Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32322e36382e302f32332d3234203d3e20313338303737.roa
File: 3136302e32322e36382e302f32332d3234203d3e20313338303737.roa (raw, json)
Hash identifier: LmSYvnF6XsiaPL9n+cTS7dEWdLJoFSVQdpxrqdLB30Y=
Subject key identifier: 8B:A7:2F:9C:0E:94:35:F9:6B:A3:05:39:1D:3A:62:22:AE:DD:A0:07
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 42437884BFF9319C843FD0F897AA6E8245B11A32
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32322e36382e302f32332d3234203d3e20313338303737.roa
Signing time: Wed 05 Jun 2024 12:58:41 +0000
ROA not before: Wed 05 Jun 2024 12:53:41 +0000
ROA not after: Wed 04 Jun 2025 12:58:41 +0000
asID: 138077
IP address blocks: 160.22.68.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 05:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:43:78:84:bf:f9:31:9c:84:3f:d0:f8:97:aa:6e:82:45:b1:1a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Validity
Not Before: Jun 5 12:53:41 2024 GMT
Not After : Jun 4 12:58:41 2025 GMT
Subject: CN=8BA72F9C0E9435F96BA305391D3A6222AEDDA007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:26:40:d5:2b:b7:db:d1:26:c5:c1:b9:29:52:
3f:3c:e4:6a:92:48:f1:7a:0f:48:7d:0a:56:33:2f:
c7:81:3c:88:18:e4:fc:e9:22:32:b9:e6:df:9d:4a:
13:c7:f4:ff:33:38:c6:18:50:57:11:ce:fd:d3:14:
a2:e2:38:57:0a:a4:16:da:85:8c:1d:13:cd:5a:6f:
28:01:82:6d:57:78:51:b3:d6:16:10:bc:2b:1c:1d:
0a:2f:89:4e:6b:b9:af:8d:92:7a:a7:b6:e9:53:38:
54:bc:5e:30:04:af:d0:a5:ec:6b:cc:d2:d6:91:ec:
6c:e3:ce:e6:da:ee:49:07:18:8c:cf:5f:bf:43:d8:
ec:ab:73:7e:7f:c4:3f:cf:7c:5a:d7:20:f1:fc:ce:
41:43:12:1d:ed:e8:28:42:da:6c:ac:ab:3a:3a:78:
2b:91:0b:b7:09:45:7b:cc:9e:ad:fb:79:30:6e:5f:
a8:0a:31:42:68:2c:53:b8:76:1f:b2:e9:ec:9d:8a:
4b:3c:7d:19:cc:a0:a1:a8:e6:98:ba:91:8f:5e:14:
0e:b7:e7:c0:f0:c3:5b:a7:b9:23:f0:b5:6c:de:f6:
7e:be:19:1e:86:83:8d:e6:34:21:7d:30:71:3e:05:
3f:1e:dd:ae:3d:b3:c4:6a:f6:e9:8d:2b:b1:d6:21:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A7:2F:9C:0E:94:35:F9:6B:A3:05:39:1D:3A:62:22:AE:DD:A0:07
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32322e36382e302f32332d3234203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.68.0/23
Signature Algorithm: sha256WithRSAEncryption
29:ec:97:36:c5:7c:04:d2:70:95:40:a7:cd:0a:b3:6d:69:88:
04:f5:13:61:24:2f:60:1f:8d:43:7e:cb:dd:46:53:71:8a:bd:
e0:1b:cb:ab:01:57:5f:5f:26:c4:d4:25:3f:f6:59:5e:6f:bd:
f6:30:06:70:3e:3f:47:fa:91:0d:80:8e:23:4b:d1:c0:99:ec:
06:a6:c6:e6:bb:22:4e:18:37:de:e8:77:8c:38:00:0b:00:33:
44:05:b2:0a:18:00:4d:20:50:15:e6:50:c0:80:1d:41:a2:73:
a7:30:bb:74:bd:35:7a:97:73:78:b9:2e:c7:60:80:a4:14:70:
02:68:dd:6a:ff:e6:0b:c1:f3:a0:cd:45:40:3d:16:6e:f5:6d:
bf:68:52:0f:0f:a1:b1:d9:d3:95:27:27:d7:f4:8f:c0:42:3d:
93:08:0d:9c:5d:6c:35:10:f7:b8:be:44:4e:85:35:d8:28:40:
74:46:3d:92:5a:36:92:44:10:b2:3a:e6:2a:39:a9:f6:a4:70:
b9:3b:a9:33:3b:35:d9:57:0b:79:72:7f:cb:7b:d9:f6:7e:3d:
7a:4d:85:d1:f0:f1:37:a6:00:74:fa:3d:80:02:9d:9f:81:8b:
55:3f:85:93:a8:fe:8a:b5:bb:de:46:cd:77:9b:5e:d6:a3:f7:
1f:e0:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org