Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3330303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3330303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: jhyA8vWEIj8psXtTG7bZ4SLC8N2E8+59MagrRnjbDhQ=
Subject key identifier: E1:FA:82:CE:E6:24:B2:09:E2:77:E7:13:37:00:83:2F:8A:31:E3:9F
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 315E8CAC47645C10FB61C73928D8082E187057D8
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3330303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:38:07 +0000
ROA not before: Tue 03 Dec 2024 20:33:07 +0000
ROA not after: Tue 02 Dec 2025 20:38:07 +0000
asID: 4761
IP address blocks: 2400:8b00:300::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5e:8c:ac:47:64:5c:10:fb:61:c7:39:28:d8:08:2e:18:70:57:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:33:07 2024 GMT
Not After : Dec 2 20:38:07 2025 GMT
Subject: CN=E1FA82CEE624B209E277E7133700832F8A31E39F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:0d:0b:28:33:3a:03:3c:94:a3:5f:36:09:
42:0c:3f:bd:5e:7c:35:89:86:e4:b4:61:98:98:d4:
41:5a:fe:5e:74:dc:12:48:90:0b:46:d7:e0:db:48:
e5:fb:cb:e7:6b:c2:e1:94:c9:e9:54:c9:0c:52:f8:
91:a5:ea:9a:4b:c3:45:ad:91:aa:38:e2:2f:04:75:
ef:2e:e9:7a:33:a2:89:aa:a8:02:ce:ee:99:f7:79:
c0:7c:69:f7:cd:6e:d1:1a:8f:94:be:54:2d:11:1a:
39:30:b7:e5:27:a3:b2:c4:f4:ca:4a:eb:1c:bc:78:
65:8a:18:34:50:e4:52:d6:09:d5:59:ac:38:85:56:
fb:11:5f:7d:a0:9d:b4:b5:0b:c5:05:05:26:80:cf:
12:23:6c:7d:da:53:fd:75:9d:9b:28:44:73:0f:fb:
09:ef:f7:24:4a:1d:91:0f:4b:85:25:12:8b:a8:1e:
b5:9d:53:cc:fb:3b:af:4e:35:d6:c3:db:cd:c8:cd:
1d:af:de:df:61:db:de:56:b4:d3:b4:de:88:ad:d6:
fc:f8:63:5f:00:32:95:78:4c:7a:a1:b6:e9:03:75:
2a:3a:bb:2f:9e:5a:97:53:f4:60:8e:21:91:76:81:
59:33:29:bd:40:fb:93:8a:45:3a:7b:83:d5:23:6d:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:82:CE:E6:24:B2:09:E2:77:E7:13:37:00:83:2F:8A:31:E3:9F
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3330303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:300::/44
Signature Algorithm: sha256WithRSAEncryption
1e:25:14:3e:7b:ee:1d:e4:99:65:67:29:f9:83:4f:bf:8c:8a:
3b:3f:c6:1b:3c:58:d4:7f:89:8a:94:27:6b:8e:6e:69:ad:d3:
86:74:4c:e6:7e:af:bd:69:44:30:9a:c2:4e:9d:8e:44:64:89:
d9:48:4a:72:c1:fe:5a:14:97:46:3c:51:94:82:c0:0e:6e:08:
77:83:dd:ec:96:d9:4c:ef:c9:09:d5:75:4e:58:60:40:52:cf:
4f:08:f3:f0:e3:40:79:7f:11:cc:bc:d4:d1:f5:9b:b1:01:13:
9d:98:c6:60:01:a0:e4:9a:f0:c4:69:b5:de:85:e5:ba:ef:e0:
dc:62:ce:19:79:52:1c:fd:bf:b8:ae:9e:9b:c3:b9:8d:55:03:
f4:92:ab:39:49:8d:ec:3f:00:bb:0f:38:1b:21:d4:7c:8e:c6:
d3:7f:10:ed:d5:76:dc:e0:b4:dc:b7:7f:55:d0:dc:0b:ac:75:
01:41:0d:1b:5e:a4:22:c5:a7:43:6e:68:4e:a8:9d:16:3c:3d:
67:56:83:2f:35:10:3d:c4:9b:1d:2c:7b:8b:dc:9d:24:01:eb:
00:04:b7:38:5a:81:97:91:3c:79:80:d2:d8:b1:97:95:64:c3:
70:53:d7:59:01:4d:55:b8:5f:9f:06:6e:b6:f3:7e:62:13:89:
53:d4:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:54:08 2025 by rpki-client