Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/3137352e3138342e3234382e302f32322d3234203d3e20313439393436.roa
File: 3137352e3138342e3234382e302f32322d3234203d3e20313439393436.roa (raw, json)
Hash identifier: zLvaMkYODyb4ATjMO+1SmoKMwoYhvNXIi9gMl8D6k6g=
Subject key identifier: 64:A4:C5:3C:68:30:7D:FD:85:4E:BB:66:EA:94:6F:D0:E5:91:D5:AE
Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71
Certificate serial: 6AA0503FC0B8A18C84F469379978BAA80B44BE54
Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/3137352e3138342e3234382e302f32322d3234203d3e20313439393436.roa
Signing time: Tue 11 Mar 2025 08:22:25 +0000
ROA not before: Tue 11 Mar 2025 08:17:25 +0000
ROA not after: Tue 10 Mar 2026 08:22:25 +0000
asID: 149946
IP address blocks: 175.184.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 18:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a0:50:3f:c0:b8:a1:8c:84:f4:69:37:99:78:ba:a8:0b:44:be:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71
Validity
Not Before: Mar 11 08:17:25 2025 GMT
Not After : Mar 10 08:22:25 2026 GMT
Subject: CN=64A4C53C68307DFD854EBB66EA946FD0E591D5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:e9:40:0b:3f:c3:d3:b2:e3:c6:02:f4:69:
cf:4d:9f:98:09:c7:76:cd:c3:85:94:c9:df:22:e2:
11:c6:48:9f:43:a3:da:fd:85:13:56:28:78:92:4c:
ae:42:23:39:21:bb:45:2c:0b:28:62:29:85:2b:60:
7c:8d:8f:9a:30:20:05:6a:43:9a:61:ca:d3:b5:31:
52:43:f6:85:1e:7a:e1:7c:81:f9:77:f9:49:8c:21:
4b:8e:68:73:a6:7b:60:87:a1:29:75:18:b6:b9:a1:
e9:33:4f:49:86:dd:f2:59:85:9e:30:6c:fd:cb:d3:
e4:c7:90:b8:3d:6c:91:aa:84:7c:f1:9a:ce:36:0b:
39:7b:0a:a7:e3:38:fb:a5:92:43:ad:34:86:63:81:
d7:df:ea:5c:ae:97:36:7e:2a:dc:03:02:ee:09:e6:
cd:f6:21:d4:cc:ee:bc:b0:61:5f:a6:e7:31:25:f2:
99:79:15:88:83:43:ed:61:88:27:59:59:4b:6c:c9:
1e:61:65:58:84:c0:e5:38:56:ab:88:30:b1:ba:d6:
36:e1:ee:46:1f:12:ea:37:f4:15:43:6e:50:1b:a5:
27:8f:ee:1d:0f:de:68:08:3d:a2:02:20:58:e3:ba:
5e:78:7f:9c:47:fb:1c:cd:e9:7b:24:21:8a:a1:32:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A4:C5:3C:68:30:7D:FD:85:4E:BB:66:EA:94:6F:D0:E5:91:D5:AE
X509v3 Authority Key Identifier:
keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/3137352e3138342e3234382e302f32322d3234203d3e20313439393436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.184.248.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:21:02:33:84:f3:30:7f:13:4e:90:f3:9c:22:77:8e:32:a4:
78:6e:87:42:98:1e:51:5a:0f:c8:8a:b7:44:46:75:59:63:c0:
b4:40:8d:b4:7f:2c:1f:70:ef:83:2b:a7:a3:20:6c:fa:e7:78:
16:38:09:cf:b4:2a:6f:38:77:23:f7:53:74:96:1d:8c:fd:e9:
13:12:94:bd:71:ae:45:84:4e:1b:17:18:66:a8:bb:3d:d4:5e:
02:5d:d5:d0:39:da:92:1d:4e:23:be:89:85:43:7b:ce:9d:10:
ee:1c:f5:4c:ad:63:0f:74:f5:6b:dd:13:79:26:d1:36:df:25:
57:62:a4:e2:6b:76:00:9b:27:c6:ec:36:b4:ae:c7:d3:dd:d0:
d4:92:28:a1:68:3b:0a:3d:43:2a:59:0a:4a:8e:72:e7:21:be:
93:00:c5:b2:40:17:de:21:a4:f7:bb:d0:74:e7:8c:77:7e:3b:
50:e4:24:31:b4:38:d7:c0:7e:e0:a3:7f:ea:8b:d4:c4:c8:dc:
48:cf:62:e1:2d:f6:7d:3f:18:d5:a4:cd:9b:e1:8b:a0:2b:e3:
a5:c0:ba:2a:cd:d1:79:97:d0:68:f7:1c:9a:e7:e1:d8:26:c5:
29:cd:47:93:cf:76:17:e2:50:3c:d1:90:12:41:e1:1e:08:9f:
20:14:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:51:10 2025 by rpki-client