Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3132382e302f31382d3234203d3e20323632393239.roa
File: 3132352e3230382e3132382e302f31382d3234203d3e20323632393239.roa (raw, json)
Hash identifier: Js90kPUhwKwwkNQFXGpaDhjFWfoplw4nW2h+RUDtJuw=
Subject key identifier: FA:6E:9B:4A:31:EB:E0:60:E9:7F:35:A9:F4:DC:A1:01:80:8C:C1:B6
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 1934537AC71B22B79BA9215D448C131A1B9EDD79
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3132382e302f31382d3234203d3e20323632393239.roa
Signing time: Sun 21 Jul 2024 03:15:41 +0000
ROA not before: Sun 21 Jul 2024 03:10:41 +0000
ROA not after: Sun 20 Jul 2025 03:15:41 +0000
asID: 262929
IP address blocks: 125.208.128.0/18 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 17:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:34:53:7a:c7:1b:22:b7:9b:a9:21:5d:44:8c:13:1a:1b:9e:dd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 21 03:10:41 2024 GMT
Not After : Jul 20 03:15:41 2025 GMT
Subject: CN=FA6E9B4A31EBE060E97F35A9F4DCA101808CC1B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:e0:9c:de:d6:ca:e7:04:49:98:b1:d0:63:
ca:b4:47:62:f8:21:fe:12:b6:4f:60:f6:fc:08:0a:
fa:9e:c2:9c:54:70:7c:6d:5d:e3:63:57:08:48:e9:
70:3d:8b:2a:b2:a3:c1:4b:55:ff:da:79:bc:1c:89:
10:06:58:8b:a0:4d:08:ea:fb:fb:23:f3:fe:99:9a:
2f:67:d6:f6:ee:0b:ae:d0:19:37:b0:1b:7d:8f:a3:
8e:d3:a6:73:86:1e:36:87:56:0a:07:51:f2:7a:a4:
0f:95:18:3a:a5:e6:50:60:68:80:1c:57:8d:2e:92:
02:1d:e7:0c:0e:e8:df:d6:92:bb:f6:b8:81:65:2f:
ce:eb:35:80:56:6a:4e:0a:47:02:1e:ed:ae:65:9d:
ed:9d:eb:c1:f0:39:c0:90:48:ef:3d:b6:49:d5:b9:
e4:5f:86:d1:0f:00:22:d0:8b:64:d1:b9:9b:2c:a9:
21:57:da:a0:47:e7:c3:cd:14:ef:33:5b:96:a5:96:
7c:37:15:53:2b:9b:12:29:f3:a2:25:07:a8:e7:bb:
54:c6:38:21:29:49:7e:f0:80:24:dc:29:65:ec:49:
47:cf:45:88:dd:6e:92:f0:45:80:7f:f1:ba:14:ad:
f6:ff:af:55:cf:9f:bf:de:9a:5b:8f:a0:ee:f5:11:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:9B:4A:31:EB:E0:60:E9:7F:35:A9:F4:DC:A1:01:80:8C:C1:B6
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3132382e302f31382d3234203d3e20323632393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.208.128.0/18
Signature Algorithm: sha256WithRSAEncryption
35:0b:b5:d4:80:d9:50:cf:a4:61:f7:07:e7:55:c4:d0:d2:49:
33:10:46:00:91:e1:4d:7a:b6:b9:e2:87:a0:8c:92:1f:ae:2d:
01:bf:c8:a5:da:39:c9:ef:05:20:42:df:a0:ae:1d:7d:d1:5a:
cc:45:72:7a:0b:9e:35:5b:56:ca:54:31:8f:9f:a4:49:98:9b:
54:dc:6e:92:34:b7:6f:b7:19:31:32:70:cd:42:40:39:a1:ad:
8a:e9:02:d5:1f:27:98:d3:a8:25:cc:45:ee:7f:6d:7e:8e:3c:
3a:a0:df:5a:90:d2:6b:79:27:3e:3e:fa:43:4e:33:d9:c7:42:
bf:bb:d6:7e:f0:c0:b8:b0:b3:35:41:0b:35:39:76:ad:15:ae:
74:1b:f2:64:2d:9d:34:b4:8a:4d:dd:75:78:4b:bd:8a:45:0f:
5b:e5:c8:17:6b:6b:d7:a8:25:b6:e0:a0:53:a3:66:72:89:5e:
eb:53:44:9a:0a:71:30:de:74:b1:68:82:d7:f1:1e:18:bc:f7:
8e:6d:1a:ac:84:b2:4a:90:7d:ec:4a:fa:ba:32:32:4b:b2:73:
a3:e1:39:4b:00:73:26:a6:e9:27:2b:2b:5e:97:ed:68:dd:83:
73:9e:34:7c:67:68:0e:fb:e9:bc:8c:3e:88:c2:f1:e0:4a:d5:
c6:be:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 20:13:51 2024 by rpki-client on console-fra.rpki-client.org