Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130342e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e3130342e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: As6F8Edx+aRqiNZW27ymC33/4+2lkEj/mASBTK5SdQM=
Subject key identifier: 98:8C:65:68:AD:A3:6E:CF:AD:1F:3C:51:AC:19:81:A4:45:94:27:48
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 7572CE2881F6EA4A14C578AB3CF0EB18A0D9CB53
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130342e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:17 +0000
ROA not before: Mon 01 Jul 2024 00:57:17 +0000
ROA not after: Mon 30 Jun 2025 01:02:17 +0000
asID: 135478
IP address blocks: 101.128.104.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:72:ce:28:81:f6:ea:4a:14:c5:78:ab:3c:f0:eb:18:a0:d9:cb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:17 2024 GMT
Not After : Jun 30 01:02:17 2025 GMT
Subject: CN=988C6568ADA36ECFAD1F3C51AC1981A445942748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:c5:ed:33:05:a0:49:68:1e:7e:17:2d:a5:
28:4b:06:62:9c:a5:0c:8f:58:3d:1f:a7:d1:09:6d:
97:09:64:a0:b7:7b:6f:1c:31:05:a2:d7:ea:ed:aa:
49:3f:aa:e1:8f:31:d2:fe:ee:58:7b:f7:fc:fc:43:
ec:68:69:9e:95:f9:40:5e:0f:00:44:7a:b9:76:32:
f2:ce:5b:60:a6:40:66:a9:5f:3b:c4:74:80:35:b3:
4c:b1:38:3d:75:a3:c1:ec:9f:b6:41:0c:be:17:54:
a4:91:d4:be:5a:f3:64:32:8d:ab:a0:2e:c1:65:d6:
47:b1:60:b0:19:86:f3:43:e6:38:a9:5b:84:9e:e4:
09:1f:d6:b8:cb:b1:39:27:c4:3f:c2:ce:df:bb:15:
f8:9a:f8:10:bb:a5:de:1b:83:2e:59:78:88:fb:34:
55:7c:18:bd:c0:78:78:e1:e8:d7:d0:04:6a:19:1b:
68:78:c2:cf:12:c7:fb:e8:b2:ad:3a:6c:7b:5c:b8:
bf:66:06:10:44:d0:7f:5a:a4:82:0a:33:5a:14:e9:
60:6c:58:64:69:ab:05:c1:bd:50:af:e6:97:55:70:
bf:fc:b7:4a:0e:f5:28:c0:b2:01:81:db:20:c4:22:
da:f0:97:09:6e:6e:44:6c:c5:de:b8:c9:fb:15:c4:
0d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:65:68:AD:A3:6E:CF:AD:1F:3C:51:AC:19:81:A4:45:94:27:48
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130342e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:b1:6c:e8:10:06:80:76:73:5e:5f:83:85:f8:b7:75:53:8b:
75:51:7f:59:e1:ae:83:20:6c:16:fa:b0:00:01:f2:ca:52:76:
57:df:8b:08:ad:e0:74:0a:5a:91:a2:a1:39:8d:c2:1e:85:3e:
80:5a:a6:6a:2f:7d:5b:3a:cc:55:24:8f:6e:4f:2b:d9:de:b2:
ab:66:46:be:03:c7:f2:53:11:9a:a0:94:3f:b2:da:df:94:55:
47:34:55:ae:19:b4:3e:d8:ac:4b:fe:9e:ec:3a:c4:90:ed:12:
58:75:67:27:04:22:a2:86:63:69:a4:37:f0:e1:1b:4a:16:94:
e5:09:d0:d2:49:52:1c:7a:15:ab:19:65:0c:39:fb:c5:63:1c:
c5:b1:29:78:d2:50:c3:21:ed:6f:fc:b0:da:44:1f:05:17:c2:
54:fc:2a:89:a8:af:3e:ca:1f:df:98:c0:b3:16:6a:a9:b6:80:
97:22:1f:4a:1e:23:e2:c1:b8:a9:a6:b7:3c:e6:5e:d1:8a:25:
98:33:ed:eb:b1:5b:df:21:10:c2:ff:b6:7f:f0:fd:52:be:7b:
55:dc:57:d0:db:05:17:9f:67:b4:55:bc:e7:a0:f0:61:07:dd:
27:b9:02:4e:dc:5c:5f:12:7a:96:b9:42:4e:8a:83:3e:a8:7f:
c8:f3:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 05:52:51 2024 by rpki-client on console-ams.rpki-client.org