Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e20333936393832.roa
File: 3130312e35302e31362e302f32302d3234203d3e20333936393832.roa (raw, json)
Hash identifier: eFq4SXPDwUu7MYD05VmmWlRzB4b8petSyP7r7Tf8VXA=
Subject key identifier: 8D:E0:5D:77:22:6E:B5:0A:79:66:59:FE:07:5A:AB:18:13:21:41:43
Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial: 19FDA62AA20125C12DFE7002CD181B0625D94115
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e20333936393832.roa
Signing time: Mon 29 Jul 2024 15:27:36 +0000
ROA not before: Mon 29 Jul 2024 15:22:36 +0000
ROA not after: Mon 28 Jul 2025 15:27:36 +0000
asID: 396982
IP address blocks: 101.50.16.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 03:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:fd:a6:2a:a2:01:25:c1:2d:fe:70:02:cd:18:1b:06:25:d9:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Validity
Not Before: Jul 29 15:22:36 2024 GMT
Not After : Jul 28 15:27:36 2025 GMT
Subject: CN=8DE05D77226EB50A796659FE075AAB1813214143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:42:8c:61:10:f4:13:e8:7e:20:dc:21:15:
99:93:4d:52:1b:00:91:58:bf:33:bd:9f:4c:44:d3:
00:5c:11:eb:1a:79:fc:56:b3:00:90:97:fe:a6:fb:
65:51:5f:fe:6a:4f:94:47:73:4a:3c:5b:01:fb:b3:
3f:c6:64:ef:75:4e:ea:97:6e:05:94:e0:f7:8a:c9:
07:92:48:a0:f4:ee:9c:33:4a:5a:f4:43:c2:b2:ae:
49:70:77:85:5f:15:c1:d1:a2:57:e5:21:fc:1c:49:
c6:a4:ed:6a:f9:02:a9:cb:e4:d6:98:be:f2:3b:4f:
db:79:9b:bf:cd:9f:94:e5:23:49:fb:4f:07:d7:49:
f5:85:65:89:6f:14:4b:d4:a9:09:19:4b:85:c9:c5:
49:62:00:6b:4c:cf:5d:9b:fe:97:33:5d:76:17:79:
9b:32:8e:1d:d9:be:ff:af:4a:3c:3a:61:55:51:d7:
f5:2c:95:31:e6:52:18:2b:aa:da:4f:fe:a9:c8:32:
2b:28:af:2e:51:00:ad:d9:fe:cc:d2:4d:87:c8:1f:
0f:8d:a4:8f:2d:d5:1f:f3:92:11:fa:7d:86:66:38:
b6:db:1e:b4:c2:22:38:a2:41:03:d3:e9:4b:c2:37:
58:7e:05:cb:c6:17:25:0b:45:e2:4f:52:c9:3b:22:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:5D:77:22:6E:B5:0A:79:66:59:FE:07:5A:AB:18:13:21:41:43
X509v3 Authority Key Identifier:
keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32302d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
101.50.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:3f:0d:da:d9:e6:b5:65:fb:ed:50:fe:97:c1:ff:07:81:35:
77:ba:c9:3a:72:e4:a8:60:b8:29:db:46:55:97:ed:b4:56:ea:
61:44:4b:cb:c4:8c:50:ca:67:7e:4c:d6:32:38:7f:2e:9f:4e:
96:f0:db:69:89:01:9f:ce:f5:69:c9:2c:02:8c:7b:56:51:68:
ea:0b:52:74:88:f9:48:59:3b:aa:85:92:c3:80:03:46:6c:ea:
e6:57:0a:89:e0:d1:d9:75:ed:af:22:05:ca:d1:34:c5:7b:aa:
61:9d:6d:41:51:ea:ce:f0:38:2d:23:32:19:a4:79:c7:9a:73:
82:03:c6:3d:06:a8:a2:42:fa:d8:b7:64:ae:71:94:d3:0f:c0:
e5:bd:c0:72:8f:9e:8b:5a:82:44:75:42:11:ec:0e:bf:3c:9a:
4b:99:a8:62:96:c2:01:fb:97:ef:da:f9:bd:a7:d7:3e:f2:6a:
d7:c1:12:77:c2:1f:62:be:34:a8:c5:8c:d2:77:79:ef:56:43:
7f:c8:aa:c3:c3:72:01:fd:a3:65:49:33:85:87:e6:cc:27:c7:
e3:f0:45:91:7f:69:b4:ef:2d:5a:07:87:12:df:5b:45:17:b2:
5a:95:ac:d3:54:8f:50:d2:e2:17:5d:20:0a:20:82:99:10:f5:
c8:95:98:b5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGf2mKqIBJcEt/nACzRgbBiXZQRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yNDA3MjkxNTIyMzZaFw0yNTA3MjgxNTI3MzZaMDMxMTAvBgNV
BAMTKDhERTA1RDc3MjI2RUI1MEE3OTY2NTlGRTA3NUFBQjE4MTMyMTQxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvUEKMYRD0E+h+INwhFZmTTVIb
AJFYvzO9n0xE0wBcEesaefxWswCQl/6m+2VRX/5qT5RHc0o8WwH7sz/GZO91TuqX
bgWU4PeKyQeSSKD07pwzSlr0Q8Kyrklwd4VfFcHRolflIfwcScak7Wr5AqnL5NaY
vvI7T9t5m7/Nn5TlI0n7TwfXSfWFZYlvFEvUqQkZS4XJxUliAGtMz12b/pczXXYX
eZsyjh3Zvv+vSjw6YVVR1/UslTHmUhgrqtpP/qnIMisory5RAK3Z/szSTYfIHw+N
pI8t1R/zkhH6fYZmOLbbHrTCIjiiQQPT6UvCN1h+BcvGFyULReJPUsk7IoptAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjeBddyJutQp5Zln+B1qrGBMhQUMwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzUzMDJlMzEzNjJlMzAyZjMyMzAy
ZDMyMzQyMDNkM2UyMDMzMzkzNjM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGUyEDANBgkqhkiG
9w0BAQsFAAOCAQEAOj8N2tnmtWX77VD+l8H/B4E1d7rJOnLkqGC4KdtGVZfttFbq
YURLy8SMUMpnfkzWMjh/Lp9OlvDbaYkBn871acksAox7VlFo6gtSdIj5SFk7qoWS
w4ADRmzq5lcKieDR2XXtryIFytE0xXuqYZ1tQVHqzvA4LSMyGaR5x5pzggPGPQao
okL62LdkrnGU0w/A5b3Aco+ei1qCRHVCEewOvzyaS5moYpbCAfuX79r5vafXPvJq
18ESd8IfYr40qMWM0nd571ZDf8iqw8NyAf2jZUkzhYfmzCfH4/BFkX9ptO8tWgeH
Et9bRReyWpWs01SPUNLiF10gCiCCmRD1yJWYtQ==
-----END CERTIFICATE-----
Generated at Tue Jul 30 04:54:06 2024 by rpki-client on console-ams.rpki-client.org