Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e36342e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: DCzWSW0op79nUaWTFYJEXHDoub1fVsMp5rl8yFEtQyM=
Subject key identifier: 20:D2:36:09:9B:C1:95:8D:18:D1:E9:10:27:BD:BC:16:A2:1C:B3:5E
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 4A9B382FAAB12B8C64D1D6283B6B1956EA745CDD
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:18 +0000
ROA not before: Mon 01 Jul 2024 00:57:18 +0000
ROA not after: Mon 30 Jun 2025 01:02:18 +0000
asID: 135478
IP address blocks: 101.128.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9b:38:2f:aa:b1:2b:8c:64:d1:d6:28:3b:6b:19:56:ea:74:5c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:18 2024 GMT
Not After : Jun 30 01:02:18 2025 GMT
Subject: CN=20D236099BC1958D18D1E91027BDBC16A21CB35E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:75:52:d5:10:10:8f:cf:20:c2:cd:47:03:e1:
77:62:42:f2:2a:58:94:67:64:45:99:40:f4:53:29:
ea:34:19:e0:a7:69:78:97:fa:da:84:24:16:6e:6b:
26:b8:70:61:71:b2:36:6b:66:02:ee:c1:2d:8e:0f:
25:a8:3d:df:6b:f7:30:a7:2a:fb:19:10:86:93:ed:
b3:c4:31:e9:cb:16:15:4b:69:4e:6a:e4:2f:18:d3:
06:69:12:34:ed:8c:03:ed:c2:fc:99:b6:35:cc:8f:
45:3c:63:e8:0a:8e:ad:a4:e7:17:30:e7:0c:54:69:
c3:99:33:0a:4b:cb:6f:a8:33:02:2a:67:a6:c9:74:
d6:fd:d3:a2:03:a1:cc:da:17:26:7c:aa:8a:60:39:
c1:ee:8c:c8:f1:11:74:50:04:5f:2f:f8:97:f5:1b:
79:bd:3f:96:00:3c:57:48:2e:4e:af:dc:6d:a4:b2:
3e:33:04:ac:c8:f9:ec:1c:34:02:4a:e3:59:b1:c7:
c3:d2:4d:12:f9:1f:16:3a:70:81:a3:0d:87:69:3a:
96:1a:9c:fc:bb:ae:b1:ec:ca:aa:08:b7:35:34:76:
72:01:b8:09:92:ca:45:4f:d3:e1:cf:96:03:86:4a:
b4:13:47:22:f9:55:46:6b:ab:21:6a:e3:a4:41:4e:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:36:09:9B:C1:95:8D:18:D1:E9:10:27:BD:BC:16:A2:1C:B3:5E
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.64.0/22
Signature Algorithm: sha256WithRSAEncryption
80:d4:fc:d5:ba:f2:83:7c:68:40:03:66:93:2f:0f:64:60:44:
c8:6a:d1:23:9c:ed:4e:8e:d3:15:63:c6:34:24:37:30:8f:de:
a3:31:8f:2b:f1:3f:54:a9:d9:98:02:6b:ee:b8:39:c2:71:5b:
c0:52:8d:b5:49:20:d5:78:54:6c:6c:43:0a:43:5e:b2:46:68:
7c:38:2e:33:0f:27:f0:db:36:4c:22:38:a8:f4:e3:9a:fe:aa:
7c:35:02:e1:30:2e:dc:3a:6f:d4:e8:53:26:bf:a0:56:e9:e0:
86:97:62:b8:66:fc:4b:55:11:72:53:07:2b:c3:25:dc:22:be:
60:ff:f3:c3:ec:44:dd:e5:4a:bc:48:fb:73:ff:2b:d5:c9:3f:
61:40:e8:1d:50:8d:6d:75:27:b9:9a:d4:45:70:a6:d8:46:6e:
5d:ff:ca:f0:39:b1:2b:72:0d:cd:50:8a:f3:4b:92:07:07:02:
f7:a6:0d:27:16:68:a4:8c:1b:ef:3f:02:56:54:73:10:dc:f6:
54:40:23:73:01:3c:f2:12:07:cf:e5:c3:b7:a6:05:c2:ee:8f:
2a:80:b5:ec:29:97:04:13:e0:01:9a:97:1c:30:33:f3:dd:a1:
f5:78:5d:ab:f7:d6:3b:e1:a8:15:5f:58:b9:8f:50:24:30:0d:
64:33:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 05:52:51 2024 by rpki-client on console-ams.rpki-client.org