Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3633303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3633303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: tOmq43uTPSPOToed5nDxO8ewo477VeZDsBFXR+DG4Cs=
Subject key identifier: 0A:9D:8E:4F:C0:41:2C:EF:18:86:DE:65:B3:E8:24:D5:A5:52:24:DD
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 28085359762595E15408304A39953B2211F779A5
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3633303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:43:17 +0000
ROA not before: Tue 03 Dec 2024 20:38:17 +0000
ROA not after: Tue 02 Dec 2025 20:43:17 +0000
asID: 4761
IP address blocks: 2400:8b00:630::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:08:53:59:76:25:95:e1:54:08:30:4a:39:95:3b:22:11:f7:79:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:38:17 2024 GMT
Not After : Dec 2 20:43:17 2025 GMT
Subject: CN=0A9D8E4FC0412CEF1886DE65B3E824D5A55224DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:fa:d1:ad:a3:60:87:37:63:cf:c7:e1:dd:
dc:2c:45:3c:4a:1c:4f:cc:3d:a3:c8:36:50:c6:87:
65:8a:d4:9d:df:c8:97:5a:df:f6:79:cf:00:fa:a5:
b8:eb:eb:11:c0:f3:e9:a5:1c:a0:c4:f2:94:66:4f:
eb:18:57:b2:8f:b1:59:bf:49:cb:21:72:e1:bb:75:
e7:da:0a:50:e4:d8:9e:db:ef:52:01:4d:a9:1f:70:
3e:18:e8:6a:04:3c:83:56:36:c0:76:dd:ea:b0:35:
84:eb:66:a2:0d:f5:a0:99:b4:aa:03:d1:30:ad:b7:
4e:52:0f:f7:2d:49:9a:43:3c:7f:08:f6:c5:c9:8e:
b9:16:90:84:1a:cb:5d:dc:d6:4e:a9:79:15:ef:cc:
d1:b7:22:dc:76:ff:eb:23:3a:db:fe:c1:7e:b2:aa:
b4:9b:3c:fa:77:86:aa:3f:cf:84:54:78:01:18:6f:
53:70:b3:37:16:05:8c:82:f9:ed:ca:29:9e:b9:bd:
37:29:b4:2f:7d:6b:a8:b3:13:4f:0a:77:07:ac:8b:
d6:fd:fa:0f:9e:d1:bd:2f:97:9a:9c:e8:9c:7c:dd:
94:6e:fc:73:da:fa:23:8c:6a:98:2b:32:7b:41:bf:
76:ef:45:47:fb:64:21:2d:29:a2:c9:0c:14:d2:56:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9D:8E:4F:C0:41:2C:EF:18:86:DE:65:B3:E8:24:D5:A5:52:24:DD
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3633303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:630::/44
Signature Algorithm: sha256WithRSAEncryption
04:cd:aa:c2:d6:d4:06:d6:c8:ca:a1:93:c4:6b:7c:97:fd:e8:
82:31:25:d9:43:23:ef:41:f2:6c:35:f5:a9:a2:35:de:65:48:
9c:29:92:cb:39:eb:5d:26:9d:dc:1b:4a:f5:81:f2:cc:6e:1a:
44:6e:0a:d2:94:52:75:8c:3d:b6:50:56:b2:61:18:9b:71:80:
9b:0f:5f:b3:ac:9c:8c:3c:25:ca:0f:73:c5:1b:1d:04:71:5e:
25:79:a9:a6:a6:f7:4a:48:69:57:0d:75:d6:82:01:89:6c:3c:
d6:d4:94:30:35:cd:91:9c:8f:86:b4:a4:f0:6b:a9:2a:72:70:
45:5e:c8:bf:cb:c1:eb:d4:80:87:bb:c9:af:1d:56:3c:b2:0f:
21:bd:2b:9f:d0:2a:03:fa:03:7b:a7:77:0a:2d:b5:5a:cd:96:
e6:ed:42:70:6c:84:9b:08:f4:a0:7f:6f:61:ff:51:36:be:8b:
aa:07:e6:b1:ce:ca:ba:dc:e0:c2:c0:cf:61:72:47:57:02:29:
69:33:d1:e9:09:7e:4a:04:8e:2e:46:92:fd:6f:80:57:88:7d:
0b:ae:22:7e:33:28:b1:f1:8e:3e:3d:e2:af:6d:3d:66:13:06:
f4:6f:0d:dc:97:b0:80:b0:ad:5a:3a:5b:e4:31:46:6a:09:31:
9f:de:0d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:18:54 2025 by rpki-client