Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33352e302f32342d3234203d3e20313532383136.roa
File: 3136302e32322e33352e302f32342d3234203d3e20313532383136.roa (raw, json)
Hash identifier: EdDZjoHGZVpicYVKHh2dmwS8tgDGkJ/xwdvHGaCdFnM=
Subject key identifier: B5:D8:53:CD:60:4B:DE:77:C6:60:2D:A3:1E:5B:52:8B:D4:30:3F:7C
Certificate issuer: /CN=C6E5FF54770B28DB44FDD655765364797010697B
Certificate serial: 6826102E864BF2BC79B7D321A1653184D4C36C4A
Authority key identifier: C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33352e302f32342d3234203d3e20313532383136.roa
Signing time: Mon 19 May 2025 01:53:45 +0000
ROA not before: Mon 19 May 2025 01:48:45 +0000
ROA not after: Mon 18 May 2026 01:53:45 +0000
asID: 152816
IP address blocks: 160.22.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Jul 2025 21:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:26:10:2e:86:4b:f2:bc:79:b7:d3:21:a1:65:31:84:d4:c3:6c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C6E5FF54770B28DB44FDD655765364797010697B
Validity
Not Before: May 19 01:48:45 2025 GMT
Not After : May 18 01:53:45 2026 GMT
Subject: CN=B5D853CD604BDE77C6602DA31E5B528BD4303F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:b0:98:19:b3:df:a0:af:e0:7b:98:85:54:
a6:1d:14:93:de:d6:43:46:52:b9:ef:12:c2:00:44:
fb:9a:bf:17:b5:58:01:98:fe:06:a7:a2:97:81:66:
6c:1d:90:9b:63:1f:56:72:cd:9f:17:f8:f9:a7:91:
4b:bb:e9:7b:a5:cd:8b:e4:81:ef:23:e8:c1:32:15:
a7:7d:2d:1d:fa:ff:df:55:1f:3b:a5:d3:57:86:13:
f1:41:e0:83:30:db:27:35:9d:29:94:ae:22:64:26:
f9:8b:b7:ba:61:b7:5b:2c:df:ee:1e:88:3d:62:61:
18:ad:91:b9:52:c9:81:ac:8c:40:a7:4c:bd:b7:fc:
f0:51:02:81:51:78:75:82:cf:ed:8c:f3:51:ff:6b:
08:f7:7e:4e:2e:61:15:85:b2:cf:68:b9:01:97:44:
10:51:7b:4a:59:17:46:81:aa:4c:88:28:f6:2c:23:
39:09:3b:0f:18:22:1e:b9:93:ee:74:ae:7b:ad:72:
b0:50:20:53:1c:b6:17:5e:12:65:7e:4f:99:d4:b8:
28:c6:a8:67:c4:55:95:9c:a2:a8:be:b0:1b:bd:66:
35:42:a7:ea:ea:74:1e:e7:15:fb:de:d5:a4:3a:b7:
96:38:6a:a6:c5:84:80:25:b4:0c:04:2a:60:38:24:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:53:CD:60:4B:DE:77:C6:60:2D:A3:1E:5B:52:8B:D4:30:3F:7C
X509v3 Authority Key Identifier:
keyid:C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33352e302f32342d3234203d3e20313532383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.35.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ee:44:86:88:ba:f2:01:f5:ac:99:6c:d3:e4:5e:50:8f:fc:
c5:0c:41:9e:cb:89:a8:d3:81:3e:74:5b:66:ba:36:1f:6f:97:
d0:1a:ba:5e:de:6e:d6:bb:04:30:78:57:41:b5:09:cf:24:63:
9d:e2:98:d2:e7:31:72:a6:f6:63:8f:00:3d:ed:9f:82:ef:f9:
77:e3:17:a0:fe:4a:1c:16:9b:b4:e6:92:3d:2a:01:f4:9b:09:
2a:fc:22:46:85:32:61:70:e8:3e:71:1b:5b:47:53:ce:87:af:
c2:b9:21:e3:9f:28:f8:6e:98:16:24:c2:70:00:6d:04:15:36:
01:95:2c:fc:5d:94:e8:80:5b:11:d7:94:12:b2:06:0d:81:5d:
97:02:49:a9:cb:8e:ab:5d:52:8a:09:54:78:ff:ad:bc:50:0d:
40:ea:4a:ac:f8:bc:b1:b3:d8:55:9e:94:1f:b6:de:44:35:28:
b3:3b:51:e7:53:41:9b:02:7f:f1:9c:5d:2c:06:90:a2:8e:5d:
c8:36:d6:e5:45:60:97:95:06:c4:c4:76:32:5b:ab:7e:92:cf:
04:fc:e4:2d:0d:5a:dc:01:aa:be:9c:43:cf:8f:c1:b2:99:11:
c0:03:39:76:a5:cd:d1:da:73:13:5d:a0:ba:39:51:3e:c8:aa:
6c:aa:29:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:14:29 2025 by rpki-client