Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32352e3137362e302f32332d3234203d3e20313533303734.roa
File: 3136302e32352e3137362e302f32332d3234203d3e20313533303734.roa (raw, json)
Hash identifier: C1B1NH7DOTOGlRAiuTeiIOVA96HlielraK8U4jeUbqk=
Subject key identifier: 13:B1:05:51:97:0E:2E:F3:6C:D8:82:86:A8:2C:14:F8:73:DF:F1:0F
Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial: 1B11A45B324BCADC86F5722F0E472C858DBA3E8E
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32352e3137362e302f32332d3234203d3e20313533303734.roa
Signing time: Wed 18 Dec 2024 01:41:07 +0000
ROA not before: Wed 18 Dec 2024 01:36:07 +0000
ROA not after: Wed 17 Dec 2025 01:41:07 +0000
asID: 153074
IP address blocks: 160.25.176.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 09:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:11:a4:5b:32:4b:ca:dc:86:f5:72:2f:0e:47:2c:85:8d:ba:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Dec 18 01:36:07 2024 GMT
Not After : Dec 17 01:41:07 2025 GMT
Subject: CN=13B10551970E2EF36CD88286A82C14F873DFF10F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:38:c4:5c:7c:02:cc:d8:e9:f5:84:ff:8e:
be:37:e6:9e:1c:5c:8d:6d:48:41:c0:39:87:ab:4b:
05:7c:9d:e7:1b:82:57:76:4d:32:4e:f3:c5:9a:9a:
cb:4d:47:c3:f7:92:03:d4:ad:45:89:c3:6c:1f:e8:
26:8b:91:87:9c:95:f2:b4:a7:cb:65:58:bf:d2:99:
d1:ae:60:5f:bd:16:8f:5c:7a:c3:5c:7d:ea:40:30:
46:73:d1:9f:65:e3:39:b5:ed:72:f0:a9:45:9f:fe:
89:b5:fa:3d:42:e8:36:d5:2e:78:07:f2:79:c3:fe:
dc:1a:3a:25:93:0a:df:6d:b1:cf:0a:90:6c:79:2f:
3b:00:f7:74:c8:bb:47:33:6e:57:d1:51:50:d3:77:
f1:3d:78:02:1a:86:04:6c:0d:b3:70:ab:37:6b:c6:
2d:b5:9a:7d:c5:e1:2d:e6:44:5b:c8:db:07:ba:73:
58:ed:eb:2f:54:9a:bd:a2:57:4c:7e:59:de:84:6f:
b4:1d:60:44:49:1d:15:04:ca:0e:06:f6:88:df:56:
e4:77:21:b6:67:3a:4d:93:be:0d:99:45:e7:98:de:
03:bd:28:79:3a:ec:10:81:59:66:b8:f0:29:65:17:
c7:db:c3:aa:1b:30:75:14:37:f3:35:81:a0:17:c0:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B1:05:51:97:0E:2E:F3:6C:D8:82:86:A8:2C:14:F8:73:DF:F1:0F
X509v3 Authority Key Identifier:
keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3136302e32352e3137362e302f32332d3234203d3e20313533303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.176.0/23
Signature Algorithm: sha256WithRSAEncryption
92:e8:53:51:33:59:23:44:ea:d2:cb:d8:83:3d:69:5c:ee:d6:
b8:8e:53:98:c7:40:a4:1e:52:e5:c3:c1:1a:9c:ca:90:02:fe:
8f:b3:09:11:5c:db:88:6f:66:fa:09:fb:93:bc:68:4f:75:37:
82:15:d8:1a:f1:4e:93:ae:7c:4a:8d:39:2d:b7:09:d4:c7:bf:
f7:a1:d1:58:dc:5e:a4:2e:dd:22:c7:36:3d:be:02:cb:01:5b:
02:43:50:b5:6d:69:86:02:3b:e8:17:85:5f:ab:1e:e9:06:82:
ba:53:a6:38:fc:63:e7:0d:d8:c8:ba:16:51:cd:d2:49:46:18:
5a:55:61:6e:95:d0:f4:98:15:bd:1e:c4:64:09:b5:9a:13:98:
d7:1d:45:c1:69:b5:44:1a:28:be:38:9a:8d:b2:39:70:1f:24:
f2:ce:1c:25:79:20:3b:8f:1c:56:89:4a:b5:93:49:f9:66:8d:
33:b6:6a:f4:18:31:3e:8a:29:0a:df:e0:08:68:ac:8d:66:e1:
52:2d:aa:4f:fc:99:41:77:39:da:42:49:f2:e1:73:ae:2e:50:
cc:53:a6:7b:60:93:6b:6f:bb:4a:61:18:0c:48:5c:28:88:81:
c3:a8:3f:50:21:a5:03:03:68:29:8d:e5:6c:5c:4f:63:8c:68:
5a:53:cc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:56:04 2025 by rpki-client