Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3132303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a3132303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: 1KBfJzzWEhGK5qSo7wCWG/X5MbQ91tYV/KXerg6p6uY=
Subject key identifier: 4D:B5:C1:B1:1C:D9:72:40:8E:61:6D:71:79:99:76:12:2E:10:10:12
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 542BB5D14F09CD7A81D6A2976AC2981636749078
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3132303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:34:51 +0000
ROA not before: Tue 03 Dec 2024 20:29:51 +0000
ROA not after: Tue 02 Dec 2025 20:34:51 +0000
asID: 45727
IP address blocks: 2400:8b00:120::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:2b:b5:d1:4f:09:cd:7a:81:d6:a2:97:6a:c2:98:16:36:74:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:29:51 2024 GMT
Not After : Dec 2 20:34:51 2025 GMT
Subject: CN=4DB5C1B11CD972408E616D71799976122E101012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:00:55:73:4a:27:0f:6d:06:5b:ac:2f:85:
32:eb:fc:68:4e:03:39:3a:e8:8e:3d:c5:ee:8b:9e:
3c:d0:3b:e9:8c:ee:6a:82:18:5b:07:f5:f3:c0:a6:
f2:34:46:a0:8d:e8:36:75:b2:0e:e1:b1:3e:b9:d7:
2c:6c:a0:ae:a7:78:46:2a:d1:72:cc:1b:23:d5:ec:
97:71:43:17:76:34:c7:c1:05:79:4e:db:09:9d:37:
47:c0:d9:67:0e:40:b2:d3:3a:f6:68:79:6e:22:a6:
7a:37:83:99:44:3a:13:6b:9d:6d:6f:e3:2f:b7:24:
a9:52:e9:36:3e:16:fc:fc:98:56:e1:28:11:8d:97:
f8:b0:d0:e4:3b:b5:17:fd:b7:be:98:66:47:73:0c:
56:e5:7d:d8:7c:0a:a1:9a:eb:c9:46:1b:54:d4:af:
55:c0:30:f0:18:a2:56:05:94:d7:b0:d9:9d:61:8f:
d7:e9:ca:4e:9c:8d:47:4d:de:ce:3a:a5:02:a2:cc:
40:12:24:a6:83:c4:45:04:49:96:d7:a0:fc:1f:ab:
bd:d0:82:81:1d:cf:87:e2:bb:c1:69:e5:57:ec:54:
2a:36:70:05:33:75:bc:a1:0b:14:b4:c0:6b:96:40:
85:c5:0e:8d:71:99:24:a9:b8:6e:49:46:09:cb:49:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B5:C1:B1:1C:D9:72:40:8E:61:6D:71:79:99:76:12:2E:10:10:12
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3132303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:120::/44
Signature Algorithm: sha256WithRSAEncryption
4e:00:5d:10:e1:b1:b9:7d:2f:0b:cd:15:4b:f8:f1:0b:da:37:
fa:6a:33:b9:60:2e:4d:9e:41:33:ac:fc:5a:98:87:6f:5c:e7:
bf:32:24:70:3e:5c:8f:1d:89:ba:0c:61:c8:e3:7f:c2:46:f4:
b5:f6:9c:7b:3e:0c:2c:33:35:b4:6c:2b:df:05:8b:e2:ec:6d:
29:79:61:99:51:6a:7d:64:8d:93:90:c4:ca:c3:56:88:e0:35:
52:1e:eb:82:c5:0e:f8:dd:6c:af:f7:0a:34:4c:47:8e:4d:e5:
fb:95:48:01:b7:d0:11:55:00:62:cf:8d:8c:eb:a0:23:26:86:
23:0d:96:5c:70:ef:e5:7d:3a:a4:82:29:a2:1f:56:ca:9a:46:
66:6a:dc:78:24:42:b7:d1:53:57:41:2e:49:80:43:26:6c:db:
27:1c:f0:0f:8b:f4:c9:51:6d:9c:37:79:13:c2:b1:ed:2b:5c:
bf:81:38:f5:42:77:47:35:2c:fd:77:61:08:72:ed:ee:8a:4a:
02:6e:cf:69:ed:1b:1e:cb:ca:11:e1:62:c1:bd:ee:60:ff:4e:
4a:63:8a:d2:6f:d3:ef:10:e8:77:88:87:d0:d7:26:c8:b1:21:
aa:d9:b3:94:f5:86:87:04:29:be:4a:9a:eb:ba:87:e3:70:27:
a6:0e:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:54:28 2025 by rpki-client