Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132342e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e3132342e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: a09hRdBgV1SaCvxUUwOdO8CjHHmGnsp8wsGrKvIPt+w=
Subject key identifier: 31:EC:4C:D7:66:B4:B7:97:3B:0C:60:D7:83:56:CE:9F:2F:D6:B8:04
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 2835944BC1F3BE39E9AC713591042012614956DC
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132342e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:19 +0000
ROA not before: Mon 01 Jul 2024 00:57:19 +0000
ROA not after: Mon 30 Jun 2025 01:02:19 +0000
asID: 135478
IP address blocks: 101.128.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:35:94:4b:c1:f3:be:39:e9:ac:71:35:91:04:20:12:61:49:56:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:19 2024 GMT
Not After : Jun 30 01:02:19 2025 GMT
Subject: CN=31EC4CD766B4B7973B0C60D78356CE9F2FD6B804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:10:a3:30:cb:37:1c:1d:fe:5b:53:15:96:
ec:30:5c:45:4b:da:26:a6:2c:3b:f6:64:8d:04:2f:
64:68:2a:c1:8f:cd:f8:44:cc:2c:9f:c1:1a:ce:41:
41:4b:ce:c4:7a:17:54:ef:61:db:bf:98:47:8f:76:
d0:c6:66:85:6a:2a:e3:0f:61:f5:af:6d:34:4b:91:
e3:52:ae:ba:76:2b:ea:46:96:73:b5:c1:a0:e2:f2:
78:7a:b0:8d:1f:c2:68:4c:bc:2c:91:0a:a7:27:12:
fb:34:97:00:07:c3:52:dc:d4:94:32:d1:50:8e:66:
cb:47:3d:fa:50:a9:6f:41:d9:03:2a:5c:60:83:90:
9b:a1:97:b0:72:0e:a1:cb:fd:cf:01:44:ad:59:33:
d9:6e:1a:b2:15:8a:80:c8:12:a8:59:e6:f0:e2:50:
28:98:be:1e:95:10:d9:6e:5a:6a:b9:1a:9b:b8:b1:
b6:fe:ae:1c:82:44:06:76:1d:9d:44:e9:77:e2:e1:
f5:b2:dc:f9:c0:48:e8:1d:a8:97:42:fc:ed:95:c1:
87:0f:b4:b5:eb:0c:7b:58:af:9d:4f:b7:0f:1d:30:
9c:c9:79:e6:f2:58:67:d6:d0:74:78:96:32:02:a1:
47:e1:b7:21:20:77:9a:af:ab:83:c4:70:96:2c:fd:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EC:4C:D7:66:B4:B7:97:3B:0C:60:D7:83:56:CE:9F:2F:D6:B8:04
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132342e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.124.0/22
Signature Algorithm: sha256WithRSAEncryption
25:28:92:db:ae:8f:6e:1f:a3:7f:bf:94:19:f8:84:72:c0:7f:
05:b2:bd:b7:89:71:7c:83:f7:17:31:05:b9:16:f1:dc:82:ae:
dd:f6:fa:82:eb:7c:45:cc:42:b3:74:7f:02:5f:07:40:c3:d6:
1d:a4:96:af:34:87:38:87:2c:65:f8:59:15:ad:12:37:15:50:
35:ef:5c:3a:24:05:f1:b0:ed:0d:7f:29:76:98:a5:84:38:78:
49:db:9e:aa:5d:96:1a:39:0e:fa:0b:2a:47:ef:8c:d2:92:c1:
81:d5:94:b0:0c:ba:a9:80:27:9a:77:ad:09:f0:2e:31:f5:33:
cb:20:7f:0d:fd:cf:68:cf:27:9f:db:59:dd:49:66:ec:57:4f:
6b:1b:fa:83:2f:c7:5a:3a:39:22:bf:9e:b4:1b:1a:87:af:db:
c3:72:4d:97:4b:9b:6a:b8:51:bd:4f:02:44:1c:65:ec:05:2b:
c4:52:d4:6b:69:2e:1d:d2:80:bb:47:24:16:21:29:0a:2f:6a:
a9:6c:79:38:a4:77:8d:aa:7b:bd:75:48:6e:14:29:24:23:12:
9d:3f:02:09:6a:ff:d2:45:75:e3:07:b8:a2:a1:a9:f3:b6:f0:
e3:a4:9c:c7:e5:da:59:12:52:8c:5f:cd:00:93:94:f1:75:30:
8b:26:a2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 05:52:51 2024 by rpki-client on console-ams.rpki-client.org