Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa
File: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (raw, json)
Hash identifier: QlQR5VzVJyVVxllbBEJ3FJ87Qkwo10PMJyrIkQwtHF4=
Subject key identifier: 4B:4E:5F:48:47:E4:12:2B:30:E0:6B:AD:CE:04:30:13:E9:C9:3B:A6
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 5DB010C1B29632219523C9DC61B489D37D5068B4
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa
Signing time: Tue 03 Dec 2024 08:20:20 +0000
ROA not before: Tue 03 Dec 2024 08:15:20 +0000
ROA not after: Tue 02 Dec 2025 08:20:20 +0000
asID: 153149
IP address blocks: 160.191.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 09:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:b0:10:c1:b2:96:32:21:95:23:c9:dc:61:b4:89:d3:7d:50:68:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 3 08:15:20 2024 GMT
Not After : Dec 2 08:20:20 2025 GMT
Subject: CN=4B4E5F4847E4122B30E06BADCE043013E9C93BA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:31:af:5d:a4:f5:61:97:b4:8e:db:b1:20:
a1:8f:c9:90:c7:69:27:89:f7:e5:f7:c2:47:37:af:
c2:84:1e:d2:b7:44:a9:d7:62:70:ce:83:0b:90:57:
52:ca:1e:61:4b:54:72:be:f9:55:38:4b:33:b2:7d:
2c:23:40:cc:f1:3a:34:e8:11:bb:29:1f:e2:d0:a3:
42:7f:b9:7c:5a:11:47:49:c4:dd:ac:41:60:c8:10:
b9:87:99:fa:b0:59:75:10:9c:bb:b7:df:f9:10:fb:
26:17:3e:7d:18:d3:e0:95:ed:21:6a:40:3d:ea:49:
a5:40:6b:b6:c9:7c:44:ec:c8:c8:77:e2:90:44:4d:
22:49:f0:d5:13:90:94:99:2d:33:8a:10:3b:fb:9c:
fe:e4:6c:d0:8f:8c:aa:51:14:2a:c7:1e:28:e0:d6:
e9:ca:5a:be:e4:4d:42:b3:97:35:fe:47:7d:ef:06:
a7:5d:ba:9e:ba:0a:e5:2b:c4:45:ac:6c:52:ad:27:
a0:72:03:be:d6:eb:68:a2:7c:eb:7d:bd:ea:b3:21:
f8:5d:7c:cc:a2:58:f0:cd:6e:7e:13:30:9d:b6:b3:
c4:81:bc:56:0d:41:e5:62:8c:e6:a5:34:fc:9e:ed:
76:ad:a8:34:c4:55:b9:ae:5d:05:6f:67:19:aa:f1:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4E:5F:48:47:E4:12:2B:30:E0:6B:AD:CE:04:30:13:E9:C9:3B:A6
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.235.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4f:d1:cb:76:53:43:33:2e:35:d4:1d:53:de:8d:03:20:51:
e7:fd:ae:be:79:14:2b:0b:b8:9d:30:1e:26:59:4e:b9:25:e0:
04:2f:0d:8d:69:32:21:fa:00:44:84:58:18:9b:90:02:67:29:
8d:d7:f0:db:d3:3a:f8:f4:a9:88:d7:b5:13:37:3f:b9:ca:21:
44:a6:cb:17:24:68:87:d2:6a:c2:b6:80:b8:dc:4d:cf:f2:3e:
e4:9c:5e:37:0a:4b:f9:25:f5:e1:4e:ca:98:bd:a3:b6:e6:08:
73:a3:16:90:21:69:6d:ba:80:34:f5:45:3e:cb:da:16:c8:10:
25:68:17:97:fb:70:59:3b:df:10:fd:4f:63:20:55:c1:f5:78:
74:fb:95:6c:42:e4:76:c7:a7:83:61:ec:44:54:0a:23:72:4d:
f2:2b:86:7b:41:bf:ca:7a:9b:c4:8d:76:f1:1e:8e:9d:c3:f5:
93:86:b2:f8:72:b2:a9:57:85:da:44:a8:59:14:ae:05:f6:9e:
f3:6c:a7:d2:ef:23:0d:1c:6e:fb:e0:c9:ac:27:f4:91:8c:22:
5e:4c:59:86:52:ec:01:2c:7d:11:68:b7:92:33:ec:fc:6d:ef:
cc:b0:d6:45:5a:8b:54:94:2f:4c:ac:56:27:e9:6c:8f:13:f6:
88:20:c6:3b
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUXbAQwbKWMiGVI8ncYbSJ031QaLQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2
NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MTIwMzA4MTUyMFoX
DTI1MTIwMjA4MjAyMFowMzExMC8GA1UEAxMoNEI0RTVGNDg0N0U0MTIyQjMwRTA2
QkFEQ0UwNDMwMTNFOUM5M0JBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKwaMa9dpPVhl7SO27EgoY/JkMdpJ4n35ffCRzevwoQe0rdEqddicM6DC5BX
UsoeYUtUcr75VThLM7J9LCNAzPE6NOgRuykf4tCjQn+5fFoRR0nE3axBYMgQuYeZ
+rBZdRCcu7ff+RD7Jhc+fRjT4JXtIWpAPepJpUBrtsl8ROzIyHfikERNIknw1ROQ
lJktM4oQO/uc/uRs0I+MqlEUKsceKODW6cpavuRNQrOXNf5Hfe8Gp126nroK5SvE
RaxsUq0noHIDvtbraKJ863296rMh+F18zKJY8M1ufhMwnbazxIG8Vg1B5WKM5qU0
/J7tdq2oNMRVua5dBW9nGarx9zcCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBRLTl9I
R+QSKzDga63OBDAT6ck7pjAfBgNVHSMEGDAWgBRg+L6cFmJcQksmnuBsZKg7q4UG
1DAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMS82MEY4QkU5QzE2NjI1QzQy
NEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0LmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CM0Ey
NEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9ZUGktbkJaaVhFSkxKcDdnYkdT
b082dUZCdFEuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzEvMzEzNjMwMmUz
MTM5MzEyZTMyMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzQz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKC/6zANBgkqhkiG9w0BAQsFAAOCAQEAcU/Ry3ZTQzMuNdQd
U96NAyBR5/2uvnkUKwu4nTAeJllOuSXgBC8NjWkyIfoARIRYGJuQAmcpjdfw29M6
+PSpiNe1Ezc/ucohRKbLFyRoh9JqwraAuNxNz/I+5JxeNwpL+SX14U7KmL2jtuYI
c6MWkCFpbbqANPVFPsvaFsgQJWgXl/twWTvfEP1PYyBVwfV4dPuVbELkdseng2Hs
RFQKI3JN8iuGe0G/ynqbxI128R6OncP1k4ay+HKyqVeF2kSoWRSuBfae82yn0u8j
DRxu++DJrCf0kYwiXkxZhlLsASx9EWi3kjPs/G3vzLDWRVqLVJQvTKxWJ+lsjxP2
iCDGOw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:57 2025 by rpki-client