 30 Dec 2025 01:42:20 +0000
asID: 153155
IP address blocks: 160.191.192.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 09:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:36:48:f2:45:b8:9a:66:a0:e0:df:f5:74:ce:ae:eb:16:0e:3c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 31 01:37:20 2024 GMT
Not After : Dec 30 01:42:20 2025 GMT
Subject: CN=29CA365CE3896680EAD4C623178591AEBD80BEEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:1b:cc:83:2f:ac:0d:d6:f4:f8:29:42:43:
eb:16:88:72:af:92:55:43:95:73:08:75:a6:df:9b:
61:af:28:96:c9:df:00:46:fb:3f:3a:91:6f:87:75:
1f:7b:00:c0:d8:02:68:c8:34:09:a8:1c:72:87:72:
f3:b8:f0:bc:c2:6b:91:48:2a:e3:25:61:ac:9d:05:
8b:40:78:bb:49:73:83:d2:2f:81:e7:e0:c0:43:25:
2f:b1:fc:df:bf:17:f6:18:56:89:36:0a:5e:52:d7:
38:d5:c6:e2:54:ba:f0:07:48:67:11:2e:5c:9f:56:
a4:9e:11:25:ca:b4:7f:15:23:7c:08:a7:ff:5f:6d:
bd:ce:20:94:ce:25:ef:43:be:a8:79:65:62:5e:ee:
4b:f2:f2:02:08:a0:66:bb:91:1e:c7:c9:20:74:0c:
98:7a:7f:fc:42:74:66:a2:67:9f:fe:15:25:08:29:
b0:a1:ff:61:e5:70:a9:78:51:2f:8c:41:b4:39:38:
2d:d1:38:a9:91:27:ce:5e:e2:a0:bf:6a:8c:70:05:
e6:8e:cb:a1:cc:cb:3d:be:a3:69:b3:55:92:8e:05:
b0:76:2e:b9:1f:c5:16:95:51:60:a3:b9:81:76:4b:
2b:1b:7e:5c:fb:ca:a1:f4:e9:7e:0f:5d:13:e2:bd:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:36:5C:E3:89:66:80:EA:D4:C6:23:17:85:91:AE:BD:80:BE:EA
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3139312e3139322e302f32332d3234203d3e20313533313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.192.0/23
Signature Algorithm: sha256WithRSAEncryption
94:82:06:c8:90:3e:bb:f2:e7:64:a7:b7:c2:1b:89:38:aa:c9:
1a:bb:7a:21:07:be:75:85:05:d1:ba:2a:16:65:98:80:ad:39:
d6:70:05:01:db:43:98:2c:c3:72:bf:64:71:6e:3b:24:a6:df:
5c:45:85:a0:42:c7:25:84:ab:2a:39:4f:23:1c:ef:ff:00:fd:
bf:d1:0b:94:00:ca:29:df:5d:6e:2b:15:9b:6b:d2:4b:5e:9a:
a3:17:94:c4:6c:88:62:45:fe:e3:47:9c:f9:4c:cb:b7:43:53:
1f:36:e1:ac:e1:e0:11:e0:cb:0d:74:cf:a1:3a:eb:6f:6f:c5:
07:db:a8:6c:54:00:ec:33:56:f7:f0:02:28:38:e0:04:45:74:
28:02:96:69:aa:b5:21:16:76:a4:83:30:66:0a:79:3a:9a:b5:
a2:04:88:43:46:9f:f9:76:1e:c5:58:81:31:e5:24:5d:77:7c:
56:fc:94:f2:b6:de:d0:ba:0b:2b:c7:bb:56:44:c1:3e:8a:f6:
2c:30:ff:9b:63:ce:58:72:a4:be:32:7c:8f:10:34:cd:0a:2d:
00:aa:63:80:50:16:2f:4c:bf:16:bd:28:74:a4:37:a9:6b:00:
f7:03:e7:aa:98:8d:99:e0:75:27:b8:a6:70:36:37:6a:4b:9a:
56:c9:1a:54
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUfjZI8kW4mmag4N/1dM6u6xYOPOIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIzMTAxMzcyMFoX
DTI1MTIzMDAxNDIyMFowMzExMC8GA1UEAxMoMjlDQTM2NUNFMzg5NjY4MEVBRDRD
NjIzMTc4NTkxQUVCRDgwQkVFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ6XG8yDL6wN1vT4KUJD6xaIcq+SVUOVcwh1pt+bYa8olsnfAEb7PzqRb4d1
H3sAwNgCaMg0Cagccody87jwvMJrkUgq4yVhrJ0Fi0B4u0lzg9IvgefgwEMlL7H8
378X9hhWiTYKXlLXONXG4lS68AdIZxEuXJ9WpJ4RJcq0fxUjfAin/19tvc4glM4l
70O+qHllYl7uS/LyAgigZruRHsfJIHQMmHp//EJ0ZqJnn/4VJQgpsKH/YeVwqXhR
L4xBtDk4LdE4qZEnzl7ioL9qjHAF5o7LoczLPb6jabNVko4FsHYuuR/FFpVRYKO5
gXZLKxt+XPvKofTpfg9dE+K9YK8CAwEAAaOCAgMwggH/MB0GA1UdDgQWBBQpyjZc
44lmgOrUxiMXhZGuvYC+6jAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNjMwMmUz
MTM5MzEyZTMxMzkzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzUz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaC/wDANBgkqhkiG9w0BAQsFAAOCAQEAlIIGyJA+u/LnZKe3
whuJOKrJGrt6IQe+dYUF0boqFmWYgK051nAFAdtDmCzDcr9kcW47JKbfXEWFoELH
JYSrKjlPIxzv/wD9v9ELlADKKd9dbisVm2vSS16aoxeUxGyIYkX+40ec+UzLt0NT
HzbhrOHgEeDLDXTPoTrrb2/FB9uobFQA7DNW9/ACKDjgBEV0KAKWaaq1IRZ2pIMw
Zgp5Opq1ogSIQ0af+XYexViBMeUkXXd8VvyU8rbe0LoLK8e7VkTBPor2LDD/m2PO
WHKkvjJ8jxA0zQotAKpjgFAWL0y/Fr0odKQ3qWsA9wPnqpiNmeB1J7imcDY3akua
VskaVA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:53:38 2025 by rpki-client