Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38382e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e38382e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: ++oXkAHM4AxROou5MR3UFaB1u81LdHZyKg80rpDbA5o=
Subject key identifier: 0F:E4:D3:19:A6:0D:E9:10:F7:69:EF:84:60:23:D3:EA:3C:C7:1C:EE
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 5A0F2ADBCCD5483D8874A1E0DE0FCD31EFC0183C
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38382e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:18 +0000
ROA not before: Mon 01 Jul 2024 00:57:18 +0000
ROA not after: Mon 30 Jun 2025 01:02:18 +0000
asID: 135478
IP address blocks: 101.128.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0f:2a:db:cc:d5:48:3d:88:74:a1:e0:de:0f:cd:31:ef:c0:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:18 2024 GMT
Not After : Jun 30 01:02:18 2025 GMT
Subject: CN=0FE4D319A60DE910F769EF846023D3EA3CC71CEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:4c:76:f8:9b:29:f9:a8:7f:fc:bd:82:e8:
1b:b2:77:dc:e0:4d:4d:49:c3:6d:6d:94:06:38:ca:
20:67:36:9a:cb:8b:d1:49:aa:35:2c:04:db:e8:c9:
ec:b4:b5:8a:c1:22:f1:01:d0:a1:1b:59:c9:0a:0f:
27:00:c1:b4:99:a3:45:6a:a7:fe:cf:9a:3d:24:bb:
a4:44:6b:35:d1:ab:f8:4d:20:e3:c9:ad:6f:5c:ec:
fd:35:58:24:32:62:22:c9:40:34:ff:87:2b:d6:95:
1d:d1:59:a7:d4:3f:be:a9:5e:51:86:25:d5:44:30:
fa:1d:9b:1c:3c:b1:16:c3:31:db:44:d7:f0:f1:3c:
01:25:cf:0c:92:3c:80:80:84:53:51:4a:bb:fd:31:
72:08:cd:e4:ca:c0:64:a7:59:a7:d9:51:f4:22:fa:
4a:21:8c:a8:b2:92:f4:b8:b5:a1:44:32:a7:40:aa:
d8:45:90:03:22:d0:14:8a:68:7a:e6:50:69:70:3f:
7b:77:06:5c:c6:4e:9e:f1:29:5e:df:36:88:0b:8c:
d9:d9:32:04:61:38:da:91:96:50:60:44:dc:a8:b5:
19:a4:32:ee:fb:6b:93:de:21:a7:d4:ad:10:ab:c0:
64:0e:39:c9:ab:44:d6:4a:87:90:37:bd:62:53:44:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:D3:19:A6:0D:E9:10:F7:69:EF:84:60:23:D3:EA:3C:C7:1C:EE
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38382e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.88.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:c0:32:a1:9d:7e:c6:52:b8:6b:04:31:cc:dd:55:1f:3a:7d:
a1:32:f8:d8:5f:3a:35:67:a9:f1:e6:74:21:3e:8a:f4:cf:55:
72:78:6c:65:bf:f3:d7:a3:ec:4c:e0:15:5d:02:1c:f7:d7:79:
a4:dc:ae:f3:b4:31:6e:eb:fe:d9:73:0d:a2:4f:b9:d9:bf:72:
2b:24:8a:b5:ea:8b:fd:e1:17:1a:e1:7e:41:30:01:fe:0b:aa:
38:bf:3e:5b:4a:e0:92:b1:a0:94:01:70:2c:fd:56:32:33:d4:
30:7f:92:30:46:3b:72:b6:96:51:05:97:8a:c6:65:ff:97:ec:
40:18:57:06:b3:72:c9:b6:ab:63:6f:9a:97:8d:6f:59:94:3b:
0b:bb:28:6f:2f:36:b1:05:0e:cb:0b:35:5a:40:4a:d1:32:7b:
02:dc:08:d1:2a:e6:b5:b5:22:75:64:10:a5:3d:bb:8c:78:59:
08:72:f0:bf:8c:f0:fc:fd:4b:8d:d5:8a:89:ea:15:1b:b6:fe:
df:27:1a:49:f2:e9:40:39:06:8d:45:fc:d2:ff:85:46:d5:44:
97:13:1b:a3:b8:08:91:75:92:22:f2:a2:97:65:ba:9f:a4:59:
9a:92:83:01:0f:b9:4e:06:16:0a:bc:1e:e0:ff:f7:00:e7:58:
8d:71:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org