Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3530303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a3530303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: UIArQs2GvbnRfzEL2tVFU6NIavOu4pe1s688AZaBcOI=
Subject key identifier: FB:3B:57:3C:3D:45:17:2E:B4:54:A7:3E:ED:10:76:9F:44:F0:C6:99
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 7687A37DA6B9D3C9C9045FA153E633EDC5AC46E7
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3530303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:40:16 +0000
ROA not before: Tue 03 Dec 2024 20:35:16 +0000
ROA not after: Tue 02 Dec 2025 20:40:16 +0000
asID: 45727
IP address blocks: 2400:8b00:500::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:87:a3:7d:a6:b9:d3:c9:c9:04:5f:a1:53:e6:33:ed:c5:ac:46:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:35:16 2024 GMT
Not After : Dec 2 20:40:16 2025 GMT
Subject: CN=FB3B573C3D45172EB454A73EED10769F44F0C699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:05:65:5e:a0:af:87:91:a3:1e:5b:ea:f3:
a6:b3:27:36:9e:54:58:b4:11:b8:48:ed:71:bb:52:
ff:81:47:a8:93:63:e8:e1:cc:60:83:c3:91:7d:56:
2b:b0:78:26:ab:e0:49:a6:c0:d5:0b:cf:2a:ea:30:
11:2c:47:63:45:9f:06:3f:5a:57:cf:5e:30:77:ca:
19:67:a3:ea:10:01:3e:20:df:f5:bc:0d:a7:a6:a9:
a2:e6:c5:71:a0:44:03:66:ad:8e:a2:24:1f:39:bf:
38:03:34:ec:9d:a2:19:f8:3c:db:3a:a4:c1:85:b9:
00:3b:66:d2:c7:42:81:8b:86:cf:a7:16:73:a0:8a:
40:41:61:b7:1e:46:c0:c9:81:39:91:6a:2b:36:6b:
e9:c9:dd:f6:5a:0c:a9:9f:ca:bb:6b:a8:bd:70:25:
9d:23:f0:92:0a:61:b6:97:76:28:68:48:c6:0c:95:
b7:b8:df:f4:56:4a:1b:1f:2a:1f:ce:70:5c:9d:83:
a9:4c:63:ab:9c:f4:b3:26:19:cc:b6:67:1d:2c:5e:
b4:28:f3:0a:86:b7:a7:7b:50:3a:2e:70:84:b8:ac:
04:53:0d:3a:31:71:f9:0a:fd:b0:0d:75:d2:5b:a5:
12:84:5f:77:7e:07:99:a0:86:e0:ef:96:ec:74:e5:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:57:3C:3D:45:17:2E:B4:54:A7:3E:ED:10:76:9F:44:F0:C6:99
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3530303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:500::/44
Signature Algorithm: sha256WithRSAEncryption
a8:78:73:f1:ca:14:5d:68:90:df:5b:3e:83:ab:74:09:50:fd:
30:42:11:2d:9c:d8:4f:16:9b:1a:b7:b5:ea:df:f5:9c:b8:82:
e5:bb:52:d5:b8:c6:37:ae:de:08:8c:be:65:20:6c:e8:62:4d:
8a:62:e4:c9:60:3b:5b:5f:fd:af:39:82:4b:e9:94:7e:a6:14:
75:e7:59:60:4d:02:01:20:c2:9e:98:cf:c3:a8:61:83:e7:27:
7c:2b:ad:fa:d1:c0:e2:21:b5:4d:35:33:96:e8:e5:a6:f1:27:
52:39:06:92:6a:9e:31:ef:80:18:ca:ac:bf:1d:36:b7:38:15:
dc:25:b3:d6:ca:19:6d:cc:05:88:9a:ca:6a:cc:fc:fe:60:f6:
91:ae:37:7e:16:ba:12:b8:74:4c:bd:b4:f1:fc:14:0a:05:7f:
28:e8:7b:9e:ce:d8:9a:c3:52:68:ee:b1:11:50:ea:39:09:6e:
21:fb:1c:98:c5:3a:df:96:2b:5e:b7:bc:2a:55:c5:da:5f:e9:
6e:c9:43:e7:a6:8c:4d:0f:8e:6a:64:bf:93:97:4d:9d:a1:7a:
5e:0a:2f:a7:6f:7e:6d:f2:7d:de:d6:fd:6e:ef:38:ec:a3:b7:
e4:57:f9:25:9e:db:66:64:ff:74:81:6f:a1:b0:6a:3f:97:9f:
ce:98:71:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:09 2025 by rpki-client