Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313430343233.roa
File: 3136302e32322e36332e302f32342d3234203d3e20313430343233.roa (raw, json)
Hash identifier: Gqj0qctUNvP3Z2GsaHEPHJIPTkcTKosfW+L7Wnqa9nA=
Subject key identifier: B1:31:D3:A1:50:BA:0D:6B:95:5B:33:E2:BD:8A:77:76:A7:CA:9F:FC
Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
Certificate serial: 30082B373974F4646C0EAFFCE6BEA673916A7701
Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313430343233.roa
Signing time: Mon 19 Aug 2024 19:59:22 +0000
ROA not before: Mon 19 Aug 2024 19:54:22 +0000
ROA not after: Mon 18 Aug 2025 19:59:22 +0000
asID: 140423
IP address blocks: 160.22.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Dec 2024 12:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:08:2b:37:39:74:f4:64:6c:0e:af:fc:e6:be:a6:73:91:6a:77:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210
Validity
Not Before: Aug 19 19:54:22 2024 GMT
Not After : Aug 18 19:59:22 2025 GMT
Subject: CN=B131D3A150BA0D6B955B33E2BD8A7776A7CA9FFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:be:a2:a9:c6:c4:45:78:44:7d:6f:00:1e:
ba:c5:b4:58:28:38:01:1a:ba:3e:a3:04:29:03:43:
5d:e7:c0:a3:2b:a6:e0:ff:3b:fb:25:ae:07:14:e7:
a7:da:5a:7d:28:8c:9c:3b:86:32:5a:11:a4:4d:d5:
85:6c:01:7e:ff:46:b1:36:55:76:f3:97:4a:f4:c6:
8f:b7:e0:ec:d8:29:2a:9f:14:4b:52:71:db:c1:84:
95:e0:ae:2e:da:f1:1a:f3:2e:61:39:0b:af:43:3e:
3f:1d:dc:fd:f2:3f:15:c6:5e:78:26:8b:4d:19:44:
60:f2:0e:14:3b:f7:32:c1:84:fb:c4:c4:50:ee:3e:
33:c3:ee:5e:c7:94:e7:ea:cd:13:63:a3:a7:6d:46:
59:91:f0:16:10:96:16:f2:2a:13:16:b8:f1:1c:96:
89:77:b0:93:bd:0d:a1:28:b5:1d:f7:ec:3f:64:d2:
7f:22:39:2a:89:72:c2:74:c2:98:7f:9a:cb:5f:c8:
8a:7d:c4:36:fe:46:fe:d8:be:fc:9e:09:16:85:74:
51:a1:b1:3c:6b:db:e7:ff:da:68:97:1c:80:3f:e8:
86:ed:55:81:8a:1c:d9:b8:bd:f1:ae:ee:c4:79:ae:
10:66:cf:c8:22:13:7f:c9:b9:b8:65:c9:e9:19:da:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:D3:A1:50:BA:0D:6B:95:5B:33:E2:BD:8A:77:76:A7:CA:9F:FC
X509v3 Authority Key Identifier:
keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36332e302f32342d3234203d3e20313430343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.22.63.0/24
Signature Algorithm: sha256WithRSAEncryption
90:60:73:a3:c5:7a:76:ef:9f:6d:e1:e7:6b:81:4e:f6:7d:5a:
b5:ea:a2:fd:58:46:c4:d5:cb:1e:8e:70:72:71:7b:8e:6e:09:
1d:ad:73:0f:cb:eb:01:16:d0:81:8c:36:50:e5:33:47:fd:e5:
1c:a0:1f:9f:66:c5:c4:25:43:9a:b7:a0:fe:1f:9e:b9:9d:5a:
89:1c:61:3f:23:56:7c:57:53:5a:ff:8c:da:84:03:98:97:23:
48:0b:7e:ac:d5:cd:4d:4b:b7:80:77:7b:5a:fe:fd:d4:8a:58:
de:3d:28:50:f6:af:31:32:5e:80:f6:de:0d:42:06:25:bd:fd:
fb:2a:4e:6c:59:2b:b5:4d:1b:57:75:55:84:74:b1:07:cb:76:
63:af:bd:74:86:c9:84:08:bd:f8:0d:55:8c:c7:4c:7e:15:80:
f9:2f:a5:4f:42:ce:a0:99:d3:45:e4:f6:d5:28:d8:2d:f0:af:
08:01:84:21:6d:18:48:5a:9c:36:cc:c2:10:b3:f8:ef:51:f0:
0e:22:d4:39:28:a7:f4:4f:20:8c:b4:d1:e5:4f:59:c3:0d:ab:
8d:10:9b:81:3e:8b:fe:7e:04:0e:0d:f7:c5:81:44:49:e7:a3:
77:91:43:78:89:d6:26:3e:cb:8b:c1:8b:ff:26:7f:aa:a9:b7:
72:17:25:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 21:23:15 2024 by rpki-client on console.sobornost.net