Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/3136302e32302e33382e302f32342d3234203d3e20313536373637.roa
File: 3136302e32302e33382e302f32342d3234203d3e20313536373637.roa (raw, json)
Hash identifier: vl3UtSRqttPt7YzG/tMp0F+0zBZdcfauTxsa0dxzDYs=
Subject key identifier: 9B:BD:0D:F6:C7:F1:13:86:57:8E:00:F2:F1:6B:6D:35:E2:EC:02:20
Certificate issuer: /CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244
Certificate serial: 3EEA3C40B06CB9299BF981636CB928E47DDB3807
Authority key identifier: BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/3136302e32302e33382e302f32342d3234203d3e20313536373637.roa
Signing time: Sat 15 Jun 2024 05:38:44 +0000
ROA not before: Sat 15 Jun 2024 05:33:44 +0000
ROA not after: Sat 14 Jun 2025 05:38:44 +0000
asID: 156767
IP address blocks: 160.20.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jun 2024 08:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ea:3c:40:b0:6c:b9:29:9b:f9:81:63:6c:b9:28:e4:7d:db:38:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244
Validity
Not Before: Jun 15 05:33:44 2024 GMT
Not After : Jun 14 05:38:44 2025 GMT
Subject: CN=9BBD0DF6C7F11386578E00F2F16B6D35E2EC0220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:c5:52:82:a7:f3:1e:e4:b9:ac:95:8e:f9:
8f:23:2e:e1:45:f5:3c:ed:56:63:af:98:97:2c:31:
0e:98:06:fa:21:29:30:87:d4:a2:b5:92:2d:00:4d:
7d:f0:ba:99:e9:90:3b:6f:a3:da:d6:81:c9:d8:24:
06:9b:5a:0c:ca:e8:89:1b:4e:bc:22:64:5c:10:47:
87:fa:fc:75:df:09:d7:21:8b:93:5a:9f:6c:26:e3:
70:4b:d1:a9:c1:1f:13:84:18:df:fd:5a:23:82:cb:
e3:4d:f4:b8:ce:d3:21:0e:78:35:67:9d:e0:85:a3:
ed:6c:42:2f:12:f1:e5:1f:bd:e3:a0:da:e0:2d:8b:
c4:77:40:e3:0e:c2:96:45:0b:a7:99:30:1a:32:0a:
ab:23:e4:a1:e0:75:9e:18:4b:df:0a:57:d6:91:dc:
57:b5:37:39:39:92:63:1e:cb:d7:41:4c:ff:d2:ee:
49:bb:e1:99:60:82:f8:da:43:31:d5:03:93:e2:c3:
ab:c8:39:78:59:a3:e4:7c:3a:16:98:ed:33:70:18:
71:f9:b7:88:ba:53:3f:6c:ec:bd:cb:1b:d9:b2:ad:
4e:17:73:91:0a:34:75:9a:30:8e:92:fe:40:af:b0:
6c:be:d1:a8:69:2a:6c:72:70:42:1b:77:47:b3:e8:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BD:0D:F6:C7:F1:13:86:57:8E:00:F2:F1:6B:6D:35:E2:EC:02:20
X509v3 Authority Key Identifier:
keyid:BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/3136302e32302e33382e302f32342d3234203d3e20313536373637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.38.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d6:2f:af:b8:76:2b:80:01:65:a1:f9:04:b8:7e:88:a4:53:
57:92:59:fb:7e:46:e3:2d:3a:fd:23:f5:2e:d4:30:59:6e:a6:
30:31:d4:36:cb:7a:2f:92:6e:aa:bb:91:fb:4a:a3:62:13:23:
77:99:01:3c:7c:dc:af:6d:10:c1:d6:01:38:66:b8:e1:99:68:
fb:24:df:6c:ec:ba:0a:e5:8f:24:40:59:44:6b:51:58:8e:26:
2f:32:30:0f:d9:6e:cf:78:c3:fc:13:f6:01:02:fc:b2:fc:7d:
ba:f1:2d:14:23:d2:0f:b3:66:36:c0:02:ee:1d:52:2c:bc:71:
74:a6:ab:d4:af:ec:38:65:18:45:27:0a:23:dd:e3:14:d4:76:
12:9c:68:58:c9:b9:0d:b2:96:e0:eb:6e:54:77:53:3b:ae:04:
b4:ae:df:9d:d3:a1:a6:88:77:0d:06:42:8d:3c:c4:e6:3e:3f:
d0:cf:a9:05:7f:2a:78:96:0c:9e:d3:f7:df:ab:31:07:f0:30:
c5:c8:1c:40:be:04:54:3e:3c:34:99:ba:c5:06:42:63:cf:cf:
12:17:dd:27:52:34:77:e5:35:1f:ae:c6:f2:a3:f1:86:12:ed:
e0:3a:61:75:03:06:d0:45:97:61:db:96:3d:3d:e7:e0:8a:5a:
97:33:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:24:35 2024 by rpki-client on console-ams.rpki-client.org