Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66383a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a66383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: zJK8rIqKggvDMfiAXbd6wh+shNuRysuHPcw20U2zkE4=
Subject key identifier: 89:9D:80:59:3D:34:19:A7:37:31:F5:CC:35:99:23:0E:F7:DF:CB:B4
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 7E8965FE9221135D3D3461938A3EB85C7018F28E
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66383a3a2f34382d3438203d3e203539323832.roa
Signing time: Sun 13 Jul 2025 11:46:08 +0000
ROA not before: Sun 13 Jul 2025 11:41:08 +0000
ROA not after: Sun 12 Jul 2026 11:46:08 +0000
asID: 59282
IP address blocks: 2400:d680:f8::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 20 Jul 2025 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:89:65:fe:92:21:13:5d:3d:34:61:93:8a:3e:b8:5c:70:18:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Jul 13 11:41:08 2025 GMT
Not After : Jul 12 11:46:08 2026 GMT
Subject: CN=899D80593D3419A73731F5CC3599230EF7DFCBB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:76:70:75:db:d9:1b:1c:a0:97:45:f7:3f:
46:99:f5:17:74:da:4e:e3:9a:b6:90:0f:b6:c9:50:
24:66:8e:b0:97:db:da:e9:f4:d7:06:91:4b:bf:4a:
01:5a:0d:11:9e:34:b1:9f:88:6c:15:a8:ab:4d:bb:
3e:61:15:0b:f4:e1:10:30:d0:6f:70:aa:57:72:ce:
21:73:25:db:a4:c5:2d:3c:0b:39:82:a1:c1:fe:ba:
d2:46:d8:86:5e:b2:fd:bf:b6:5f:29:bf:7e:d5:ad:
d4:0c:4b:87:de:8b:e3:be:ae:b2:5b:80:9a:03:64:
b0:7e:5c:3f:59:db:3b:b4:7f:65:2f:76:f0:fc:f4:
c3:c4:f4:5f:f5:24:b1:45:49:ad:2b:e1:ab:de:98:
ca:56:2b:85:8f:50:85:f1:f4:fd:1a:82:42:4f:ed:
41:d3:92:60:b9:53:96:8c:08:1b:8d:9b:c0:58:83:
90:fb:f5:d3:2f:fd:6c:98:e4:53:e3:03:cb:7f:3a:
fa:a4:9a:b7:a3:19:8e:ba:3f:e1:41:05:c5:93:ea:
fe:ed:f7:08:57:85:1a:c5:41:6b:07:09:d6:9f:ff:
ce:f7:d5:7d:14:95:d4:66:e1:fe:b1:a8:f7:fb:8f:
07:e9:f6:8d:07:ec:79:d4:1a:c5:3b:6f:7d:aa:81:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:80:59:3D:34:19:A7:37:31:F5:CC:35:99:23:0E:F7:DF:CB:B4
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a66383a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:f8::/48
Signature Algorithm: sha256WithRSAEncryption
2c:56:cd:70:22:e5:97:73:90:99:ab:07:48:5f:eb:1a:97:78:
79:df:a2:7c:32:38:be:ec:4d:28:bb:48:62:c7:f6:a2:7a:a9:
32:45:56:89:c5:0c:98:5c:92:a7:0f:a8:53:61:db:68:51:20:
72:bc:83:17:ec:d3:2e:b5:87:8f:a4:1b:83:6b:5f:f2:30:ce:
9c:b1:41:e5:34:05:58:d2:67:01:c9:cf:66:8b:fc:eb:8f:7c:
8b:cb:f6:1a:37:9c:fa:88:2e:87:63:84:70:4d:f7:c7:39:a6:
f7:ba:7d:88:ce:cc:3b:fb:f8:19:fb:c3:1b:41:80:f3:33:75:
2f:d8:d5:cb:17:d6:8b:76:65:57:75:49:41:2e:b1:04:93:20:
99:3d:34:d1:91:99:52:8d:94:67:5b:75:76:b1:24:f0:74:97:
f1:de:02:64:94:41:15:32:08:55:d9:97:85:0a:0f:84:c9:06:
85:28:cb:80:3e:dd:fe:72:f7:bd:76:a0:46:de:03:e0:5d:b1:
ff:2b:c4:bc:09:02:62:74:43:e0:75:82:2d:23:f9:72:18:b1:
b8:87:0d:f8:3c:00:08:75:d4:e9:31:db:97:06:ba:fc:3c:a5:
49:b9:03:61:18:9a:c3:7d:e0:e2:58:4a:a4:ad:fa:b9:0f:26:
a6:f7:c8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:07:00 2025 by rpki-client