Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38302e302f32332d3234203d3e20313335343738.roa
File: 34352e3132362e38302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier: 5IjPmpST+c3hv/Curc1FO0fTBITf1eIK5xp+/bn1Opw=
Subject key identifier: F3:FD:24:A5:41:2F:20:A5:A9:09:1B:AE:A5:B9:12:8E:CC:71:26:BC
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 60FD4AC2910DFE37F47C095B3CF58CD6C76FE820
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38302e302f32332d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:14 +0000
ROA not before: Mon 01 Jul 2024 00:57:14 +0000
ROA not after: Mon 30 Jun 2025 01:02:14 +0000
asID: 135478
IP address blocks: 45.126.80.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:fd:4a:c2:91:0d:fe:37:f4:7c:09:5b:3c:f5:8c:d6:c7:6f:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:14 2024 GMT
Not After : Jun 30 01:02:14 2025 GMT
Subject: CN=F3FD24A5412F20A5A9091BAEA5B9128ECC7126BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:d5:2f:ae:52:32:c8:73:cb:a7:8d:d6:30:
d9:43:83:c0:27:bd:cf:00:a6:b9:51:6e:8a:e2:60:
b3:8d:74:6e:dc:4f:08:01:22:50:5e:15:bf:c4:28:
b9:7b:a0:b0:e9:a9:43:cf:ab:6c:77:de:8c:1d:82:
1d:2f:c8:d1:97:18:6c:92:27:fa:5a:5c:14:ad:59:
35:d9:d7:30:84:cd:49:b6:d6:0b:a5:45:2b:05:78:
af:66:3b:04:04:f2:3e:23:d0:85:83:5c:98:1c:07:
a7:1b:ce:4a:dc:8b:96:a0:0b:92:bd:ab:7e:50:b2:
5c:51:21:08:c6:5b:12:78:28:fb:17:87:f5:71:e0:
91:f3:29:91:f0:c2:22:24:8a:91:44:cc:9f:cb:61:
f2:f5:42:76:ff:d0:cb:69:38:5d:94:c7:b6:d7:00:
de:31:ef:78:e0:0b:83:b4:5f:83:6c:f1:c9:9c:b4:
ce:49:99:77:fc:3c:8f:db:30:c5:78:10:86:97:b6:
36:d5:6b:4f:f8:ba:17:20:b8:cd:bf:1a:77:ad:de:
9f:b2:a7:c4:ca:6d:5e:af:25:99:85:07:cd:49:6e:
73:c3:46:16:18:e4:8f:33:6c:a2:bf:09:ca:da:2b:
2b:d5:a1:ad:c6:01:ab:0e:2e:46:9d:a6:c6:a3:ad:
31:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:24:A5:41:2F:20:A5:A9:09:1B:AE:A5:B9:12:8E:CC:71:26:BC
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/34352e3132362e38302e302f32332d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.126.80.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:3e:86:5e:89:f3:a1:57:35:b2:d7:b8:f7:fb:4d:88:b2:0d:
fa:71:6e:4a:62:82:10:85:52:06:95:44:99:97:9b:33:9e:b7:
ea:73:86:e7:21:c7:d0:0a:c0:40:3e:98:f9:ef:cd:d6:0d:33:
cd:72:2a:8b:9d:03:09:c1:af:33:56:9d:56:bc:9e:2b:3d:c2:
00:6a:93:95:16:ad:cc:5a:2c:07:81:fe:06:0d:90:15:85:de:
69:5d:18:b0:ff:e4:7d:1c:70:da:e8:be:80:8a:97:54:34:39:
66:44:87:ac:de:d7:83:46:0c:3c:81:75:30:8e:fa:a9:c7:89:
92:db:8c:fc:25:b1:be:21:99:e4:45:0a:32:f2:81:e6:9e:58:
17:4a:71:76:4c:57:21:2f:b9:81:a7:a4:a3:ef:cf:81:b5:02:
d0:79:22:68:2c:5d:fe:45:a2:1c:c8:11:ba:5b:54:e8:14:ca:
52:b2:21:f7:0e:a1:1e:dc:b8:c2:db:97:64:c0:f7:f9:ac:22:
d2:f5:40:46:20:86:11:5a:d1:19:e7:1c:73:e1:d5:95:7b:8f:
fa:3c:f4:ef:df:72:7f:d1:9b:6b:60:aa:02:92:9b:64:17:1c:
d1:75:29:77:42:d0:b0:cb:46:5d:2f:82:4a:2d:0d:e0:e1:aa:
cf:5f:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 05:52:53 2024 by rpki-client on console-ams.rpki-client.org