Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130302e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e3130302e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: funFXqh4vIvB69C0ZyfO3kR6FLcUqlAJPrSHDXZz0Go=
Subject key identifier: E5:B4:9C:C8:9B:F2:F9:F6:25:56:69:D3:BC:D2:25:82:76:F0:35:E8
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 1C1A1350737B4C822C5E86430B226458F0C4A328
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130302e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:19 +0000
ROA not before: Mon 01 Jul 2024 00:57:19 +0000
ROA not after: Mon 30 Jun 2025 01:02:19 +0000
asID: 135478
IP address blocks: 101.128.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:1a:13:50:73:7b:4c:82:2c:5e:86:43:0b:22:64:58:f0:c4:a3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:19 2024 GMT
Not After : Jun 30 01:02:19 2025 GMT
Subject: CN=E5B49CC89BF2F9F6255669D3BCD2258276F035E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:e9:e3:6a:ef:7c:99:63:79:8e:52:fc:ce:
66:d8:39:a6:33:16:c2:2c:9a:38:86:4c:a1:d0:4a:
67:19:ea:02:e0:e9:c9:cf:a2:2e:ae:28:a0:63:03:
3c:2a:b2:e7:af:4d:c8:a2:ed:1a:c7:0a:70:b5:c6:
3c:e3:97:f0:4c:22:a3:4a:77:ec:8f:11:08:b6:5d:
ec:dc:e5:c1:6f:23:83:85:11:a2:1f:98:50:df:02:
9f:2a:3e:ce:e1:64:a0:79:72:cf:fa:a1:3e:e2:e2:
b3:f2:82:d8:75:4f:61:9e:5b:f4:d1:0e:59:4f:72:
b5:99:71:34:6a:d2:4f:21:3b:23:40:0c:d5:62:48:
d7:31:d2:2c:e6:de:c6:b5:ec:37:68:c8:7c:b6:d0:
2c:e2:4c:ca:b2:db:d7:de:56:16:a9:10:9a:f5:57:
55:31:a3:69:fb:da:0d:26:d9:56:d0:fa:fc:ff:2b:
51:32:8e:84:d7:27:7d:98:e5:0f:78:a1:3c:1d:95:
28:1f:8a:b7:d3:d9:51:4c:1e:b3:a4:fe:71:fe:9e:
36:d6:aa:de:2a:6c:ef:7a:74:72:7e:d7:93:cf:5e:
bd:05:dc:71:33:83:67:e1:96:02:66:11:ae:d8:28:
d4:dd:65:83:fc:5c:ba:a9:2a:51:33:1d:af:8f:12:
30:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B4:9C:C8:9B:F2:F9:F6:25:56:69:D3:BC:D2:25:82:76:F0:35:E8
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130302e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:32:3c:34:29:70:5e:c9:ff:fe:86:81:a0:a4:e9:a4:2f:9e:
41:d6:77:78:1e:5f:e9:14:ae:5c:fd:47:3d:28:72:e3:0c:8b:
16:0e:94:99:df:13:3a:81:9b:86:3e:b4:a4:aa:7c:d2:4b:bc:
52:86:e6:a8:4b:65:39:a3:d7:43:be:23:cd:c3:86:1a:95:33:
93:a3:44:d5:91:7b:2c:62:1b:e3:c2:74:a5:71:a2:57:71:88:
01:20:3d:45:ca:91:1d:5e:16:19:bf:03:4b:14:47:d4:3a:c1:
42:01:cb:3d:00:05:80:35:3c:c6:78:dd:2d:8c:ac:4f:b7:b7:
30:df:b0:60:fc:59:0b:4b:57:dd:26:05:64:cf:f9:5f:19:13:
6d:18:fe:ee:58:92:c0:d2:71:c7:cb:04:bb:ef:23:2e:fb:d0:
57:c4:c9:a8:ab:e5:5a:81:62:1c:9f:c8:e8:0e:dc:f2:8f:01:
f9:53:16:13:d4:44:05:a2:fd:93:d8:7d:8a:6d:89:39:99:d3:
bd:48:2c:fc:ba:41:da:7c:2f:4b:84:55:54:bf:04:29:5d:7b:
cd:a3:2c:56:33:02:2c:62:3d:45:03:4a:16:92:11:94:a6:b5:
6d:34:23:fa:99:b2:50:da:11:06:a8:e4:73:e6:3a:0e:0c:e3:
0b:8d:67:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org