Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e39362e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e39362e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: T9H8CmWfhtrpHx7lEKtBY0wBQbP2QPhRY6IUBWMOiGg=
Subject key identifier: F1:91:8B:B9:CE:1E:C3:DB:E7:EF:EC:B3:91:A7:30:3B:15:68:C8:8C
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 46FDC60D60287AA70A41BB3FDF14B017A5E42877
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e39362e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:17 +0000
ROA not before: Mon 01 Jul 2024 00:57:17 +0000
ROA not after: Mon 30 Jun 2025 01:02:17 +0000
asID: 135478
IP address blocks: 101.128.96.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:fd:c6:0d:60:28:7a:a7:0a:41:bb:3f:df:14:b0:17:a5:e4:28:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:17 2024 GMT
Not After : Jun 30 01:02:17 2025 GMT
Subject: CN=F1918BB9CE1EC3DBE7EFECB391A7303B1568C88C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:4b:80:fb:76:06:e3:9d:d2:a9:fb:3d:f2:
21:50:22:56:4f:ac:0c:f9:e6:96:bb:50:12:9d:50:
20:47:eb:f5:1f:9d:af:23:63:ca:5c:7c:42:1a:82:
03:f2:0f:e9:01:4d:b7:11:9c:45:ac:b2:af:b2:de:
a6:78:81:c6:27:41:73:ab:b1:bc:58:d3:8a:a6:8f:
8f:13:03:eb:bf:ff:24:82:11:c5:b9:68:41:d8:af:
7f:a7:3d:e0:0f:2c:92:ed:55:d5:b1:79:90:94:4a:
e3:e8:96:41:73:76:70:76:7b:e5:0f:c2:34:12:f9:
c2:b0:77:c1:5b:2c:68:16:a3:96:9c:71:4a:8e:f0:
f8:8e:82:8c:e0:e3:f8:4a:cd:63:e0:19:33:a8:8a:
34:2b:2f:b3:06:dd:03:1c:84:04:ca:a7:f2:03:16:
08:87:3f:f0:bb:2c:2e:80:ae:89:02:94:33:85:64:
3a:c0:11:69:80:41:f9:ee:0d:f4:96:5c:ed:84:6f:
70:d1:06:27:f8:55:06:0c:40:cf:91:b5:af:a6:7c:
3b:07:53:25:f3:b0:cf:7c:3e:61:8c:c0:2b:3d:83:
48:a8:ca:c0:91:87:13:1b:31:63:aa:b8:19:21:3b:
04:c3:df:02:2c:82:72:c9:1a:23:ad:0d:33:77:dd:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:91:8B:B9:CE:1E:C3:DB:E7:EF:EC:B3:91:A7:30:3B:15:68:C8:8C
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e39362e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.96.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:af:c1:b9:ad:eb:85:96:67:cc:02:9f:6a:cb:83:9e:bf:87:
e5:93:48:ba:d0:2c:2b:c0:14:23:bf:74:57:02:74:02:d9:bb:
32:d5:1c:40:57:58:9f:ab:1d:62:9f:bd:ae:00:c1:94:ae:9c:
27:ab:e8:26:4b:b3:25:89:c0:ee:2e:34:b1:f5:ed:6f:40:1d:
0b:9e:69:3d:51:07:82:94:f5:09:bf:ac:3b:fa:3f:69:53:e6:
26:88:02:f6:29:a0:88:0e:22:09:fc:84:f4:ac:c7:c4:7e:25:
74:9a:ae:c2:ac:6f:7e:8e:3b:5c:60:64:78:e3:64:5a:9b:f8:
da:c8:38:fb:4c:76:f9:d1:59:4a:56:dd:d0:e1:0e:cf:4b:cf:
c3:8b:f7:fc:86:62:94:f4:40:53:ee:d7:e6:95:30:f4:c5:77:
1c:66:75:b3:af:d1:a5:8f:c1:63:eb:30:94:a8:c3:49:6e:28:
97:58:2a:fe:53:14:43:99:c2:ed:d7:a0:66:60:2c:74:3e:2a:
fb:77:83:be:61:f3:d0:45:a3:4d:71:03:92:6c:81:46:f5:37:
5f:f1:03:0f:76:af:ec:a5:1d:b8:6d:67:48:d6:9a:72:ce:a1:
c8:5c:8a:5c:7e:a4:1f:61:53:63:01:ff:dd:1e:29:55:d5:e2:
55:71:f7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 05:52:51 2024 by rpki-client on console-ams.rpki-client.org