Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3231303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a3231303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: RncLcNubQDLvPfRdcDNh+fslpl7RRvSgoz4qWJYKOjI=
Subject key identifier: 75:66:CC:B8:18:91:74:DF:2A:25:6C:C9:47:02:26:48:3E:87:0D:35
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 255CDB3205138D08DFDF1BD1145BB0B655DEB994
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3231303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:36:37 +0000
ROA not before: Tue 03 Dec 2024 20:31:37 +0000
ROA not after: Tue 02 Dec 2025 20:36:37 +0000
asID: 45727
IP address blocks: 2400:8b00:210::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5c:db:32:05:13:8d:08:df:df:1b:d1:14:5b:b0:b6:55:de:b9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:31:37 2024 GMT
Not After : Dec 2 20:36:37 2025 GMT
Subject: CN=7566CCB8189174DF2A256CC9470226483E870D35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:b9:c8:97:8c:e6:d6:6f:b9:46:6f:6e:2e:
10:92:72:aa:2b:a8:ad:6c:2c:0a:05:d3:e6:80:54:
c5:dd:ee:98:66:0e:17:05:f4:e4:bf:50:ce:54:2a:
82:d2:59:2e:0e:f9:02:72:34:66:2e:d3:b3:21:a2:
ea:b1:52:05:31:04:8e:8b:2d:65:2e:dc:d5:d1:ea:
d1:55:6f:45:f3:2c:4f:81:81:b0:5f:4e:e1:9e:86:
68:e2:53:2f:9a:3c:8f:55:08:51:4c:52:1c:f2:4e:
f6:5e:4f:9a:a6:72:2f:7c:f4:fb:13:8f:50:f1:15:
62:4e:80:17:46:ac:0c:6a:b5:1d:5f:07:31:63:02:
35:43:7a:4e:fb:ed:98:f7:66:3c:7d:63:ab:2c:19:
83:b4:d6:a6:81:db:ae:88:75:4a:dd:ea:e8:7c:2b:
23:a8:45:e0:52:ad:f3:31:45:87:7c:43:b3:30:f4:
a2:19:3c:1e:17:70:01:10:56:c3:a9:77:4d:40:81:
ed:40:7a:1c:52:b9:50:3c:dc:88:70:ad:bb:ce:ad:
08:89:e2:41:25:ac:0d:6e:6a:88:b9:50:b1:ce:ea:
05:aa:41:2f:b3:a1:30:4f:b8:85:34:1d:bb:09:96:
43:15:e0:59:d5:32:19:e4:a2:2d:29:fd:11:28:3b:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:66:CC:B8:18:91:74:DF:2A:25:6C:C9:47:02:26:48:3E:87:0D:35
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3231303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:210::/44
Signature Algorithm: sha256WithRSAEncryption
5b:99:b5:69:f1:ad:32:38:d5:a5:92:85:e6:6d:ae:17:ed:96:
ed:09:fb:3d:d2:7e:13:14:ae:22:ae:db:52:3e:99:d4:ac:53:
24:af:11:ab:75:57:20:fc:9f:2e:9c:6b:96:88:1f:8b:85:fb:
f0:dc:cb:fd:21:90:f4:0e:fe:ff:1b:a3:a3:a9:0a:c0:cc:df:
1a:81:e3:f4:4d:a0:2b:a3:34:92:93:aa:6a:64:81:73:c9:94:
3e:f4:2e:8b:95:b2:6e:c5:e5:a3:07:c7:55:0d:be:8a:7b:b1:
43:f3:1f:3e:08:bd:50:98:a5:7b:51:d0:46:9b:84:3e:1a:7d:
92:cb:51:c3:5b:10:6e:2e:bf:ca:13:9d:af:ab:74:f3:50:99:
2c:26:4e:bd:09:a8:3e:67:26:14:78:0f:43:3d:27:50:23:fa:
ee:1d:2c:a1:48:f4:14:33:ec:dc:6a:a6:d6:a3:d3:b3:7c:be:
74:a4:2c:c5:b8:69:f7:d9:7d:fb:15:97:6a:36:3d:4e:a7:7e:
94:f6:05:7c:ca:d4:ef:65:34:1e:c9:0d:ea:c2:7d:8d:0d:9d:
be:cf:0d:63:77:11:93:3a:b9:60:b6:70:65:0a:3d:c5:83:aa:
4e:1f:61:7a:de:15:63:dc:c7:19:bf:05:f6:ec:86:da:0d:85:
97:34:a3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:23 2025 by rpki-client