Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32332d3233203d3e20313532383136.roa
File: 3136302e32322e33342e302f32332d3233203d3e20313532383136.roa (raw, json)
Hash identifier: zW/MBYpnop5QHibMdDU/sDzeaSr36mfX1WgKyLlS5V8=
Subject key identifier: C2:B6:7F:B2:72:50:CB:BC:CC:11:97:46:3D:72:9E:FD:11:6B:DC:C4
Certificate issuer: /CN=C6E5FF54770B28DB44FDD655765364797010697B
Certificate serial: 137F9C63F557DF9D2E073212DFBB7A08590442CF
Authority key identifier: C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32332d3233203d3e20313532383136.roa
Signing time: Wed 14 May 2025 22:56:47 +0000
ROA not before: Wed 14 May 2025 22:51:47 +0000
ROA not after: Wed 13 May 2026 22:56:47 +0000
asID: 152816
IP address blocks: 160.22.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 21 Jul 2025 21:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:7f:9c:63:f5:57:df:9d:2e:07:32:12:df:bb:7a:08:59:04:42:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E5FF54770B28DB44FDD655765364797010697B
Validity
Not Before: May 14 22:51:47 2025 GMT
Not After : May 13 22:56:47 2026 GMT
Subject: CN=C2B67FB27250CBBCCC1197463D729EFD116BDCC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:dc:dc:36:56:6b:dc:28:63:49:7f:a4:d8:
2c:83:b6:59:a5:a6:e0:0f:98:24:40:b4:cf:05:ee:
ec:92:33:64:ad:23:bc:5c:62:d8:b0:24:1c:17:19:
d7:78:32:82:14:67:2e:c1:92:e3:c6:89:b5:d8:48:
5c:c2:50:0a:25:8a:d5:54:2a:cd:9c:a7:72:98:ad:
80:11:56:8b:cb:05:92:b1:5d:44:9c:bb:60:72:8b:
27:d7:fa:1b:b6:14:e7:63:ba:9b:35:56:da:1b:98:
95:7a:17:7d:e0:c9:9b:b7:90:d4:98:c2:d7:c4:94:
11:7e:a2:c0:b0:9e:42:34:4e:1c:3c:76:42:52:5d:
cc:26:9b:fa:52:05:77:94:79:ca:65:0b:09:4b:fd:
35:96:e4:e0:6a:84:2d:69:dc:59:db:66:29:bc:a8:
bd:83:89:32:1c:02:29:e0:d2:9f:1d:13:18:ef:ec:
45:54:28:4c:78:17:aa:b5:8a:d1:d0:fb:d1:30:7a:
a0:3a:03:95:41:70:04:db:1d:4b:0f:2d:fb:79:1b:
c3:7f:04:18:87:5e:41:91:e6:ff:58:3e:a9:a4:f7:
df:a8:1d:7d:47:75:a4:b3:33:bc:87:0a:a9:fd:18:
1c:ee:00:aa:a6:1c:99:2c:25:87:28:c2:47:a6:a0:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:7F:B2:72:50:CB:BC:CC:11:97:46:3D:72:9E:FD:11:6B:DC:C4
X509v3 Authority Key Identifier:
keyid:C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32332d3233203d3e20313532383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.34.0/23
Signature Algorithm: sha256WithRSAEncryption
06:ca:d0:35:99:5a:ed:6e:b4:da:9b:2c:f5:f3:ba:17:3e:35:
39:c1:27:6b:75:4c:6a:9a:47:84:4f:57:6a:a4:f2:72:85:0b:
0f:8d:7c:bf:41:36:35:26:98:6e:2e:48:87:6a:9b:35:e3:de:
fa:40:a4:35:93:3e:23:a7:c9:2f:4b:02:ac:73:80:c8:92:e4:
38:f8:b1:9a:bb:55:83:98:18:ee:e9:93:57:5a:bc:1b:09:d9:
15:d3:fa:55:53:8f:c1:c1:e0:d2:77:62:83:de:d5:e0:94:aa:
f1:85:19:fc:07:fc:88:85:fe:fd:c4:e2:b8:ee:67:f9:6b:4f:
1d:5b:3d:4b:6f:61:79:0b:0b:f5:c6:cc:48:c5:9c:5f:69:10:
ed:8a:67:64:9e:73:ca:29:5b:d5:b3:cc:44:09:f7:da:9a:80:
92:ee:20:3b:f9:35:09:f1:04:2a:86:5c:e1:8e:99:c0:b3:6e:
51:63:05:18:01:2c:bc:37:4b:3d:df:2d:81:7a:95:fc:0d:1c:
a9:3d:5f:ed:ef:5e:e6:ab:ea:f9:61:69:17:54:cf:8f:e1:73:
ac:d8:79:74:53:4b:68:db:11:a8:ca:2e:8d:d1:ac:bc:2b:15:
cd:72:c4:62:e8:9f:a4:f2:23:1f:ee:94:7a:ab:8c:3d:4a:c5:
4b:c3:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:29:53 2025 by rpki-client