Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3331303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3331303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: 8EvRKUvt7fC5f4SHlaqeBeKHTu45RuILeSBd8Iw9jZ4=
Subject key identifier: 82:19:70:F8:D5:3B:B8:EE:EE:07:93:A8:08:FC:8D:05:44:C3:16:C6
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 4DAB582BECA8F9D3D3D41AC6FA548D053F1565D5
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3331303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:38:15 +0000
ROA not before: Tue 03 Dec 2024 20:33:15 +0000
ROA not after: Tue 02 Dec 2025 20:38:15 +0000
asID: 4761
IP address blocks: 2400:8b00:310::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:ab:58:2b:ec:a8:f9:d3:d3:d4:1a:c6:fa:54:8d:05:3f:15:65:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:33:15 2024 GMT
Not After : Dec 2 20:38:15 2025 GMT
Subject: CN=821970F8D53BB8EEEE0793A808FC8D0544C316C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:d2:60:7a:2e:c5:ea:62:15:4a:07:77:ef:
74:15:01:79:8d:d6:70:c4:0b:9e:b1:64:52:94:15:
b3:d5:98:c5:69:6a:a5:05:97:88:e5:f5:30:10:ac:
98:0e:5b:a4:51:a4:ad:2d:87:71:e3:13:2e:72:e2:
50:95:3f:84:0a:62:85:17:a9:f6:de:53:27:14:19:
5d:6c:ab:fb:e2:97:7c:d9:ff:55:dd:74:c1:70:b4:
d3:b9:2b:15:e4:ff:41:4a:2c:18:29:90:ff:b4:f1:
93:b1:43:c2:8e:de:a1:18:b4:20:60:1a:8e:b4:11:
96:ed:7c:15:f2:63:f6:24:46:67:c5:0d:9a:e6:26:
49:2c:a6:65:28:76:64:1a:0a:1b:0d:0f:1b:49:4a:
5e:48:e7:2d:2d:5e:7b:de:f4:7c:7d:f7:0d:dc:b2:
ed:a6:68:03:cf:9a:a9:9b:91:40:8a:d9:89:5b:01:
01:d3:20:b6:27:a1:5a:14:ab:10:48:93:ea:70:19:
8a:d5:8b:aa:f1:4a:47:e7:08:bb:25:d6:3f:18:94:
75:06:48:5f:1f:83:4a:b6:fe:7e:b5:6c:7e:b1:9e:
47:e2:96:0a:b3:dc:15:5a:0f:97:87:55:ab:74:9b:
c0:39:84:50:94:f1:8c:ca:2a:ac:df:1d:bc:21:2f:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:70:F8:D5:3B:B8:EE:EE:07:93:A8:08:FC:8D:05:44:C3:16:C6
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3331303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:310::/44
Signature Algorithm: sha256WithRSAEncryption
98:b7:85:12:e3:5a:68:02:51:6f:ce:55:9e:00:fa:47:12:be:
f7:30:5c:c0:f7:d8:57:8c:c8:ca:dc:08:be:4a:63:0d:06:fa:
f0:00:d9:04:4d:79:7a:8f:42:7c:e5:f6:ac:41:d3:5d:5d:1e:
71:64:48:ab:1d:a9:23:ed:3a:03:d3:8c:7a:e1:4a:32:3b:97:
c2:60:b1:25:ca:7e:8f:66:d5:be:d3:4c:66:f7:d8:f5:cb:b2:
44:6c:b4:af:18:8a:f2:52:2d:c4:41:82:28:97:98:9f:0a:b8:
54:66:9a:5a:ea:03:be:eb:85:65:3a:47:a8:14:5b:42:2d:42:
c9:41:47:6b:a8:b7:ce:f6:5a:2b:08:38:b7:f7:1d:eb:62:4a:
1b:15:98:2a:6e:5c:08:3f:6d:38:0f:bc:8a:13:86:2c:6c:22:
bf:f3:bf:e8:73:cd:b2:94:c2:46:a0:ba:bf:4e:1a:a6:d0:84:
05:fd:9f:77:75:81:36:78:fb:20:50:d7:77:b0:3f:45:f8:79:
22:d1:86:d9:d2:25:ad:57:ed:ec:44:97:0c:80:04:24:81:ae:
63:9b:80:59:dd:76:79:6b:93:e9:71:26:15:89:ca:5e:9f:9f:
b9:a0:35:65:d4:e5:31:1a:7d:26:1f:e5:03:49:40:01:b6:99:
2d:3c:b7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:37 2025 by rpki-client