Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32302d3234203d3e20313938393830.roa
File: 3130312e3132382e3131322e302f32302d3234203d3e20313938393830.roa (raw, json)
Hash identifier: JnCX6WYxdY0DdOgAT3gzWvWNvCU3S7THYdOtkr5dZd8=
Subject key identifier: 53:9F:AC:E7:6E:FD:B2:D9:63:15:50:0D:83:F2:E4:8E:F6:7E:03:9F
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 1BB890314749E6AF549E58786EE3A61F481C5EE0
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32302d3234203d3e20313938393830.roa
Signing time: Mon 15 Jul 2024 22:23:53 +0000
ROA not before: Mon 15 Jul 2024 22:18:53 +0000
ROA not after: Mon 14 Jul 2025 22:23:53 +0000
asID: 198980
IP address blocks: 101.128.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 17:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b8:90:31:47:49:e6:af:54:9e:58:78:6e:e3:a6:1f:48:1c:5e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 15 22:18:53 2024 GMT
Not After : Jul 14 22:23:53 2025 GMT
Subject: CN=539FACE76EFDB2D96315500D83F2E48EF67E039F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:26:44:5d:f9:c8:30:6c:df:18:53:75:28:
ce:99:f4:6a:57:93:42:70:52:ed:63:f2:5a:79:2e:
a8:45:c6:fe:58:24:01:5f:4d:7b:ed:32:00:82:24:
eb:99:3a:cb:0c:e9:d3:72:66:37:a9:e4:c9:f8:46:
06:82:8d:89:e5:50:ed:2e:35:20:e5:fb:a0:a0:b0:
9e:0f:f1:67:66:08:a3:f7:9b:f7:2f:d3:94:df:2c:
c9:3d:93:0d:4a:40:5e:d3:3a:92:b2:a2:8b:cc:e8:
a4:d0:99:8a:55:26:47:43:d8:b7:f3:e9:a6:82:2f:
95:ac:71:41:d8:d4:98:94:a2:4e:e6:b3:4f:f4:6e:
a7:65:a1:78:21:0f:86:43:12:05:5c:8a:72:4a:29:
3e:88:28:fe:03:bc:97:99:c2:78:ee:47:06:ca:f1:
4e:aa:84:da:b5:d6:78:b7:ab:c5:f8:ba:c7:1b:b3:
ee:53:fb:5b:16:de:fb:b3:5c:cc:20:73:26:41:40:
5b:78:d2:35:24:2e:4e:c0:4b:10:c4:9c:55:30:dd:
fa:9d:c1:dc:69:ac:cb:f8:a7:02:b7:b3:b0:ff:e3:
fc:26:a6:a6:11:81:3d:94:73:08:c6:f8:97:ef:c7:
92:9b:5f:30:e9:de:c5:f0:55:d8:c1:da:e2:7d:2e:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9F:AC:E7:6E:FD:B2:D9:63:15:50:0D:83:F2:E4:8E:F6:7E:03:9F
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32302d3234203d3e20313938393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.112.0/20
Signature Algorithm: sha256WithRSAEncryption
af:b8:0b:ac:1d:a4:e5:7e:0f:49:58:8f:cb:3d:d4:fa:ae:1f:
16:5b:d7:94:90:c7:b8:b9:04:0a:49:5d:9f:ac:a2:08:02:59:
6a:23:0b:06:1d:2f:64:fe:72:d8:a9:2f:28:a0:e2:3c:0d:d3:
23:c5:cc:39:76:b7:9d:ed:df:a9:27:3a:2c:49:ab:18:41:cb:
7e:ef:e6:38:b7:5b:bf:9c:ba:d5:9b:79:4c:14:3d:64:d7:fb:
92:c5:33:d1:72:a2:72:73:d3:fe:9a:a2:49:fd:17:8b:19:bb:
20:c5:81:ba:5e:35:3c:21:59:b5:e4:6e:3e:47:51:2b:06:8b:
32:eb:6c:e7:b6:68:a6:1e:61:d3:9d:ae:f1:12:0d:45:7c:4a:
50:8e:d7:59:f5:06:66:03:61:95:3a:6e:c6:be:90:33:8a:29:
34:fb:f9:88:dc:09:d6:82:92:21:cd:70:fb:9c:18:36:5d:f2:
f9:ff:3b:11:40:8f:93:da:5f:19:1c:9b:90:b2:e8:77:a0:d3:
1d:3a:75:a1:7f:99:e3:16:a8:4c:38:63:e4:9f:6e:b5:26:b9:
a5:8d:42:b2:63:0e:bd:ae:a1:c7:0a:03:a8:25:32:14:70:c5:
3f:8e:0a:f6:a4:e1:53:57:ee:12:39:3d:9c:1e:b5:29:d6:c1:
90:59:28:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 20:13:51 2024 by rpki-client on console-fra.rpki-client.org