Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3232303a3a2f34342d3434203d3e203435373237.roa
File:                     323430303a386230303a3232303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier:          Ha7mEfIgercSJp6yM4ncH9fpFrSvMhz6QcwW9YRUzZ4=
Subject key identifier:   2A:6B:C8:1E:43:97:BE:2C:4B:CB:AC:43:38:B9:D3:08:86:6F:97:AC
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       76B1EA07B2C5C6773DD9B846BEBBEE3512788064
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3232303a3a2f34342d3434203d3e203435373237.roa
Signing time:             Tue 03 Dec 2024 20:36:48 +0000
ROA not before:           Tue 03 Dec 2024 20:31:48 +0000
ROA not after:            Tue 02 Dec 2025 20:36:48 +0000
asID:                     45727
IP address blocks:        2400:8b00:220::/44 maxlen: 44
Validation:               Failed, certificate revoked on Wed 23 Jul 2025 09:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b1:ea:07:b2:c5:c6:77:3d:d9:b8:46:be:bb:ee:35:12:78:80:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:31:48 2024 GMT
            Not After : Dec  2 20:36:48 2025 GMT
        Subject: CN=2A6BC81E4397BE2C4BCBAC4338B9D308866F97AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:e4:2d:ce:f7:f9:9a:a8:16:c9:4a:06:8f:
                    2d:2c:8e:7e:04:4b:b1:80:3f:a7:84:ef:35:7d:b6:
                    78:bf:37:03:35:c2:93:1f:5b:5c:9c:35:97:b7:3c:
                    55:94:51:b7:1d:a7:f3:83:61:b4:31:fc:e7:30:f8:
                    ad:bd:8c:f9:09:5c:46:73:48:c4:a0:28:ba:9e:3f:
                    3a:9d:c2:30:d6:65:b1:68:f9:4d:fe:18:db:93:b8:
                    93:eb:03:4d:42:42:02:52:f5:c1:19:dc:af:dd:d2:
                    0e:63:53:42:94:94:68:38:8e:cd:96:b2:00:d3:1f:
                    ca:5d:48:f8:f6:d8:56:fe:09:c9:21:0b:82:02:3d:
                    fa:0c:7b:5d:c5:f6:46:79:4e:fb:1e:8e:e8:4a:73:
                    88:82:84:41:de:11:d8:a7:7f:b4:fc:b7:90:64:a1:
                    98:96:30:48:2f:68:5b:88:16:5b:4d:65:96:e8:cb:
                    24:a6:09:8c:3a:b3:66:9d:d1:62:15:eb:db:25:34:
                    c0:47:6e:2b:ee:91:51:1c:04:23:4a:88:24:a2:97:
                    c6:9b:fc:63:04:16:84:92:ba:6b:26:d7:71:a0:d9:
                    5f:d5:7c:94:74:93:71:d1:ce:ad:01:10:bb:23:a8:
                    ee:14:9e:bd:76:eb:08:0b:ff:65:45:a7:6e:89:35:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6B:C8:1E:43:97:BE:2C:4B:CB:AC:43:38:B9:D3:08:86:6F:97:AC
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3232303a3a2f34342d3434203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:220::/44

    Signature Algorithm: sha256WithRSAEncryption
         79:00:7e:02:41:b3:b7:fb:63:49:ec:1e:6a:3a:91:b3:48:12:
         95:78:36:88:89:ba:e7:f9:3f:b8:2c:7c:70:b3:6e:72:a8:6c:
         81:1b:a7:c0:c6:2c:89:1d:20:72:6e:21:da:dd:6c:63:93:a2:
         d3:b9:9c:68:2a:c2:ff:0b:33:45:b5:88:8c:2d:17:17:c3:3e:
         89:2b:e2:cd:0c:a0:5a:a2:8e:96:8c:c2:22:80:35:3d:11:1d:
         bd:98:0e:a7:c3:c2:4c:12:50:3f:f6:d9:76:2f:a5:e7:89:2b:
         bc:55:a6:b3:12:1d:39:1e:0f:94:1f:f8:e9:d5:88:7a:f2:4c:
         72:4b:d0:5a:8a:cd:e8:b9:4a:7a:b8:fd:19:eb:e1:7b:f6:ab:
         ce:8b:89:09:91:76:cc:7f:a1:3d:82:7d:74:4c:72:8e:77:9f:
         f1:46:df:84:66:aa:c5:4f:16:01:16:06:aa:5f:e0:23:ea:09:
         f4:27:4a:5e:a9:62:12:18:f4:3a:62:48:02:f2:10:cc:1a:e8:
         0b:e7:e0:1f:56:9c:33:a8:86:d7:48:4f:3e:5b:b4:e0:7a:60:
         fa:0c:73:74:73:a6:a1:10:ba:7b:e6:27:3a:66:d9:8c:35:e0:
         58:c7:2b:8e:43:c9:3c:7e:22:d3:e4:89:23:21:00:08:97:4c:
         f4:3d:58:41
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdrHqB7LFxnc92bhGvrvuNRJ4gGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMyMDMxNDhaFw0yNTEyMDIyMDM2NDhaMDMxMTAvBgNV
BAMTKDJBNkJDODFFNDM5N0JFMkM0QkNCQUM0MzM4QjlEMzA4ODY2Rjk3QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/+Qtzvf5mqgWyUoGjy0sjn4E
S7GAP6eE7zV9tni/NwM1wpMfW1ycNZe3PFWUUbcdp/ODYbQx/Ocw+K29jPkJXEZz
SMSgKLqePzqdwjDWZbFo+U3+GNuTuJPrA01CQgJS9cEZ3K/d0g5jU0KUlGg4js2W
sgDTH8pdSPj22Fb+CckhC4ICPfoMe13F9kZ5TvsejuhKc4iChEHeEdinf7T8t5Bk
oZiWMEgvaFuIFltNZZboyySmCYw6s2ad0WIV69slNMBHbivukVEcBCNKiCSil8ab
/GMEFoSSumsm13Gg2V/VfJR0k3HRzq0BELsjqO4Unr126wgL/2VFp26JNaVhAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUKmvIHkOXvixLy6xDOLnTCIZvl6wwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMyMzQzMDMwM2EzODYyMzAzMDNhMzIzMjMwM2Ez
YTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNTM3MzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQAiwAC
IDANBgkqhkiG9w0BAQsFAAOCAQEAeQB+AkGzt/tjSeweajqRs0gSlXg2iIm65/k/
uCx8cLNucqhsgRunwMYsiR0gcm4h2t1sY5Oi07mcaCrC/wszRbWIjC0XF8M+iSvi
zQygWqKOlozCIoA1PREdvZgOp8PCTBJQP/bZdi+l54krvFWmsxIdOR4PlB/46dWI
evJMckvQWorN6LlKerj9Gevhe/arzouJCZF2zH+hPYJ9dExyjnef8UbfhGaqxU8W
ARYGql/gI+oJ9CdKXqliEhj0OmJIAvIQzBroC+fgH1acM6iG10hPPlu04Hpg+gxz
dHOmoRC6e+YnOmbZjDXgWMcrjkPJPH4i0+SJIyEACJdM9D1YQQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 11:58:52 2025 by rpki-client