Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132302e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e3132302e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: s2kAl9Tm9OPVYp6WVIJjHWIUWs+sUIZwJYaAi3TtwN0=
Subject key identifier: EF:C7:C6:E5:E1:B3:11:95:1A:43:F9:56:BA:AF:E5:07:94:DE:FD:27
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 0FAEF84E0958A88E97C42EACB02A76AA5CB3C1BE
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132302e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:16 +0000
ROA not before: Mon 01 Jul 2024 00:57:16 +0000
ROA not after: Mon 30 Jun 2025 01:02:16 +0000
asID: 135478
IP address blocks: 101.128.120.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ae:f8:4e:09:58:a8:8e:97:c4:2e:ac:b0:2a:76:aa:5c:b3:c1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:16 2024 GMT
Not After : Jun 30 01:02:16 2025 GMT
Subject: CN=EFC7C6E5E1B311951A43F956BAAFE50794DEFD27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:c3:3b:1e:57:01:c2:d4:95:4b:60:3e:37:
cf:ce:6e:01:cd:df:d5:ad:b1:80:4b:52:1a:ed:bd:
4d:aa:84:68:a8:12:46:38:74:a5:17:af:44:04:67:
de:d1:14:50:b8:ef:f3:5c:38:83:e3:13:57:9e:3c:
a0:18:5a:9c:29:d9:10:54:22:a0:c0:6e:ee:ba:ba:
f9:cb:0a:4d:81:37:6d:86:4e:be:35:ca:f9:92:dc:
2c:4a:60:9f:f7:ab:76:03:cb:80:ff:95:df:92:aa:
7b:5d:7f:ac:a6:65:82:8b:a4:ce:dc:a8:5d:7e:13:
0a:ea:a6:fd:9e:a7:92:d9:95:65:81:8e:ef:9a:7b:
00:fc:a4:8c:81:53:0d:09:0e:e2:37:a7:4c:15:11:
7e:e2:5a:f1:9c:06:63:88:f9:6c:ab:99:35:66:b5:
6e:89:b9:78:9c:8d:26:dc:da:74:26:42:01:19:a2:
a1:95:bc:6a:2c:49:1f:9f:b7:b9:06:47:f7:40:30:
15:71:c5:77:d4:6e:9b:d5:f8:f4:d6:b8:e5:30:37:
a7:13:e5:e6:e8:1b:63:b4:3c:6e:d8:3f:43:ad:22:
ac:58:b3:b9:bd:e7:3d:2e:42:64:4d:00:bd:b6:ca:
ec:76:47:c7:53:ec:99:42:b4:20:20:b0:a9:76:ea:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C7:C6:E5:E1:B3:11:95:1A:43:F9:56:BA:AF:E5:07:94:DE:FD:27
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132302e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:76:95:e3:c3:ce:c6:ad:b2:ac:3e:69:9e:b6:27:c4:bf:da:
d4:c4:ca:8b:73:4d:af:1c:8f:ca:d0:f7:98:f8:e1:23:3e:48:
c1:86:40:c1:00:78:bd:e1:d1:cc:a4:8e:64:fb:9e:fa:86:98:
05:70:3f:1f:e4:66:4b:98:51:ad:48:91:1d:b8:1b:ab:d1:8a:
59:d6:60:c9:12:ca:82:45:48:be:13:4e:fb:d9:6a:3f:79:3e:
29:03:33:0f:00:b5:57:5f:5a:74:cb:ed:af:bd:3c:85:46:95:
82:de:d2:10:a6:52:fa:2d:30:d3:63:3a:cc:c8:48:82:ed:67:
17:68:44:f1:41:e4:4a:a2:95:68:d7:c5:3d:a9:7c:91:36:e5:
f8:a2:12:87:97:08:00:93:b7:1e:14:0d:a0:e9:b3:9d:48:e4:
9f:8f:f7:5c:a7:91:45:6f:03:5d:e7:14:3b:b9:46:c5:17:a2:
dc:5e:b0:d7:d5:7b:84:19:c5:f9:81:1a:05:e7:01:92:74:0c:
70:f4:7b:d3:b1:29:f6:10:a4:e8:b1:a2:bb:32:d9:28:c9:22:
5e:9f:d4:f5:c5:39:d4:ef:b4:27:00:10:09:1a:6d:68:d4:43:
78:54:9d:0a:06:a0:18:b2:06:72:e4:28:26:03:9a:f0:64:8d:
20:46:25:aa
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUD674TglYqI6XxC6ssCp2qlyzwb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MDEwMDU3MTZaFw0yNTA2MzAwMTAyMTZaMDMxMTAvBgNV
BAMTKEVGQzdDNkU1RTFCMzExOTUxQTQzRjk1NkJBQUZFNTA3OTRERUZEMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCos8M7HlcBwtSVS2A+N8/ObgHN
39WtsYBLUhrtvU2qhGioEkY4dKUXr0QEZ97RFFC47/NcOIPjE1eePKAYWpwp2RBU
IqDAbu66uvnLCk2BN22GTr41yvmS3CxKYJ/3q3YDy4D/ld+Sqntdf6ymZYKLpM7c
qF1+Ewrqpv2ep5LZlWWBju+aewD8pIyBUw0JDuI3p0wVEX7iWvGcBmOI+WyrmTVm
tW6JuXicjSbc2nQmQgEZoqGVvGosSR+ft7kGR/dAMBVxxXfUbpvV+PTWuOUwN6cT
5eboG2O0PG7YP0OtIqxYs7m95z0uQmRNAL22yux2R8dT7JlCtCAgsKl26m+nAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU78fG5eGzEZUaQ/lWuq/lB5Te/ScwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzMTMyMzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJlgHgwDQYJ
KoZIhvcNAQELBQADggEBAJ52lePDzsatsqw+aZ62J8S/2tTEyotzTa8cj8rQ95j4
4SM+SMGGQMEAeL3h0cykjmT7nvqGmAVwPx/kZkuYUa1IkR24G6vRilnWYMkSyoJF
SL4TTvvZaj95PikDMw8AtVdfWnTL7a+9PIVGlYLe0hCmUvotMNNjOszISILtZxdo
RPFB5EqilWjXxT2pfJE25fiiEoeXCACTtx4UDaDps51I5J+P91ynkUVvA13nFDu5
RsUXotxesNfVe4QZxfmBGgXnAZJ0DHD0e9OxKfYQpOixorsy2SjJIl6f1PXFOdTv
tCcAEAkabWjUQ3hUnQoGoBiyBnLkKCYDmvBkjSBGJao=
-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org