Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66363a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: keGWeR6Xm+EE+ZbGb01JWa9Yl66YkrRrdPdHSnqjvDk=
Subject key identifier: EC:15:AB:40:50:96:85:AD:FD:BD:3F:E1:13:CF:86:AA:E8:8C:F9:96
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 095C3A2F6DDF767D963D1333F7D8229AAA66A56D
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66363a3a2f34382d3438203d3e203539323832.roa
Signing time: Sun 13 Jul 2025 11:46:13 +0000
ROA not before: Sun 13 Jul 2025 11:41:13 +0000
ROA not after: Sun 12 Jul 2026 11:46:13 +0000
asID: 59282
IP address blocks: 2400:d680:f6::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 20 Jul 2025 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5c:3a:2f:6d:df:76:7d:96:3d:13:33:f7:d8:22:9a:aa:66:a5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Jul 13 11:41:13 2025 GMT
Not After : Jul 12 11:46:13 2026 GMT
Subject: CN=EC15AB40509685ADFDBD3FE113CF86AAE88CF996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:eb:09:a7:a0:fb:bc:9a:a1:e8:9f:c9:60:
93:34:c6:b0:a6:a1:51:df:3a:31:d9:08:6f:d4:a2:
eb:ca:1a:34:6d:a4:81:af:bc:18:6a:9b:36:cf:54:
a6:0d:bc:d9:87:8b:62:a5:80:88:ab:9e:c0:a6:9a:
d9:cb:f4:e7:64:0d:90:41:e2:6e:52:6b:93:91:ec:
aa:6a:e6:86:50:86:39:ef:9b:ff:86:43:c9:f1:0b:
02:bd:53:fb:cc:f6:3e:b1:f5:98:33:d9:cb:1e:94:
39:69:2c:43:86:98:a7:0f:ac:31:48:b2:ec:4f:47:
f5:7e:a9:30:5c:db:48:93:64:22:58:01:24:a2:16:
fc:65:fb:de:0b:21:a0:60:fb:28:83:57:1b:66:29:
de:65:c5:46:64:89:bb:cd:22:68:5b:0b:78:12:a8:
4f:95:7a:8d:84:24:11:1b:99:ef:c4:41:1c:b3:7c:
ce:cf:48:70:c1:23:b9:7b:0c:2e:e1:4d:5d:4c:bf:
41:a0:b1:c8:7c:b5:7f:03:2f:07:3b:8e:fc:e0:16:
fa:a7:d9:b6:f4:6e:05:d2:94:d6:20:43:a6:4d:34:
57:a3:0c:74:0c:03:7a:e4:e0:27:c6:34:a0:c3:38:
80:16:13:54:19:be:d7:20:47:85:bd:c2:e8:c1:4c:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:15:AB:40:50:96:85:AD:FD:BD:3F:E1:13:CF:86:AA:E8:8C:F9:96
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66363a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:f6::/48
Signature Algorithm: sha256WithRSAEncryption
05:fe:ca:62:11:df:5d:4e:ef:95:c8:1a:b9:fb:49:e4:69:9a:
5c:17:ac:a9:88:88:d0:f8:26:a6:8e:be:0d:8d:39:e5:7e:6c:
47:98:d6:01:82:b4:14:d2:5a:fb:ad:bc:6c:e2:ae:de:8d:39:
90:8a:44:6a:36:12:0c:06:cb:25:a1:6c:0c:cd:43:22:62:57:
47:21:04:48:1c:56:9b:4a:ff:39:75:13:81:c4:6c:0f:13:d9:
23:75:b2:ee:62:f2:95:f4:b6:6d:43:4c:8d:e3:63:97:c1:a4:
9e:6f:a4:b1:88:11:7f:7c:f4:0b:6e:3b:de:fe:d6:a0:8c:df:
30:cf:1a:a7:94:5d:26:5b:9c:44:13:2c:f4:87:7f:ea:51:4f:
98:32:6f:6d:15:1d:0a:cd:36:dd:c2:61:a2:c5:c5:93:48:de:
a0:cc:12:56:f6:3a:d7:6b:df:cf:93:39:09:57:22:6e:98:8f:
c5:8c:6d:1d:43:e8:96:35:c2:d2:f3:19:da:c0:1a:43:4a:23:
27:90:f3:e4:64:7e:03:ae:10:48:6f:30:f7:8a:a9:19:e9:76:
17:f2:e2:fe:64:dd:0e:88:7a:27:9c:c9:c0:2d:75:d6:c8:bb:
c9:03:06:55:0d:01:e8:d0:fb:55:19:b4:5e:8c:80:7e:39:36:
cd:2a:14:40
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUCVw6L23fdn2WPRMz99gimqpmpW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yNTA3MTMxMTQxMTNaFw0yNjA3MTIxMTQ2MTNaMDMxMTAvBgNV
BAMTKEVDMTVBQjQwNTA5Njg1QURGREJEM0ZFMTEzQ0Y4NkFBRTg4Q0Y5OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJOsJp6D7vJqh6J/JYJM0xrCm
oVHfOjHZCG/UouvKGjRtpIGvvBhqmzbPVKYNvNmHi2KlgIirnsCmmtnL9OdkDZBB
4m5Sa5OR7Kpq5oZQhjnvm/+GQ8nxCwK9U/vM9j6x9Zgz2cselDlpLEOGmKcPrDFI
suxPR/V+qTBc20iTZCJYASSiFvxl+94LIaBg+yiDVxtmKd5lxUZkibvNImhbC3gS
qE+Veo2EJBEbme/EQRyzfM7PSHDBI7l7DC7hTV1Mv0Ggsch8tX8DLwc7jvzgFvqn
2bb0bgXSlNYgQ6ZNNFejDHQMA3rk4CfGNKDDOIAWE1QZvtcgR4W9wujBTE4jAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU7BWrQFCWha39vT/hE8+GquiM+ZYwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhNjYzNjNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAAPYw
DQYJKoZIhvcNAQELBQADggEBAAX+ymIR311O75XIGrn7SeRpmlwXrKmIiND4JqaO
vg2NOeV+bEeY1gGCtBTSWvutvGzirt6NOZCKRGo2EgwGyyWhbAzNQyJiV0chBEgc
VptK/zl1E4HEbA8T2SN1su5i8pX0tm1DTI3jY5fBpJ5vpLGIEX989AtuO97+1qCM
3zDPGqeUXSZbnEQTLPSHf+pRT5gyb20VHQrNNt3CYaLFxZNI3qDMElb2Otdr38+T
OQlXIm6Yj8WMbR1D6JY1wtLzGdrAGkNKIyeQ8+RkfgOuEEhvMPeKqRnpdhfy4v5k
3Q6IeiecycAtddbIu8kDBlUNAejQ+1UZtF6MgH45Ns0qFEA=
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:08:07 2025 by rpki-client