Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e37362e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e37362e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: VHqt4GQDh51lRSjnLbZyEGwvOZF0/L6cdvCdiyM4U/w=
Subject key identifier: 54:19:E9:C5:90:46:23:03:97:55:35:EA:14:6D:9E:47:E1:76:27:1D
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 41BA299C5727B60D06290986293721DB647E4903
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e37362e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:14 +0000
ROA not before: Mon 01 Jul 2024 00:57:14 +0000
ROA not after: Mon 30 Jun 2025 01:02:14 +0000
asID: 135478
IP address blocks: 101.128.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ba:29:9c:57:27:b6:0d:06:29:09:86:29:37:21:db:64:7e:49:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:14 2024 GMT
Not After : Jun 30 01:02:14 2025 GMT
Subject: CN=5419E9C590462303975535EA146D9E47E176271D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:46:43:81:a7:ca:6d:a8:e0:d3:9e:21:14:
ff:88:16:74:f9:27:44:de:85:9c:be:c5:7a:5c:d2:
d6:d4:00:b9:8f:dc:9d:2f:82:32:d6:3a:af:05:45:
13:f7:61:80:92:34:64:4b:22:8b:b7:56:73:95:8c:
93:3a:bb:58:50:88:92:05:d7:95:a1:8f:61:f0:cd:
c0:d6:be:06:a3:46:8a:77:eb:fc:49:09:01:eb:dd:
20:a0:68:13:5e:1e:6c:30:59:b3:30:b1:52:ea:f5:
05:87:e0:ea:51:e2:25:b2:98:0f:20:94:6c:23:5c:
dd:a0:25:49:1a:c4:4f:5b:c1:20:92:c0:f2:7e:cb:
ba:93:0b:2b:8b:74:cb:64:a5:f8:93:8c:6a:6f:f1:
ea:41:86:84:f8:03:d7:81:7e:39:d3:64:a3:9f:a0:
87:cd:a5:a3:44:cf:dd:0f:13:20:28:a5:04:a2:b1:
82:5d:f9:16:e9:3c:a0:9d:2f:da:4a:7e:a6:ba:81:
82:2e:b8:ce:b7:57:cf:2d:bc:81:fc:b2:9d:2c:55:
f7:13:ec:e0:46:56:6b:98:e4:2d:0f:c7:27:6b:6e:
6c:d6:88:0d:57:c7:35:38:a7:18:db:b4:be:33:49:
6d:b0:ba:c1:5a:3d:27:d0:37:37:e2:51:36:c2:b7:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:19:E9:C5:90:46:23:03:97:55:35:EA:14:6D:9E:47:E1:76:27:1D
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e37362e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:05:3b:0a:31:ea:d4:d1:cf:dc:16:f9:a5:ac:1e:1c:04:b1:
ed:72:46:e2:c6:4c:e6:e6:97:2b:7d:6e:14:5b:0e:88:00:55:
43:65:7e:b3:e1:b3:ad:3a:b2:b7:ff:44:3a:bf:6b:94:94:e4:
d8:c8:c3:50:6b:26:64:cf:20:c5:8a:66:4c:8d:f5:59:dd:c2:
b9:94:6d:14:95:c9:0c:bb:7a:7f:f5:5f:44:74:81:f8:32:1d:
ee:50:3e:74:40:bd:a1:a8:60:b8:23:97:e8:8e:f2:2d:90:75:
ef:fb:e1:b6:7d:f1:b7:34:df:a8:6e:75:a9:6a:1e:3f:c5:fb:
c5:c4:95:70:d1:4a:38:fc:82:61:31:8a:7a:01:20:91:48:3c:
c0:70:2d:c7:cb:b1:fe:d0:ae:f1:b6:25:87:8e:80:b4:3a:80:
bc:46:d0:04:33:f5:24:62:a5:6b:ab:90:00:9f:f6:45:fc:61:
66:bb:55:dd:2d:07:a7:12:93:87:f6:6d:02:b2:83:93:7b:d4:
48:c3:91:10:72:44:13:70:ab:8e:85:d7:a5:09:22:63:f3:98:
5c:ec:2d:50:b8:2d:18:21:0e:ed:3f:f8:9a:5a:5d:40:8f:3a:
e3:9e:55:99:83:44:f7:25:dc:34:6e:14:e8:8b:65:8c:ea:26:
4c:bf:77:d0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQbopnFcntg0GKQmGKTch22R+SQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MDEwMDU3MTRaFw0yNTA2MzAwMTAyMTRaMDMxMTAvBgNV
BAMTKDU0MTlFOUM1OTA0NjIzMDM5NzU1MzVFQTE0NkQ5RTQ3RTE3NjI3MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjB0ZDgafKbajg054hFP+IFnT5
J0TehZy+xXpc0tbUALmP3J0vgjLWOq8FRRP3YYCSNGRLIou3VnOVjJM6u1hQiJIF
15Whj2HwzcDWvgajRop36/xJCQHr3SCgaBNeHmwwWbMwsVLq9QWH4OpR4iWymA8g
lGwjXN2gJUkaxE9bwSCSwPJ+y7qTCyuLdMtkpfiTjGpv8epBhoT4A9eBfjnTZKOf
oIfNpaNEz90PEyAopQSisYJd+RbpPKCdL9pKfqa6gYIuuM63V88tvIH8sp0sVfcT
7OBGVmuY5C0PxydrbmzWiA1XxzU4pxjbtL4zSW2wusFaPSfQNzfiUTbCt40dAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVBnpxZBGIwOXVTXqFG2eR+F2Jx0wHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzNzM2MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZYBMMA0GCSqG
SIb3DQEBCwUAA4IBAQBcBTsKMerU0c/cFvmlrB4cBLHtckbixkzm5pcrfW4UWw6I
AFVDZX6z4bOtOrK3/0Q6v2uUlOTYyMNQayZkzyDFimZMjfVZ3cK5lG0UlckMu3p/
9V9EdIH4Mh3uUD50QL2hqGC4I5fojvItkHXv++G2ffG3NN+obnWpah4/xfvFxJVw
0Uo4/IJhMYp6ASCRSDzAcC3Hy7H+0K7xtiWHjoC0OoC8RtAEM/UkYqVrq5AAn/ZF
/GFmu1XdLQenEpOH9m0CsoOTe9RIw5EQckQTcKuOhdelCSJj85hc7C1QuC0YIQ7t
P/iaWl1AjzrjnlWZg0T3Jdw0bhToi2WM6iZMv3fQ
-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org