Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3133303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a3133303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: Sz+Wivy2HbsGeoc3nrWUAKBzcQQlRTE8JcLwkN4zZIQ=
Subject key identifier: 1E:12:42:0D:FB:E0:43:76:33:9E:9A:4C:A0:23:59:9C:88:81:34:19
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 67CFB154D83CA994A0637049ECB6C0C95EA91B1E
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3133303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:35:00 +0000
ROA not before: Tue 03 Dec 2024 20:30:00 +0000
ROA not after: Tue 02 Dec 2025 20:35:00 +0000
asID: 45727
IP address blocks: 2400:8b00:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 23 Jul 2025 09:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:cf:b1:54:d8:3c:a9:94:a0:63:70:49:ec:b6:c0:c9:5e:a9:1b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:30:00 2024 GMT
Not After : Dec 2 20:35:00 2025 GMT
Subject: CN=1E12420DFBE04376339E9A4CA023599C88813419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:5e:0e:96:0c:0e:e9:0f:3c:0f:f3:62:b8:
69:93:57:11:96:5e:bd:57:2a:87:18:f2:89:49:db:
04:91:3a:40:f6:6c:8e:b9:bc:12:3f:7f:32:e5:ff:
b8:14:c6:af:11:8e:fb:e5:3a:93:bb:aa:2a:01:53:
a9:23:c3:80:6d:5a:13:15:84:1c:14:47:c2:dc:ea:
ff:ed:a4:03:f2:eb:7d:2e:14:50:05:3c:89:51:f5:
5f:2d:a1:b8:66:f4:3c:ad:33:b5:4b:7d:00:47:61:
e1:1e:5c:95:d3:a0:a7:a0:2c:ad:0f:9c:2b:b4:52:
c6:df:65:e6:f4:0d:ee:75:48:55:2b:9e:50:f5:ce:
f1:17:70:76:78:c9:10:64:96:10:6c:ae:5c:62:06:
ba:37:f8:57:de:6b:92:a0:11:64:f1:3f:7d:56:77:
2b:b4:d7:4e:df:26:9f:65:dd:4d:2c:90:c0:5b:88:
c9:12:bf:31:38:52:b5:2c:9c:b8:ae:05:40:d2:54:
21:1b:33:50:dc:dc:86:9b:f0:df:e9:14:6c:cd:9e:
1d:00:5c:ca:4c:1b:69:73:fe:ce:3a:cc:c8:e7:02:
06:60:03:04:a3:60:cb:51:a9:2b:45:58:a3:ba:aa:
25:ae:09:6b:86:1c:ce:b3:c8:ee:d1:a8:a4:d9:71:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:42:0D:FB:E0:43:76:33:9E:9A:4C:A0:23:59:9C:88:81:34:19
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3133303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:130::/44
Signature Algorithm: sha256WithRSAEncryption
93:64:7b:93:a1:06:f6:63:32:f9:42:4a:90:aa:68:a1:da:80:
ec:4a:b0:41:f6:c5:25:a1:50:92:7b:b7:cf:f0:26:20:82:ef:
9a:8c:d3:00:a4:c0:08:d0:c4:5f:21:09:29:12:97:cf:ea:ce:
7a:2a:1b:50:df:0a:25:b5:06:c4:ce:3a:e3:24:37:42:29:46:
16:c0:a6:ef:19:93:c7:45:15:85:43:1d:4d:25:f8:61:8a:98:
fb:90:80:22:f5:ef:8c:e4:3b:5e:08:b9:01:65:df:d8:9a:59:
21:1a:7c:de:f8:5b:57:26:45:4f:c2:87:32:e2:63:5e:ad:74:
d9:67:e1:33:55:33:74:c4:b0:5c:3e:e9:6f:c5:90:fd:20:08:
d7:ec:cd:64:e3:6b:f5:f1:6f:3f:da:6d:52:82:92:e9:66:f7:
15:30:1e:ce:da:81:bc:1c:a0:42:69:ff:0e:3b:3b:b3:52:33:
b8:df:43:1b:34:85:7d:18:f6:ca:f6:5c:2b:3b:e3:0a:08:d7:
dc:cb:b5:66:78:e0:92:df:57:2a:fa:4c:42:37:4f:5f:3f:35:
d7:7c:ce:26:4a:d1:74:92:74:ef:b3:b3:37:d9:e5:bb:e1:9c:
b4:a3:46:97:63:00:5e:08:d0:26:eb:2b:06:20:4e:39:45:cd:
bf:44:4d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:59:35 2025 by rpki-client