Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3131392e322e36342e302f31392d3139203d3e20313331373034.roa
File: 3131392e322e36342e302f31392d3139203d3e20313331373034.roa (raw, json)
Hash identifier: 3OsDeHkNucbyDbdzfmyFYoiizgBvhTcIhYB5Uh6RzTc=
Subject key identifier: E4:86:46:A1:E0:FD:C1:0E:FD:8E:74:F1:39:20:7A:7E:B9:A1:59:96
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 30BA7EE475922AC18A2D51334FA0CBFFF8AC59FD
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3131392e322e36342e302f31392d3139203d3e20313331373034.roa
Signing time: Wed 17 Jan 2024 06:00:01 +0000
ROA not before: Wed 17 Jan 2024 05:55:01 +0000
ROA not after: Wed 15 Jan 2025 06:00:01 +0000
asID: 131704
IP address blocks: 119.2.64.0/19 maxlen: 19
Validation: Failed, certificate revoked on Wed 26 Jun 2024 02:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ba:7e:e4:75:92:2a:c1:8a:2d:51:33:4f:a0:cb:ff:f8:ac:59:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Jan 17 05:55:01 2024 GMT
Not After : Jan 15 06:00:01 2025 GMT
Subject: CN=E48646A1E0FDC10EFD8E74F139207A7EB9A15996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:26:c4:77:ca:f7:70:24:d3:33:0c:34:1c:
e7:c0:44:65:ee:ad:0b:61:7a:5d:f5:61:c6:85:21:
6e:85:e1:e8:67:e2:a7:96:05:9c:2e:0c:d4:d0:8c:
f8:a8:59:7d:9a:da:58:93:6c:b5:b2:df:e1:f6:1f:
fb:d7:ca:ce:2f:3d:d4:e1:da:eb:ad:04:49:8b:0f:
a4:0f:6f:cf:f7:a2:82:ed:73:22:5d:cc:22:97:7f:
9c:32:cf:22:aa:9f:dd:a6:ab:59:3a:7a:c4:78:5a:
35:00:a4:32:e6:23:e0:a3:79:b3:a4:35:2d:32:d5:
b3:1e:3c:98:27:11:06:eb:af:10:5d:19:85:85:6a:
a8:f0:e4:cf:48:9c:29:4c:f9:4b:1b:61:64:c7:d1:
f4:4b:d8:3e:84:5f:af:84:fc:62:28:7c:05:f8:7e:
6c:de:0f:03:83:cf:cb:b5:a0:26:87:b5:ee:76:e1:
1b:e0:57:17:5b:e5:eb:4a:de:87:89:93:05:00:fa:
81:de:a9:db:06:25:11:3a:a1:be:91:3a:92:fa:5a:
d7:e0:7e:22:ff:8b:5c:00:09:c7:ab:e2:fd:82:85:
08:40:64:10:3b:28:f0:e4:57:12:56:28:af:1f:17:
ce:42:cb:df:8a:6c:ae:21:9f:ee:36:ad:06:f3:29:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:86:46:A1:E0:FD:C1:0E:FD:8E:74:F1:39:20:7A:7E:B9:A1:59:96
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3131392e322e36342e302f31392d3139203d3e20313331373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.64.0/19
Signature Algorithm: sha256WithRSAEncryption
19:b9:6b:4f:e1:5e:e2:01:0c:f0:66:f0:03:f7:a5:7f:9f:f3:
3d:bd:8d:b9:ed:67:b6:12:25:14:96:b6:b3:7c:f6:97:14:b0:
a4:c0:40:5e:1e:ac:19:82:76:ec:b0:44:1a:3d:c3:fb:79:36:
87:e9:73:d7:35:b8:43:58:c7:66:f6:76:ce:53:61:0a:69:11:
f9:01:77:78:af:6c:5d:9d:88:e2:f5:f4:ad:8a:80:a9:1f:e6:
60:40:f0:ad:70:fa:2e:f3:06:a3:57:df:1f:65:7d:51:5f:b3:
b4:a7:d8:8a:bf:8a:13:b1:46:41:3b:6b:4f:6d:f3:80:aa:6a:
5f:30:2d:2b:7e:a7:92:af:b8:a3:87:05:91:88:66:05:26:0a:
5f:3b:c9:10:5e:28:23:49:f2:e3:ac:97:c0:ca:94:39:a7:bd:
55:6d:33:a1:ae:b5:37:1d:b7:07:51:e7:1e:e4:0b:33:68:87:
d7:57:e7:c1:18:a8:73:bc:fc:53:28:73:01:4d:99:86:27:49:
f3:fe:bf:66:9b:e3:4c:1c:06:ff:6c:44:b1:6e:22:27:45:7d:
d2:3a:23:74:c3:e9:db:27:53:a3:50:21:64:62:2b:cf:f4:62:
ea:b0:d2:11:20:5b:a2:77:10:3e:fa:a6:c2:63:da:b4:44:df:
b9:a6:17:da
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUMLp+5HWSKsGKLVEzT6DL//isWf0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx
NjM4QTcwNzAeFw0yNDAxMTcwNTU1MDFaFw0yNTAxMTUwNjAwMDFaMDMxMTAvBgNV
BAMTKEU0ODY0NkExRTBGREMxMEVGRDhFNzRGMTM5MjA3QTdFQjlBMTU5OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QCbEd8r3cCTTMww0HOfARGXu
rQthel31YcaFIW6F4ehn4qeWBZwuDNTQjPioWX2a2liTbLWy3+H2H/vXys4vPdTh
2uutBEmLD6QPb8/3ooLtcyJdzCKXf5wyzyKqn92mq1k6esR4WjUApDLmI+CjebOk
NS0y1bMePJgnEQbrrxBdGYWFaqjw5M9InClM+UsbYWTH0fRL2D6EX6+E/GIofAX4
fmzeDwODz8u1oCaHte524RvgVxdb5etK3oeJkwUA+oHeqdsGJRE6ob6ROpL6Wtfg
fiL/i1wACcer4v2ChQhAZBA7KPDkVxJWKK8fF85Cy9+KbK4hn+42rQbzKdBnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU5IZGoeD9wQ79jnTxOSB6frmhWZYwHwYDVR0j
BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC
MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4
QTcwNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzODA2MWYxLWZhMzAtNGJkNi04
MWEwLTJlYzY3MDgzNmM0Mi8wLzMxMzEzOTJlMzIyZTM2MzQyZTMwMmYzMTM5MmQz
MTM5MjAzZDNlMjAzMTMzMzEzNzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV3AkAwDQYJKoZIhvcN
AQELBQADggEBABm5a0/hXuIBDPBm8AP3pX+f8z29jbntZ7YSJRSWtrN89pcUsKTA
QF4erBmCduywRBo9w/t5Nofpc9c1uENYx2b2ds5TYQppEfkBd3ivbF2diOL19K2K
gKkf5mBA8K1w+i7zBqNX3x9lfVFfs7Sn2Iq/ihOxRkE7a09t84Cqal8wLSt+p5Kv
uKOHBZGIZgUmCl87yRBeKCNJ8uOsl8DKlDmnvVVtM6GutTcdtwdR5x7kCzNoh9dX
58EYqHO8/FMocwFNmYYnSfP+v2ab40wcBv9sRLFuIidFfdI6I3TD6dsnU6NQIWRi
K8/0Yuqw0hEgW6J3ED76psJj2rRE37mmF9o=
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:28:55 2024 by rpki-client on console-fra.rpki-client.org