Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e20323632393239.roa
File: 3130312e35302e31362e302f32302d3234203d3e20323632393239.roa (raw, json)
Hash identifier: gFTD7J55WmnzmnmYCe8e21eub5dn2fS1grZcqXgPmbw=
Subject key identifier: D2:C5:23:83:CF:4A:2B:14:E1:7E:D0:DA:C8:77:2F:E5:DD:D4:1A:88
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 7D3B3D3FA4D54B8847BD33A60D66575014D22FA0
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e20323632393239.roa
Signing time: Sun 21 Jul 2024 03:15:22 +0000
ROA not before: Sun 21 Jul 2024 03:10:22 +0000
ROA not after: Sun 20 Jul 2025 03:15:22 +0000
asID: 262929
IP address blocks: 101.50.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 17:15:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:3b:3d:3f:a4:d5:4b:88:47:bd:33:a6:0d:66:57:50:14:d2:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 21 03:10:22 2024 GMT
Not After : Jul 20 03:15:22 2025 GMT
Subject: CN=D2C52383CF4A2B14E17ED0DAC8772FE5DDD41A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:68:09:7f:2b:23:8b:61:45:88:9d:8b:60:
51:3e:9e:34:53:11:a3:1f:6d:36:4d:8f:54:f0:8c:
3e:be:9f:c0:bc:0b:99:4c:04:0e:fb:88:cd:4c:8f:
4c:88:15:c7:a1:d6:81:3e:71:22:aa:2c:c4:8c:27:
2e:a3:44:ab:c2:da:58:32:7d:8c:62:a9:d8:b6:0c:
73:c8:52:fb:43:98:39:44:b9:59:5e:ea:74:5b:30:
f3:f8:f3:82:e7:1a:34:4b:31:15:c9:77:fa:cc:9f:
ae:6d:73:7d:5c:e1:64:c4:31:db:fe:27:a7:11:3f:
10:f2:e5:2d:2d:27:f2:ba:26:de:64:16:de:a1:bd:
57:f8:be:37:00:52:15:93:49:56:11:d2:20:e0:9f:
15:be:a9:53:c9:d8:40:ff:22:85:02:9e:bf:77:41:
11:f0:bf:2c:2f:b5:86:5f:27:58:5d:4d:34:ef:bd:
4b:e3:65:7d:21:24:8a:90:35:95:78:2f:ba:76:3e:
15:40:c6:2c:e4:75:ba:b0:9c:f8:2e:da:31:ac:16:
96:d2:5f:35:b4:ef:a3:40:58:19:67:2d:95:14:fb:
0e:1a:d7:18:50:c7:d1:d6:24:fb:98:1e:0e:8e:d5:
8e:3e:10:01:ac:2d:b7:62:6f:a6:14:7f:fa:f0:e7:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:23:83:CF:4A:2B:14:E1:7E:D0:DA:C8:77:2F:E5:DD:D4:1A:88
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e20323632393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.50.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:c2:fb:fc:2f:05:d0:e6:95:34:47:db:81:f2:0a:a6:7b:bc:
ce:e2:84:7a:2c:da:27:3e:56:89:d8:78:bc:f5:22:5f:1a:7e:
71:4c:4a:c9:45:07:72:d2:7d:1e:7c:0e:30:65:7f:cd:18:66:
c8:d1:d6:c4:d6:43:1b:a3:15:07:c5:eb:3e:15:3a:e1:61:5a:
97:d8:49:8a:18:e6:f6:d3:8c:e8:12:d2:26:a5:e5:85:58:86:
37:df:be:d8:57:3f:3a:84:ca:f6:0d:81:b4:c3:41:13:d3:2b:
90:d7:21:1b:80:49:9c:10:23:cc:5e:0a:31:6d:fe:c2:4c:c2:
dd:57:9d:02:35:66:b0:43:65:01:1f:31:8f:bd:3b:7f:f9:9f:
e1:39:66:f2:53:4a:7c:9a:54:6a:17:0d:3c:3b:2f:da:92:66:
71:a0:12:0c:2e:79:e1:2e:8c:42:49:a9:17:70:0f:4d:60:95:
4b:9d:ad:b8:72:52:6a:81:4f:3d:5b:2c:52:02:c7:70:e2:df:
45:52:76:5e:b3:03:f7:19:6c:48:4b:9a:b1:1f:98:f3:1e:7c:
d4:12:09:c0:50:da:0e:37:16:8f:68:59:fe:96:e8:36:e3:7f:
e6:9a:73:bd:5f:c3:6a:22:ae:30:94:95:1d:88:85:ea:1c:ae:
8c:29:7b:04
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfTs9P6TVS4hHvTOmDWZXUBTSL6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MjEwMzEwMjJaFw0yNTA3MjAwMzE1MjJaMDMxMTAvBgNV
BAMTKEQyQzUyMzgzQ0Y0QTJCMTRFMTdFRDBEQUM4NzcyRkU1RERENDFBODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhGgJfysji2FFiJ2LYFE+njRT
EaMfbTZNj1TwjD6+n8C8C5lMBA77iM1Mj0yIFceh1oE+cSKqLMSMJy6jRKvC2lgy
fYxiqdi2DHPIUvtDmDlEuVle6nRbMPP484LnGjRLMRXJd/rMn65tc31c4WTEMdv+
J6cRPxDy5S0tJ/K6Jt5kFt6hvVf4vjcAUhWTSVYR0iDgnxW+qVPJ2ED/IoUCnr93
QRHwvywvtYZfJ1hdTTTvvUvjZX0hJIqQNZV4L7p2PhVAxizkdbqwnPgu2jGsFpbS
XzW076NAWBlnLZUU+w4a1xhQx9HWJPuYHg6O1Y4+EAGsLbdib6YUf/rw5zVfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU0sUjg89KKxThftDayHcv5d3UGogwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzUzMDJlMzEzNjJlMzAyZjMyMzAy
ZDMyMzQyMDNkM2UyMDMyMzYzMjM5MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGUyEDANBgkqhkiG
9w0BAQsFAAOCAQEAD8L7/C8F0OaVNEfbgfIKpnu8zuKEeizaJz5Widh4vPUiXxp+
cUxKyUUHctJ9HnwOMGV/zRhmyNHWxNZDG6MVB8XrPhU64WFal9hJihjm9tOM6BLS
JqXlhViGN9++2Fc/OoTK9g2BtMNBE9MrkNchG4BJnBAjzF4KMW3+wkzC3VedAjVm
sENlAR8xj707f/mf4Tlm8lNKfJpUahcNPDsv2pJmcaASDC554S6MQkmpF3APTWCV
S52tuHJSaoFPPVssUgLHcOLfRVJ2XrMD9xlsSEuasR+Y8x581BIJwFDaDjcWj2hZ
/pboNuN/5ppzvV/DaiKuMJSVHYiF6hyujCl7BA==
-----END CERTIFICATE-----
Generated at Mon Jul 22 19:51:39 2024 by rpki-client on console-ams.rpki-client.org