Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38302e302f32322d3234203d3e2038303735.roa
File: 34352e3132362e38302e302f32322d3234203d3e2038303735.roa (raw, json)
Hash identifier: Ar5izi+L2r02TKpYsDgUvm5Hz36DzwGC1gJQnYIknHk=
Subject key identifier: 19:84:8A:9C:FE:01:23:08:16:1F:41:06:8C:FE:C4:72:E1:33:4A:32
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 02FCB04021FC30AEC19B931417AACE48973EF7B6
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38302e302f32322d3234203d3e2038303735.roa
Signing time: Tue 30 Jul 2024 02:13:53 +0000
ROA not before: Tue 30 Jul 2024 02:08:53 +0000
ROA not after: Tue 29 Jul 2025 02:13:53 +0000
asID: 8075
IP address blocks: 45.126.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Apr 2025 03:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fc:b0:40:21:fc:30:ae:c1:9b:93:14:17:aa:ce:48:97:3e:f7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 30 02:08:53 2024 GMT
Not After : Jul 29 02:13:53 2025 GMT
Subject: CN=19848A9CFE012308161F41068CFEC472E1334A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:f4:d2:1d:5d:05:b2:59:74:2d:4f:75:29:
2d:df:79:7f:1d:85:9f:39:be:c8:14:da:e0:99:28:
a1:7f:28:1f:e3:be:43:d0:b1:ab:20:67:06:5b:42:
ab:f9:ed:4a:a8:8e:2a:80:b9:3f:f8:dc:1f:f3:31:
07:dd:d3:0b:2c:2d:4d:ed:5a:9b:f2:83:ae:c9:7d:
b7:1a:2f:e2:2b:c4:35:a3:42:2d:e1:1f:dc:61:32:
ff:78:12:02:8c:d1:ac:08:fd:21:9a:c9:1c:ab:1f:
5f:08:d2:9c:3e:e1:25:90:af:f2:63:7a:69:2c:53:
14:65:98:c9:e6:de:7e:9a:d7:05:a5:3a:fd:69:c4:
69:26:d5:22:50:cf:f3:47:e7:ef:67:9c:70:d7:ff:
1f:50:71:49:64:27:a1:34:91:e7:00:aa:ee:61:9c:
19:2a:52:e6:40:25:ad:63:12:ae:77:95:e9:cc:dd:
d1:50:de:df:de:6a:41:ed:2b:b2:bf:cc:0b:ba:3f:
ef:a8:fd:e2:f7:fd:2f:5d:9f:5b:64:5c:dd:b3:83:
97:b1:68:c8:47:12:40:12:9e:e1:55:05:45:f2:af:
91:57:59:ed:e9:41:e4:57:4a:39:d2:8b:bc:f6:9c:
ae:b4:58:a5:8f:19:48:fa:fe:4d:5f:5f:16:cf:a6:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:84:8A:9C:FE:01:23:08:16:1F:41:06:8C:FE:C4:72:E1:33:4A:32
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38302e302f32322d3234203d3e2038303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.126.80.0/22
Signature Algorithm: sha256WithRSAEncryption
39:81:02:1b:6d:46:d1:83:1b:5a:3d:7d:75:f6:24:25:75:cd:
d1:46:36:25:d1:ff:be:35:46:5a:d4:c1:09:9f:fc:57:98:99:
5b:7b:c8:3b:71:6f:7a:18:15:a8:4b:9b:06:da:19:ba:f7:e3:
2f:71:3d:92:85:13:8c:d9:76:79:01:74:17:0f:55:b8:2d:5f:
64:bc:ba:7e:98:c0:d9:5d:96:9f:9a:21:18:5c:ae:eb:1c:e6:
49:13:6c:a7:60:d9:cf:dd:ee:e6:61:bc:59:85:18:c8:2c:48:
4c:01:c6:eb:fd:cf:26:ba:57:b1:f5:3b:3f:28:09:3e:26:99:
3a:55:a8:96:51:51:47:a0:db:7c:df:1f:ae:db:cd:bd:80:ac:
9f:4d:c7:0e:00:13:c3:ee:fb:49:ed:25:45:0c:19:36:57:5f:
e8:f1:2a:44:6a:44:dc:52:06:64:24:14:7a:72:49:16:2c:0a:
a9:13:13:be:82:b8:dd:89:59:4c:2d:a0:65:3a:b9:c3:cf:f0:
cf:b9:a3:7b:ae:55:cc:d8:fd:56:fb:fa:5b:d6:86:75:91:f9:
1e:7c:f7:8b:a0:58:36:e9:38:94:7c:da:cb:7f:d5:10:69:b6:
3b:aa:06:5b:a1:1b:ff:e8:89:a3:36:f2:63:54:e8:17:62:a4:
08:d9:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:13 2025 by rpki-client