Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38342e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e38342e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: P5WPReuQZd6oDL3wQOCrjPLvcMOswLQtSr79SSKcDXo=
Subject key identifier: C5:77:51:F2:AF:40:0B:15:82:02:A4:70:41:64:95:93:B9:B5:CB:71
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 742CDBDD1724E209D8FBB08E8DD7A2D107A51FE5
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38342e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:15 +0000
ROA not before: Mon 01 Jul 2024 00:57:15 +0000
ROA not after: Mon 30 Jun 2025 01:02:15 +0000
asID: 135478
IP address blocks: 101.128.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2c:db:dd:17:24:e2:09:d8:fb:b0:8e:8d:d7:a2:d1:07:a5:1f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:15 2024 GMT
Not After : Jun 30 01:02:15 2025 GMT
Subject: CN=C57751F2AF400B158202A47041649593B9B5CB71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:d3:73:65:08:bc:05:98:89:c6:c8:5a:a6:
52:9b:45:ca:c5:87:8e:86:69:9b:f5:8d:86:f8:ec:
d0:53:a7:b9:75:f7:dd:69:b3:c5:b7:32:ac:72:eb:
a7:67:33:ec:8f:19:e0:e4:c7:0f:64:4d:b1:fe:4a:
bb:14:a4:2c:01:30:e7:9b:fa:31:06:5b:3b:c0:51:
e7:c4:d6:09:c3:81:75:c5:d4:bd:8e:49:75:aa:54:
fa:1e:3a:e7:eb:18:80:09:0e:7d:77:ef:a9:13:3a:
75:fb:03:bf:ef:1d:64:d1:fc:92:16:2b:fb:4e:3d:
f2:0e:27:9e:e2:77:e3:1d:45:ce:0e:c6:44:e5:49:
7b:ed:39:2e:e3:aa:e8:ae:9a:5c:80:68:01:40:7b:
2d:4c:32:00:54:67:20:b9:24:12:cb:9c:c6:08:8c:
6e:72:87:c6:a9:f3:81:6f:0b:6b:86:73:6b:68:5b:
94:c3:b8:55:3f:c3:c2:dc:33:05:94:c7:4a:88:ab:
71:1a:a5:75:c3:44:e8:7f:e9:09:37:99:fc:04:21:
f8:34:00:2a:56:79:f5:ff:24:57:a9:a6:84:ac:8a:
2f:6b:59:56:42:f4:46:74:fd:ac:82:ab:26:b6:62:
9f:b8:04:8a:7a:7a:4f:42:6e:af:c4:2c:49:25:e2:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:77:51:F2:AF:40:0B:15:82:02:A4:70:41:64:95:93:B9:B5:CB:71
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38342e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.84.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:6b:10:e1:34:a1:8e:e0:22:03:96:fc:52:72:7e:33:ae:e8:
a5:87:35:77:e4:ce:b3:7a:48:59:04:86:73:4a:ed:69:9f:fe:
6a:36:c5:f8:74:26:d2:3b:b9:62:40:b1:6c:8d:39:80:02:69:
95:ce:55:bb:23:80:7d:c5:d5:c9:78:9c:1e:1a:5c:c2:3c:14:
25:ac:b9:bf:2d:9d:36:ce:a8:26:5b:a7:68:95:71:2c:b8:65:
a0:4e:3e:6a:ce:c5:98:44:2c:ab:0c:b9:f8:cf:09:05:3f:a6:
10:91:f0:c6:21:9d:54:ba:32:02:fd:42:3c:11:fa:94:87:cc:
01:11:c8:09:d3:e9:e8:4d:d4:4e:79:61:39:5e:5c:83:57:b4:
3e:9f:4e:25:03:7a:21:4e:36:47:af:13:c0:08:b6:e3:47:3a:
87:1d:69:66:ab:11:cb:ff:b9:c7:81:c9:9a:98:29:2c:43:8f:
b1:14:34:43:56:29:eb:ff:bc:bb:9d:f5:d5:e7:1c:d6:c7:82:
0d:38:5f:fe:12:21:5b:bc:a7:4f:cf:75:0d:47:02:78:7d:28:
a4:23:80:34:f3:8f:73:6e:ea:08:ce:69:a0:ab:4f:d3:da:11:
ea:b2:5c:8c:12:d2:de:f8:e1:43:4b:8a:e1:bd:f6:d1:2a:be:
97:36:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org