Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3632303a3a2f34342d3434203d3e2034373631.roa
File:                     323430303a386230303a3632303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier:          MNMX8+FKvxVZ7Un9CNS+ADdSDAzZI8/CnIIJU2+IVJI=
Subject key identifier:   B5:98:EC:C3:99:7D:B3:6E:A9:F5:44:2D:C4:D3:8A:0B:87:A5:96:A4
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       734487FF4FCEEE5A1AB6F457166ECDFB8610D058
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3632303a3a2f34342d3434203d3e2034373631.roa
Signing time:             Tue 03 Dec 2024 20:43:08 +0000
ROA not before:           Tue 03 Dec 2024 20:38:08 +0000
ROA not after:            Tue 02 Dec 2025 20:43:08 +0000
asID:                     4761
IP address blocks:        2400:8b00:620::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:44:87:ff:4f:ce:ee:5a:1a:b6:f4:57:16:6e:cd:fb:86:10:d0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:38:08 2024 GMT
            Not After : Dec  2 20:43:08 2025 GMT
        Subject: CN=B598ECC3997DB36EA9F5442DC4D38A0B87A596A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:c5:fb:bb:22:89:6f:39:b5:5e:6f:a2:a5:
                    c0:9d:45:cc:f2:a3:0a:60:21:30:87:43:ba:34:d8:
                    26:15:d6:d6:75:e7:dc:ed:30:6b:d6:75:c5:d0:9f:
                    6d:c9:fb:18:c4:e3:f6:a7:9c:42:3f:82:ed:d6:d1:
                    38:10:ac:c8:a7:3b:09:7d:82:35:12:9e:3e:c4:b6:
                    2e:6c:15:4e:ad:e5:e8:e9:9f:95:b0:83:8a:f3:75:
                    b2:c9:14:d3:dd:a3:1c:ee:5b:92:0d:86:2b:a2:fd:
                    8b:a1:a6:db:51:8b:de:be:55:2d:71:a2:49:8f:49:
                    37:6d:61:05:b4:ec:5f:b0:10:36:b4:37:58:ef:b1:
                    89:b9:59:89:9d:25:4c:ea:5f:72:45:33:a8:57:37:
                    86:24:97:0b:71:a4:a5:08:a6:37:3d:65:8e:e3:43:
                    06:b5:25:08:e7:40:6f:d4:90:99:24:03:49:12:a7:
                    9a:95:d4:d5:3c:e7:12:29:cb:27:c1:f6:1e:3e:67:
                    ee:dc:88:d4:5a:8d:14:b9:7a:d2:48:26:52:92:a9:
                    84:f5:b4:20:ee:41:d9:e0:dc:3a:c7:cb:ad:d3:92:
                    ac:ac:05:d1:eb:3c:92:8e:1e:db:d0:20:0b:54:81:
                    56:da:05:b3:87:52:a1:80:30:f6:68:1d:24:e1:ca:
                    a3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:EC:C3:99:7D:B3:6E:A9:F5:44:2D:C4:D3:8A:0B:87:A5:96:A4
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3632303a3a2f34342d3434203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:620::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:d0:9e:60:df:77:a5:82:e5:21:16:d8:6d:b2:b1:2e:2d:fb:
         02:6b:fe:73:30:ee:dd:84:35:cb:3e:08:57:36:8a:8f:4b:82:
         c2:f8:b8:22:e6:55:c0:6e:ac:5f:9b:58:d8:f2:82:fc:7b:e2:
         d0:ff:8d:5d:ee:77:4a:4d:ba:be:5a:f3:5c:c3:80:e7:8e:46:
         2d:80:c8:29:20:d8:36:9b:99:97:a8:20:58:78:0a:40:28:53:
         c2:a6:ac:36:e1:55:60:cc:25:c2:25:21:ed:6c:8f:5e:23:5d:
         47:ea:9a:03:cf:71:f8:a4:4b:e6:b9:7c:53:7d:ff:e9:f0:41:
         64:08:4b:93:a9:59:d8:83:1f:25:51:84:3a:8d:e6:aa:2e:60:
         03:ea:f6:3b:99:3f:58:4f:61:88:66:b9:68:24:01:35:40:5e:
         95:60:33:ef:0a:f5:a9:22:ce:ad:33:7c:09:19:d2:d8:fb:aa:
         78:90:ea:95:31:0c:c7:05:5d:17:18:65:0f:04:00:5f:87:ed:
         ac:f2:49:49:ed:cb:2a:7b:45:ca:6f:b5:76:5e:8d:0e:9b:ae:
         e7:f9:86:cb:12:15:35:9c:2c:fa:b9:0a:2d:95:16:a2:80:18:
         b8:97:d2:83:4c:88:d6:61:70:9b:ed:7b:be:a3:b5:10:b9:68:
         08:db:53:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:38:32 2025 by rpki-client