Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3137362e302f32302d3234203d3e20313938393830.roa
File: 3132352e3230382e3137362e302f32302d3234203d3e20313938393830.roa (raw, json)
Hash identifier: hjx2Gvby+9FGKrSoMx0wHXjFz/u6yjL6frpv2T83pTs=
Subject key identifier: 0F:ED:B5:0E:38:66:0D:0A:D7:91:3C:34:26:B7:B2:25:0C:89:02:12
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 22130D4B5A79ADEE0189E844CE93766C0012D3D7
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3137362e302f32302d3234203d3e20313938393830.roa
Signing time: Mon 15 Jul 2024 22:21:35 +0000
ROA not before: Mon 15 Jul 2024 22:16:35 +0000
ROA not after: Mon 14 Jul 2025 22:21:35 +0000
asID: 198980
IP address blocks: 125.208.176.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 17:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:13:0d:4b:5a:79:ad:ee:01:89:e8:44:ce:93:76:6c:00:12:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 15 22:16:35 2024 GMT
Not After : Jul 14 22:21:35 2025 GMT
Subject: CN=0FEDB50E38660D0AD7913C3426B7B2250C890212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ad:4f:49:79:a0:51:a6:19:12:56:98:a9:32:
43:92:cb:78:59:ad:35:c5:cf:f2:f7:7c:0c:d4:d0:
5d:53:38:67:08:29:c6:3e:a7:ff:8b:4f:33:3c:5b:
ad:2b:54:65:02:34:78:bb:2b:e4:35:2c:93:4d:06:
6a:c2:52:81:a0:58:ab:4e:b7:8b:3e:a3:be:c3:28:
44:b2:66:f0:07:98:64:f9:bd:d5:80:0c:80:5d:47:
0f:a8:61:1c:a3:d0:1f:9d:c5:93:52:1c:aa:6f:23:
d7:ad:aa:8f:e5:34:9a:93:e5:91:bc:63:ac:85:5a:
49:4c:0e:de:ec:7f:c8:d1:fc:c2:68:28:71:7b:05:
b2:86:12:d5:e8:42:74:2e:01:b6:6a:d9:1e:a9:fd:
c4:a5:92:94:fd:6c:31:07:1e:bb:4b:0d:aa:60:c5:
52:bc:56:40:61:95:48:89:01:a0:2f:9d:1f:78:f8:
02:25:fb:ee:c5:b5:cb:17:a8:96:3a:ed:5a:2e:f5:
e5:ec:41:f8:cb:28:73:25:49:eb:91:08:3d:e0:d3:
ba:c1:ac:5b:91:81:13:71:0f:f1:0c:80:27:34:a2:
3a:43:19:cf:9e:c3:46:6a:59:84:42:e1:cf:e5:5b:
b0:be:78:cd:21:e2:93:35:fe:5c:41:45:ff:e3:1b:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:ED:B5:0E:38:66:0D:0A:D7:91:3C:34:26:B7:B2:25:0C:89:02:12
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3132352e3230382e3137362e302f32302d3234203d3e20313938393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.208.176.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:7c:9d:bf:2c:fe:4b:76:f1:52:ca:0f:d3:99:d1:f8:a0:96:
03:dd:8c:36:ce:3d:d6:a5:87:5c:a4:c9:74:28:74:01:00:ef:
1c:24:de:fe:87:00:56:96:8b:64:30:70:83:2d:58:62:ee:36:
96:a2:eb:7e:d2:f0:90:51:3e:d9:bc:66:c8:d4:a3:f4:a7:7c:
79:fd:14:4e:ac:96:af:85:ef:4d:d5:d4:8d:9d:90:62:5b:59:
71:e3:4a:8f:6a:2c:2b:da:4d:7f:3f:43:b1:39:08:a8:d4:ec:
5c:a4:04:41:26:58:84:f1:f7:ec:65:96:8c:ae:6b:57:20:8f:
c1:eb:dc:a1:01:7e:6e:8a:56:0b:e1:82:e7:bd:79:c7:21:13:
4f:c2:b9:b0:05:1e:ac:be:fd:07:41:4d:9e:d0:57:33:f5:92:
1c:c0:0a:3d:e0:74:80:75:3a:5f:2c:37:ce:83:27:2b:bf:d9:
98:82:41:b8:ad:71:6b:37:fc:b1:ee:61:d2:1c:8d:14:9d:ad:
09:5c:d6:42:d8:3a:e6:d1:35:0d:95:8c:70:bd:10:4e:57:80:
d9:35:4c:3e:e6:3b:93:6c:e6:a4:d8:d6:68:17:8a:a4:14:88:
37:c4:73:48:f5:d0:17:7d:18:b9:88:05:9e:98:30:f7:4c:bc:
c2:c8:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 19:51:39 2024 by rpki-client on console-ams.rpki-client.org