Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6138303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a6138303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: T3FBdUMRxVT0jEyAUI5oWyRvpK2lwUOMoJCgz+TW3+E=
Subject key identifier: 31:17:0E:E0:72:C4:75:E8:E4:48:0F:44:80:62:49:BF:8A:E4:2D:33
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 610CAA773349B154F643D511A83C8B36C80E60E9
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6138303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:53:56 +0000
ROA not before: Tue 03 Dec 2024 20:48:56 +0000
ROA not after: Tue 02 Dec 2025 20:53:56 +0000
asID: 45727
IP address blocks: 2400:8b00:a80::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 23 Jul 2025 09:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0c:aa:77:33:49:b1:54:f6:43:d5:11:a8:3c:8b:36:c8:0e:60:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:48:56 2024 GMT
Not After : Dec 2 20:53:56 2025 GMT
Subject: CN=31170EE072C475E8E4480F44806249BF8AE42D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:45:76:1a:13:6f:c1:52:35:2a:64:2a:d3:
23:62:7d:06:9b:45:30:65:21:3e:89:8d:51:5c:7d:
b5:fb:38:8a:ba:e4:b6:0e:60:41:44:1f:ac:4f:fc:
de:ee:f9:54:fc:9e:f1:2c:b9:b8:fd:56:26:64:d7:
ae:bf:2a:66:26:22:5c:3a:82:36:41:a9:7e:f1:63:
9e:66:c4:e0:20:61:5f:a8:31:30:3c:00:72:fb:27:
95:73:51:a5:c5:d5:8b:20:b7:4e:23:3f:11:a7:b7:
b9:80:8c:23:4c:63:f0:c7:1c:5d:cd:18:a7:8e:8a:
e1:6f:f5:93:ad:ae:77:10:2e:ec:4c:43:9f:23:6b:
1d:f8:98:66:16:c9:f3:0e:42:c8:64:f5:f1:b3:8e:
43:d7:af:5e:59:3f:21:78:c1:43:6b:cd:88:c3:53:
5d:1b:41:36:e0:4a:20:0f:e7:84:e9:10:83:ca:ae:
46:bf:a4:ea:af:d8:be:91:b3:41:eb:7c:4c:46:c4:
6e:c5:9c:fd:48:a0:c3:c8:a1:2e:68:48:bf:39:ca:
64:6d:32:02:c3:9e:8b:88:33:6d:e2:d0:6b:47:6d:
4e:dd:1a:85:4c:25:82:cb:c8:21:56:00:60:30:e3:
1f:c3:69:de:dc:f0:2d:d1:da:45:7a:a8:dc:a9:98:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:17:0E:E0:72:C4:75:E8:E4:48:0F:44:80:62:49:BF:8A:E4:2D:33
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6138303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:a80::/44
Signature Algorithm: sha256WithRSAEncryption
22:6b:61:9e:da:4f:88:ce:f4:54:8d:0e:13:75:60:ba:70:92:
f6:59:60:77:9c:85:92:62:77:b2:0c:a8:12:2a:c5:b9:f6:ef:
30:16:4d:42:fc:3d:ef:c6:71:e2:a4:7c:56:e0:2a:72:9d:b7:
62:7a:6e:0f:1d:c2:da:e9:13:75:9e:ce:da:34:90:2f:bc:37:
2b:50:96:85:9e:dd:c7:fc:f3:ef:92:a2:c1:ba:47:0d:f7:9e:
28:4d:77:b7:9f:8c:67:09:29:f2:39:d7:d7:06:20:6c:f0:67:
6b:35:23:65:69:43:d0:f1:25:eb:1c:8a:19:7d:a9:e7:a4:89:
ea:6b:97:ef:fc:b1:db:b1:ac:5b:c1:07:15:19:d0:9f:7e:10:
8c:da:1b:7b:be:4e:6e:a6:f2:c2:a5:e8:0c:71:77:9f:f1:cd:
a6:ff:87:b3:e5:91:9d:76:f9:34:9c:3f:21:a5:db:80:0b:65:
6d:75:66:38:35:ef:56:51:7d:dd:b0:0a:4e:38:87:90:7d:cd:
84:e8:27:f7:b2:bc:ed:57:40:24:16:b3:47:97:93:1c:22:8b:
cb:ee:16:a6:3b:64:19:f4:53:bd:c2:b0:02:ce:48:42:90:83:
46:10:d9:48:d9:e6:31:b7:a7:f2:f8:7b:f3:43:af:4f:79:10:
0d:8a:1d:af
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUYQyqdzNJsVT2Q9URqDyLNsgOYOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMyMDQ4NTZaFw0yNTEyMDIyMDUzNTZaMDMxMTAvBgNV
BAMTKDMxMTcwRUUwNzJDNDc1RThFNDQ4MEY0NDgwNjI0OUJGOEFFNDJEMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ckV2GhNvwVI1KmQq0yNifQab
RTBlIT6JjVFcfbX7OIq65LYOYEFEH6xP/N7u+VT8nvEsubj9ViZk166/KmYmIlw6
gjZBqX7xY55mxOAgYV+oMTA8AHL7J5VzUaXF1Ysgt04jPxGnt7mAjCNMY/DHHF3N
GKeOiuFv9ZOtrncQLuxMQ58jax34mGYWyfMOQshk9fGzjkPXr15ZPyF4wUNrzYjD
U10bQTbgSiAP54TpEIPKrka/pOqv2L6Rs0HrfExGxG7FnP1IoMPIoS5oSL85ymRt
MgLDnouIM23i0GtHbU7dGoVMJYLLyCFWAGAw4x/Dad7c8C3R2kV6qNypmHCtAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUMRcO4HLEdejkSA9EgGJJv4rkLTMwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMyMzQzMDMwM2EzODYyMzAzMDNhNjEzODMwM2Ez
YTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNTM3MzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQAiwAK
gDANBgkqhkiG9w0BAQsFAAOCAQEAImthntpPiM70VI0OE3VgunCS9llgd5yFkmJ3
sgyoEirFufbvMBZNQvw978Zx4qR8VuAqcp23YnpuDx3C2ukTdZ7O2jSQL7w3K1CW
hZ7dx/zz75KiwbpHDfeeKE13t5+MZwkp8jnX1wYgbPBnazUjZWlD0PEl6xyKGX2p
56SJ6muX7/yx27GsW8EHFRnQn34QjNobe75ObqbywqXoDHF3n/HNpv+Hs+WRnXb5
NJw/IaXbgAtlbXVmODXvVlF93bAKTjiHkH3NhOgn97K87VdAJBazR5eTHCKLy+4W
pjtkGfRTvcKwAs5IQpCDRhDZSNnmMben8vh780OvT3kQDYodrw==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:00:33 2025 by rpki-client