Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131362e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e3131362e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: ya7dgLTh0kx2XOxiOeulaaqXeolxneOxYtenhRdSkfw=
Subject key identifier: C9:33:56:6B:32:E4:8E:86:7F:B8:D3:D8:A7:08:F3:80:4D:AC:3E:18
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 3EE9ABBA4441F87DA1A9DEE2713DAA1CBA6234DB
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131362e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:14 +0000
ROA not before: Mon 01 Jul 2024 00:57:14 +0000
ROA not after: Mon 30 Jun 2025 01:02:14 +0000
asID: 135478
IP address blocks: 101.128.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e9:ab:ba:44:41:f8:7d:a1:a9:de:e2:71:3d:aa:1c:ba:62:34:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:14 2024 GMT
Not After : Jun 30 01:02:14 2025 GMT
Subject: CN=C933566B32E48E867FB8D3D8A708F3804DAC3E18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:3d:ff:41:bf:a3:11:ec:d9:70:d6:77:96:
9c:e9:15:f5:77:9e:04:25:b1:ba:ae:26:c6:e0:56:
bd:17:96:d0:0b:f1:04:77:7b:bc:d0:b8:d8:c0:ec:
74:12:31:15:d9:3e:e6:84:01:40:f5:64:19:8f:34:
13:70:ae:cc:85:67:b2:38:9e:4f:dc:4b:c6:96:9f:
d4:75:9c:a8:27:8b:15:c8:31:2c:9d:6e:0d:d9:08:
4b:05:d0:a5:0c:b6:b8:7d:0a:64:4a:98:c1:0d:dd:
86:2b:d7:d2:3b:d5:3f:15:18:49:4e:5a:2b:12:d3:
0e:8c:05:f4:e5:94:4a:4a:ec:e9:02:1b:d1:59:e5:
7d:ed:74:b2:31:c4:01:96:58:95:51:31:a7:2a:53:
fd:bd:72:22:a4:5c:2b:8a:28:db:92:08:7c:07:23:
1b:82:b4:46:fd:8c:3a:7a:7a:f0:fb:d1:07:c6:b9:
14:5e:2a:f2:47:89:df:c7:ad:de:26:88:4f:2b:79:
40:28:b7:e3:b4:38:bd:b5:87:7c:84:e2:20:bb:83:
9a:e2:e7:18:e2:a7:85:f2:ec:74:ff:ad:3f:80:dc:
f3:1d:7f:e1:5a:c6:f8:4b:3d:2a:96:3f:ac:fe:5e:
d9:42:fc:df:1c:9f:da:93:63:9d:50:01:33:86:33:
fe:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:33:56:6B:32:E4:8E:86:7F:B8:D3:D8:A7:08:F3:80:4D:AC:3E:18
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131362e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.116.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:e0:d5:21:cf:63:e3:5e:67:d8:47:09:a5:37:f9:9c:22:40:
11:fe:9c:ea:dc:fa:02:da:dd:1e:1b:c6:ae:42:3b:bd:4a:55:
0e:81:ac:d9:2a:3b:88:34:a3:1a:73:52:c5:a0:ce:8f:8a:9d:
f5:b5:33:52:67:8c:9f:ab:36:fb:a6:ee:ed:31:ad:d8:b8:73:
90:0f:23:f4:86:0a:d1:b9:af:88:2f:95:3b:c2:f1:89:a4:20:
e7:e6:20:fc:28:f7:88:ba:58:15:92:be:eb:d5:2e:5d:c3:83:
35:43:7e:50:13:1e:d2:50:d4:32:32:3b:10:52:e3:b5:9b:d4:
02:9e:c8:cc:5b:36:22:9b:8f:6b:ee:13:2e:b5:7d:13:49:ad:
f9:65:9f:70:c8:3e:a7:62:b5:d0:42:24:09:03:e3:85:b1:75:
e2:ef:ec:d6:bb:d6:98:cd:48:50:b5:46:c1:d2:6d:b4:63:fe:
c1:8f:69:ce:eb:25:1c:82:34:c2:77:be:67:af:8d:86:c1:e7:
8d:de:27:4f:48:b4:72:db:66:99:0d:40:14:37:85:cd:20:46:
75:7e:e0:64:4f:4e:81:88:22:63:a9:70:66:85:0f:34:4c:b1:
a7:e0:02:20:f6:9c:c2:bb:33:f1:17:ee:a6:ef:a2:b2:dd:47:
b2:a1:1f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org