Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3332303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3332303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: dD7aadYwwEv1kFamtz3f0lpQ7F4ToonvoeS3OE0ZEIg=
Subject key identifier: EE:1D:7C:AC:6A:3D:ED:6A:FE:07:7A:44:7A:56:F7:A4:DD:AC:30:14
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2BC4A2EF2C590EF43B2A30F8F96168CC1DC305BB
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3332303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:38:24 +0000
ROA not before: Tue 03 Dec 2024 20:33:24 +0000
ROA not after: Tue 02 Dec 2025 20:38:24 +0000
asID: 4761
IP address blocks: 2400:8b00:320::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c4:a2:ef:2c:59:0e:f4:3b:2a:30:f8:f9:61:68:cc:1d:c3:05:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:33:24 2024 GMT
Not After : Dec 2 20:38:24 2025 GMT
Subject: CN=EE1D7CAC6A3DED6AFE077A447A56F7A4DDAC3014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:86:d8:01:1e:0b:0f:68:81:16:0c:0b:39:
69:86:ab:9d:09:32:a0:62:00:9f:f7:98:5e:b0:b3:
a0:98:60:7a:c3:37:d1:8d:10:7f:ca:58:df:66:7e:
99:c7:e7:28:23:27:91:0b:ee:4a:cd:a3:b9:41:c4:
98:0a:03:66:c8:8a:83:b8:61:ca:55:64:0e:32:30:
8c:6b:f8:6a:39:36:28:24:1b:2e:1a:3d:25:a9:0a:
80:df:14:2a:c8:f5:57:ba:23:90:b8:37:b1:12:8e:
a9:88:50:60:a9:e0:be:06:24:95:c9:d1:c0:2f:5a:
42:ea:91:57:8f:bb:6e:59:7a:5b:8d:70:59:e6:45:
da:09:98:13:65:eb:56:ad:fc:29:6b:3d:49:99:b5:
a7:ca:56:97:3b:25:f2:a2:b6:15:90:86:c7:51:29:
e9:77:2d:12:ee:6a:23:c8:8a:20:66:29:39:a6:ac:
c5:4b:c8:11:7c:23:7d:8b:57:c4:56:3f:36:27:d3:
03:ff:0f:70:d0:72:9a:7b:fe:62:bc:c7:da:57:fc:
47:af:6c:1d:a0:03:c6:1a:d6:b1:19:2b:53:1d:3c:
ac:19:33:be:80:1c:44:e2:47:bb:39:f5:e7:d6:a0:
3e:2f:b1:03:16:3f:14:c5:7c:a4:11:95:b8:db:a1:
24:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:7C:AC:6A:3D:ED:6A:FE:07:7A:44:7A:56:F7:A4:DD:AC:30:14
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3332303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:320::/44
Signature Algorithm: sha256WithRSAEncryption
94:84:94:30:c4:a1:aa:2d:a7:35:31:67:c4:6f:a2:c3:66:90:
9a:8f:6b:22:2e:d0:c9:95:b9:18:0c:86:23:cb:9b:9b:a8:4a:
1c:be:f6:c8:38:5e:02:be:f9:94:ed:83:9b:fd:0f:eb:9a:c4:
a9:ae:74:b2:9e:6c:5c:7d:0c:80:f3:1d:75:1e:9a:56:a7:83:
05:23:19:fa:9d:3b:1d:4b:f9:84:70:99:75:83:5b:4e:c3:69:
95:9b:c3:50:ab:94:44:5c:f4:9d:4d:42:e0:a8:cb:ec:38:ed:
d5:9b:e8:00:6e:ee:d8:2b:c0:65:31:cf:c2:05:e5:f5:83:94:
3a:1b:ca:7a:c9:5a:20:a1:2f:a8:66:87:d0:5d:cd:27:48:37:
00:27:f2:00:a0:57:9a:71:e1:b1:f0:60:82:79:54:e4:1f:28:
dc:f3:03:33:01:e3:b0:cf:2a:09:0c:4b:47:b3:dc:07:17:a8:
1f:12:5e:00:57:3c:21:e2:f5:dd:26:bf:b4:e6:e9:2a:4f:28:
c3:81:f2:c8:ef:c4:bf:05:f2:fd:60:86:0f:dc:84:8f:dd:4b:
7d:ff:ef:a8:09:36:d5:d5:79:d6:bb:0b:00:58:cf:d2:91:13:
93:c0:87:b3:71:61:07:55:75:42:3a:31:6f:2c:9b:60:3c:ac:
00:9e:99:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:44 2025 by rpki-client