Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: itjQhvGOjrQ730ckqp+zo/X7yGvEg+SvxW9ljVyQXx0=
Subject key identifier: 21:E3:C6:7B:AA:BB:36:09:04:D2:59:62:06:02:60:B3:64:18:2A:45
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 4F6D7FD1417FF99C1C6BFE31E10E912093C5172F
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:19 +0000
ROA not before: Mon 01 Jul 2024 00:57:19 +0000
ROA not after: Mon 30 Jun 2025 01:02:19 +0000
asID: 135478
IP address blocks: 101.128.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6d:7f:d1:41:7f:f9:9c:1c:6b:fe:31:e1:0e:91:20:93:c5:17:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:19 2024 GMT
Not After : Jun 30 01:02:19 2025 GMT
Subject: CN=21E3C67BAABB360904D25962060260B364182A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:e1:79:86:97:6b:5d:3e:c1:01:1f:b4:7b:
ab:51:91:62:85:45:d8:c2:3f:14:60:f7:fb:4b:e9:
f7:f2:81:69:47:7d:41:8a:29:5b:90:0e:9b:13:1a:
e1:01:4b:0e:74:d8:61:6f:56:96:95:f6:bb:cf:0e:
85:27:d1:be:d9:d9:75:dc:26:a7:c7:12:7f:f2:0f:
ac:17:5c:13:62:7d:94:ee:d5:fb:60:cc:20:82:32:
7b:88:85:85:5f:56:00:25:8f:f8:3a:6e:c0:85:be:
cd:99:87:98:c5:5e:3c:eb:f4:f8:b1:79:4f:39:95:
95:94:67:5b:9e:17:cb:3b:6b:56:5b:95:9e:5e:d2:
c7:86:85:df:e8:58:9b:1e:56:fb:7a:df:74:ff:73:
35:a8:af:53:ea:ef:38:10:60:4d:d0:d7:88:47:b4:
d7:05:1f:b2:5f:11:4d:e4:d2:c0:9d:f3:e2:85:2a:
26:ba:3b:73:2f:54:43:fc:9d:b9:1f:0b:50:32:7f:
18:9b:11:8d:dd:5b:52:e3:d0:b7:2c:e6:04:95:50:
a6:73:ab:3c:1c:aa:0f:f4:dd:58:dd:a1:61:09:0d:
09:24:a2:8e:d2:9c:a9:5b:ea:7d:ce:d2:50:b7:56:
83:2b:f5:af:e5:a7:6c:d8:de:ee:a0:70:94:6c:b6:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:C6:7B:AA:BB:36:09:04:D2:59:62:06:02:60:B3:64:18:2A:45
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130382e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.108.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:d2:73:5f:0e:61:29:38:bc:8d:92:7e:ed:fc:78:58:c7:60:
b1:d9:ec:b8:0b:03:57:99:a8:6f:a7:7a:ac:4d:9c:50:15:38:
47:a9:cb:69:b9:99:69:d9:b2:51:e7:35:29:4c:77:47:f8:7a:
ea:3f:5f:5e:ae:6b:d6:34:8a:b7:8b:99:ae:7e:26:96:08:0b:
f6:cb:3c:9d:14:9c:23:55:34:e6:2d:f9:5f:6c:3b:83:8d:0d:
bd:c8:92:9c:ec:17:f6:ef:1e:8e:2e:08:20:c0:13:e8:aa:90:
51:8d:a4:b1:4e:41:1d:58:2b:51:95:78:c6:0c:d7:5f:58:42:
2d:94:cd:d8:0c:d8:ee:a5:2d:b4:39:a7:bd:5b:aa:73:b2:a3:
30:69:1b:ee:b5:43:68:54:e0:c5:c3:cb:df:df:16:60:a8:9a:
b9:18:88:c1:ae:d6:a3:d0:1c:c6:8e:05:9f:50:8c:bd:bd:6b:
60:d2:0a:4b:8c:5a:43:47:37:ce:02:b8:76:b5:a6:12:e4:16:
47:ec:0e:5d:0f:50:27:58:43:3b:f0:78:ab:21:c7:10:1f:4a:
ab:ec:35:98:dc:c7:c7:8f:d0:d6:b0:02:b8:47:46:7d:a7:9f:
34:44:5b:41:86:2e:b0:30:21:c3:eb:d6:74:5a:09:c2:ee:f1:
0b:e5:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 05:52:51 2024 by rpki-client on console-ams.rpki-client.org