Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e3131322e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: bj49JgIOIU6X+sfvITF0BBh33iH+DL2ExQMS7eHfUdg=
Subject key identifier: 46:22:D0:6C:AC:34:53:8F:81:F4:6F:D2:6F:51:88:F6:28:D2:58:2C
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 425E6088C377FBFC09330562FE78A4A53816486D
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:14 +0000
ROA not before: Mon 01 Jul 2024 00:57:14 +0000
ROA not after: Mon 30 Jun 2025 01:02:14 +0000
asID: 135478
IP address blocks: 101.128.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5e:60:88:c3:77:fb:fc:09:33:05:62:fe:78:a4:a5:38:16:48:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:14 2024 GMT
Not After : Jun 30 01:02:14 2025 GMT
Subject: CN=4622D06CAC34538F81F46FD26F5188F628D2582C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:02:d5:e5:94:7f:0e:53:d4:24:6d:b1:5f:13:
43:9e:10:fb:6c:7d:a6:fb:bb:37:20:83:a8:40:f0:
c7:40:1f:7f:42:63:ef:b5:e4:d0:a7:ac:0f:ac:b2:
ad:89:50:67:62:db:09:89:93:9a:57:3b:fe:66:9d:
7c:29:40:c4:5f:f8:91:b9:51:e8:2b:fa:2e:94:18:
75:d9:2f:2a:e5:32:61:f2:f3:75:f8:fe:ea:72:ab:
fa:a8:c4:e5:2b:b6:b0:9f:3c:c7:1d:18:52:8c:55:
60:0a:9a:70:9d:22:16:e9:32:00:8c:9e:3f:8e:92:
e4:ad:26:f0:e3:ba:a8:fc:51:f4:43:be:34:cc:c8:
f6:b3:80:08:04:6d:b3:52:f4:3b:b3:b0:76:40:92:
67:99:8c:d5:2c:13:81:ea:c4:d5:d0:b5:96:71:47:
f2:24:e8:b0:ff:e5:ca:df:93:3c:6c:22:7d:82:57:
21:a1:68:31:c1:0b:f1:39:bb:80:22:3d:67:e7:a2:
fd:4b:80:3e:2c:26:4c:b1:9f:5e:e6:3b:cc:96:2f:
c5:50:9c:42:30:8f:88:0c:ec:82:50:fa:10:e7:c0:
3f:fd:c3:80:21:eb:25:ed:27:94:9e:54:41:62:4b:
b6:61:44:f4:18:f3:87:3f:76:bf:f7:47:27:8d:5a:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:D0:6C:AC:34:53:8F:81:F4:6F:D2:6F:51:88:F6:28:D2:58:2C
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.112.0/22
Signature Algorithm: sha256WithRSAEncryption
03:f0:86:51:52:d6:52:f8:03:65:fb:5d:ce:ef:25:61:c5:8f:
5a:fa:b9:13:dd:17:22:40:d9:d6:9a:8b:f7:f6:41:11:ea:1c:
1d:c7:46:85:a0:2d:0f:b7:6e:05:fa:a6:b6:42:b0:f1:a9:98:
c6:82:4d:3c:fa:8f:b4:cd:c6:ec:ff:65:02:6b:99:49:68:f1:
6c:cf:52:20:4d:fa:49:58:10:b5:91:da:e1:1b:6f:be:7d:f2:
64:32:74:0c:92:50:92:67:38:95:d3:5a:97:f9:c3:dc:eb:05:
3c:24:da:db:b6:f8:0e:e7:2c:87:46:12:25:87:13:b4:7d:96:
38:45:18:ee:cc:22:85:86:d5:af:c2:1c:3a:9c:73:4b:16:08:
c5:cb:22:0a:7d:78:1c:41:04:a7:f9:0d:7f:e5:36:2e:2c:b1:
7a:19:2f:3f:b0:19:25:13:13:23:a2:6d:0c:49:ce:b6:35:1a:
ea:5a:eb:38:81:57:19:d1:4b:65:4f:2b:75:1b:21:0d:18:5c:
f5:65:31:3d:50:7b:25:9d:91:42:6f:e0:e7:de:08:70:1f:01:
0a:27:ef:28:39:37:cc:99:9c:ee:c1:32:1a:91:d2:02:be:ab:
3f:60:7f:bc:dc:aa:d7:d7:cf:3d:09:67:17:2d:48:70:da:a5:
6e:03:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org