Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32342d3234203d3e20313532383136.roa
File: 3136302e32322e33342e302f32342d3234203d3e20313532383136.roa (raw, json)
Hash identifier: 3Yf8TVuEWyc8VY+//4fGztWvnyRlIDnb/ntpi1d4n8o=
Subject key identifier: 53:A5:36:DD:88:94:CC:3C:6B:D1:E9:54:3D:27:2A:4B:C0:10:6C:B6
Certificate issuer: /CN=C6E5FF54770B28DB44FDD655765364797010697B
Certificate serial: 7BCCCF318F0BE8A064FEBE7A21FB99E8FF652625
Authority key identifier: C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32342d3234203d3e20313532383136.roa
Signing time: Mon 19 May 2025 01:53:12 +0000
ROA not before: Mon 19 May 2025 01:48:12 +0000
ROA not after: Mon 18 May 2026 01:53:12 +0000
asID: 152816
IP address blocks: 160.22.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 21:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:cc:cf:31:8f:0b:e8:a0:64:fe:be:7a:21:fb:99:e8:ff:65:26:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E5FF54770B28DB44FDD655765364797010697B
Validity
Not Before: May 19 01:48:12 2025 GMT
Not After : May 18 01:53:12 2026 GMT
Subject: CN=53A536DD8894CC3C6BD1E9543D272A4BC0106CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:71:a7:22:ca:82:26:10:1f:bd:65:c4:96:
18:11:be:10:da:4d:44:b1:93:48:a4:0c:e1:7b:65:
03:12:46:d4:b6:91:82:32:7a:9c:85:bf:04:9c:6c:
77:7f:c2:15:0f:f2:0a:58:7c:cb:52:29:99:ca:64:
6a:48:3b:a5:44:e2:bb:68:f6:42:70:52:56:37:c9:
3f:84:8c:cb:48:30:8a:be:8e:ab:70:15:6b:d8:5d:
95:a8:ed:ac:fb:fc:15:2b:27:03:3e:cc:ea:31:bc:
ce:29:14:b0:e1:14:fa:51:44:fa:52:c8:f9:a7:9b:
97:f8:6c:da:c8:ca:db:00:e0:c1:2d:25:9d:0e:1f:
8d:e3:d8:09:cb:aa:18:bb:2e:57:03:da:cc:09:97:
cf:cd:cb:64:da:b0:c2:62:d9:d7:43:e0:e0:a6:7a:
d2:27:2d:e4:00:f2:e1:53:bd:7c:2a:9f:4f:f1:6d:
76:c1:dc:a8:1a:ab:c9:39:e2:3d:46:40:c2:4e:47:
08:32:ce:bf:85:77:b0:a3:fe:a7:89:85:30:88:d1:
af:00:9a:b8:41:d7:9d:56:84:cd:e2:c4:6c:4c:d9:
70:a3:7e:55:ab:ba:cc:84:87:81:bd:4e:a3:8d:95:
7b:45:bd:45:9a:a3:3e:40:63:ff:38:6f:59:02:1b:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A5:36:DD:88:94:CC:3C:6B:D1:E9:54:3D:27:2A:4B:C0:10:6C:B6
X509v3 Authority Key Identifier:
keyid:C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32342d3234203d3e20313532383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.34.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:52:f1:b3:f5:f5:b3:2b:7e:c1:9c:9d:c5:68:e5:39:54:d1:
03:2e:64:22:b3:e8:6c:4d:e1:90:7e:54:87:c8:1a:c9:36:78:
0d:80:de:78:08:89:9f:fd:0c:3c:5f:a6:e4:26:96:aa:0d:5b:
48:7e:14:ab:78:03:fb:fe:a2:a5:f8:e9:18:60:ec:34:92:01:
ca:37:0b:a1:0e:bc:18:aa:55:fa:1f:dc:29:cb:2e:77:9f:7e:
92:20:83:b0:98:1a:f5:2a:cd:cd:1c:14:db:95:4b:0b:2a:83:
84:3b:77:c3:0c:1f:cd:80:34:db:41:22:8a:56:b1:9e:13:46:
eb:a9:a7:bd:02:72:a9:ae:74:87:66:17:46:bd:67:41:e8:ea:
45:bc:06:8c:56:35:78:6a:08:23:14:a4:b7:a4:7b:52:41:9f:
30:87:f7:72:d5:04:9f:96:55:12:ed:48:98:47:a6:25:93:11:
2b:52:e4:0a:4a:eb:56:1f:d8:b0:6c:8e:b6:10:07:a3:01:8a:
b4:55:d3:c4:df:60:8c:b5:26:c8:d6:db:7e:ea:08:00:7c:b2:
35:a7:ef:a6:be:d9:8c:3b:5b:a6:96:51:58:a3:aa:b0:02:d9:
e6:31:3d:f2:ad:27:dd:f0:8b:e7:ea:f7:78:3a:e2:f7:2e:02:
07:ef:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:29:53 2025 by rpki-client