Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38302e302f32322d3234203d3e20313335343738.roa
File: 3130312e3132382e38302e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier: geYM050w19L5OP1FN+jve3wWgIob6FUYt55ZhbGHNfA=
Subject key identifier: E8:55:54:9A:84:3F:45:6D:99:07:BE:44:A7:C7:B4:5C:87:91:85:48
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 31B5C9838A1D46B1FCE0724CC252BC8EC25E70A0
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38302e302f32322d3234203d3e20313335343738.roa
Signing time: Mon 01 Jul 2024 01:02:19 +0000
ROA not before: Mon 01 Jul 2024 00:57:19 +0000
ROA not after: Mon 30 Jun 2025 01:02:19 +0000
asID: 135478
IP address blocks: 101.128.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 03:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b5:c9:83:8a:1d:46:b1:fc:e0:72:4c:c2:52:bc:8e:c2:5e:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 1 00:57:19 2024 GMT
Not After : Jun 30 01:02:19 2025 GMT
Subject: CN=E855549A843F456D9907BE44A7C7B45C87918548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:ba:56:13:19:77:fa:12:98:59:b1:50:97:
b2:3b:fd:6f:e6:5a:33:df:e1:02:f2:cd:7a:b0:e4:
01:f9:5f:91:b4:42:36:31:9a:c4:ef:fc:d7:9c:45:
55:46:20:21:b3:38:ba:0b:0e:86:72:52:46:ed:47:
88:51:e9:70:bb:fd:3a:f6:e6:7f:c6:e4:72:fd:a4:
4f:a8:ee:0b:6a:7a:a5:7f:59:47:68:8f:1d:42:b2:
b9:8b:d1:a3:0f:6c:1c:fd:b7:9e:25:b9:24:52:fd:
f5:9c:f9:7d:ca:3a:eb:b4:35:1a:bb:f4:2e:5e:e6:
08:c4:15:b0:94:29:9e:66:d2:0e:2f:27:67:71:e1:
d0:4c:c9:5b:91:22:ca:b7:d6:68:69:34:13:27:84:
d1:e7:33:73:22:85:22:d4:aa:1d:f3:fe:10:12:41:
66:57:5c:ba:ea:97:2e:5d:e8:83:c3:f2:d1:83:d6:
60:68:35:cc:76:9d:a8:a7:02:df:fd:20:e7:23:64:
0f:7e:0b:55:e7:b1:10:0f:72:aa:74:6d:57:42:2d:
87:c8:56:74:18:f7:d5:1f:b3:78:51:d8:47:c8:8a:
28:c1:a1:71:d4:df:9d:20:3b:60:46:15:5a:71:74:
36:f5:4d:8b:a3:75:72:9b:2b:74:fa:3a:0a:ed:eb:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:55:54:9A:84:3F:45:6D:99:07:BE:44:A7:C7:B4:5C:87:91:85:48
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38302e302f32322d3234203d3e20313335343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.128.80.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:a3:3b:ec:48:fd:d6:71:8a:71:fb:a6:4c:8e:b9:00:7b:52:
0b:74:14:1f:c3:d4:ff:e7:fa:eb:2f:6f:f0:46:1f:ef:67:43:
01:5e:28:6b:95:b6:51:de:26:10:88:0c:67:90:54:d7:42:7f:
35:25:34:e8:ab:ce:09:13:8a:a8:51:0b:65:72:da:3e:1d:25:
72:db:4b:75:7b:22:f3:47:c7:7b:3e:5e:6b:2a:91:76:29:0e:
7e:e8:a9:51:91:f7:8c:af:0f:a1:6a:bd:b2:4b:d9:b4:d3:5b:
5a:29:a4:bd:ef:8d:89:6b:df:c0:64:9a:24:6d:91:47:8c:bd:
0e:49:50:41:f4:fb:26:7b:4d:7a:86:9e:b3:9a:82:fd:5a:f1:
c8:94:4d:d1:b4:d0:72:b5:eb:34:63:3a:f3:0b:cf:49:d9:c0:
06:bd:8c:b3:40:69:ac:94:71:ea:1c:8e:f8:04:7e:b6:61:61:
f0:5d:ee:b2:23:6d:a7:86:9f:0b:c6:e6:3d:dd:9a:44:77:81:
4c:95:fa:fb:17:65:67:ae:9d:29:27:78:84:21:9b:ad:4d:d4:
b0:61:02:6a:61:27:4f:c7:7e:85:e2:02:46:99:f4:b4:81:6f:
1d:79:45:8a:15:f4:5c:5c:54:dd:2d:43:f8:ae:7f:80:ab:a0:
da:bb:57:8f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMbXJg4odRrH84HJMwlK8jsJecKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MDEwMDU3MTlaFw0yNTA2MzAwMTAyMTlaMDMxMTAvBgNV
BAMTKEU4NTU1NDlBODQzRjQ1NkQ5OTA3QkU0NEE3QzdCNDVDODc5MTg1NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMLpWExl3+hKYWbFQl7I7/W/m
WjPf4QLyzXqw5AH5X5G0QjYxmsTv/NecRVVGICGzOLoLDoZyUkbtR4hR6XC7/Tr2
5n/G5HL9pE+o7gtqeqV/WUdojx1CsrmL0aMPbBz9t54luSRS/fWc+X3KOuu0NRq7
9C5e5gjEFbCUKZ5m0g4vJ2dx4dBMyVuRIsq31mhpNBMnhNHnM3MihSLUqh3z/hAS
QWZXXLrqly5d6IPD8tGD1mBoNcx2nainAt/9IOcjZA9+C1XnsRAPcqp0bVdCLYfI
VnQY99Ufs3hR2EfIiijBoXHU350gO2BGFVpxdDb1TYujdXKbK3T6Ogrt68GnAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6FVUmoQ/RW2ZB75Ep8e0XIeRhUgwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzODMwMmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZYBQMA0GCSqG
SIb3DQEBCwUAA4IBAQC5ozvsSP3WcYpx+6ZMjrkAe1ILdBQfw9T/5/rrL2/wRh/v
Z0MBXihrlbZR3iYQiAxnkFTXQn81JTToq84JE4qoUQtlcto+HSVy20t1eyLzR8d7
Pl5rKpF2KQ5+6KlRkfeMrw+har2yS9m001taKaS9742Ja9/AZJokbZFHjL0OSVBB
9Psme016hp6zmoL9WvHIlE3RtNBytes0YzrzC89J2cAGvYyzQGmslHHqHI74BH62
YWHwXe6yI22nhp8LxuY93ZpEd4FMlfr7F2Vnrp0pJ3iEIZutTdSwYQJqYSdPx36F
4gJGmfS0gW8deUWKFfRcXFTdLUP4rn+Aq6Dau1eP
-----END CERTIFICATE-----
Generated at Sun Jul 21 04:53:55 2024 by rpki-client on console-fra.rpki-client.org