Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3730303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3730303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: 58AZFV9LknZB+Q/CUjRa0bvb8x5XE9cpnZn7RAx5DzY=
Subject key identifier: 8B:B7:51:4C:F1:CA:1F:B2:3A:26:67:C9:64:F5:91:0B:4A:57:72:43
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2C2FC0862D620AAF3562B94A06EC62A237D376A7
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3730303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:44:18 +0000
ROA not before: Tue 03 Dec 2024 20:39:18 +0000
ROA not after: Tue 02 Dec 2025 20:44:18 +0000
asID: 4761
IP address blocks: 2400:8b00:700::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2f:c0:86:2d:62:0a:af:35:62:b9:4a:06:ec:62:a2:37:d3:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:39:18 2024 GMT
Not After : Dec 2 20:44:18 2025 GMT
Subject: CN=8BB7514CF1CA1FB23A2667C964F5910B4A577243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:41:42:68:8a:66:eb:62:19:81:97:e2:ed:
1b:2f:d9:c6:0a:cc:fa:1f:8f:93:c8:e6:b5:b7:e1:
03:a9:ea:64:2f:f3:87:ac:bc:16:23:bb:51:f8:41:
be:ab:30:bb:15:cb:c8:14:b9:0e:7c:27:49:67:ca:
bb:be:82:2d:a1:07:ad:e0:58:70:f3:cb:ad:62:79:
b3:37:32:01:3b:8d:80:7e:20:5e:0e:4e:d7:f0:26:
52:a3:0d:62:4e:55:45:47:5b:bf:6c:68:0f:03:06:
96:22:e3:46:0a:2b:ff:f3:f6:07:fa:96:52:53:b7:
64:80:6a:fc:fb:34:f4:b2:2b:4c:82:bd:83:d2:a8:
57:ea:ba:01:f3:22:2c:6b:28:57:1b:9e:d7:b9:12:
f4:68:c3:d4:17:4d:be:34:60:d7:0d:a5:55:59:35:
f1:e6:33:a2:29:02:01:ff:78:13:ff:d1:a5:61:f1:
cd:99:83:5b:db:c4:ff:86:e7:97:3c:6e:40:4e:38:
54:e3:c3:74:39:b9:a3:93:ad:d3:a3:72:2e:22:03:
89:c9:67:1a:cf:d1:a8:1a:06:c9:b4:c3:7b:5a:56:
cf:51:f6:2c:52:df:1c:a0:6c:08:ea:d9:da:67:2e:
c4:ed:82:cf:d6:19:f9:83:90:cc:7b:51:0d:2d:5e:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:51:4C:F1:CA:1F:B2:3A:26:67:C9:64:F5:91:0B:4A:57:72:43
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3730303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:700::/44
Signature Algorithm: sha256WithRSAEncryption
83:af:3c:dd:f5:13:45:c1:e3:8b:0c:c4:59:5f:d0:87:68:97:
6c:b1:7d:54:53:b3:fa:84:a5:92:12:a9:96:1e:10:ee:3d:d3:
c1:fd:9b:06:76:db:41:aa:29:d2:c5:03:84:f3:5c:cf:97:3e:
a7:f9:16:17:29:0e:32:4a:7a:21:0d:59:d6:a7:92:ee:18:03:
4d:6a:e8:c7:4f:ae:e1:fa:81:67:3a:80:21:e4:e8:a8:54:3e:
73:41:ea:26:13:87:3f:d2:19:2f:ac:e8:9f:d2:52:54:9c:c0:
0b:98:78:81:ac:43:a4:c1:4f:a6:15:88:2e:b9:72:62:70:ff:
48:66:96:1b:48:16:e7:c9:e9:2d:cc:e3:18:61:c5:a7:e7:02:
0e:d4:f2:82:ec:66:65:24:ca:e7:a4:8b:c2:42:21:38:aa:6c:
15:97:e8:ad:91:e1:fd:15:4a:61:ea:0b:66:ed:d4:44:23:d7:
21:77:33:11:13:5b:20:45:ee:b5:42:36:ec:13:ab:2a:d3:0b:
7d:e4:f8:1b:ee:4e:f1:11:eb:5b:af:db:73:fa:bd:bf:15:8a:
df:41:22:6c:2f:9c:8e:6f:00:41:90:ef:83:fd:a6:4b:3a:cf:
ed:f4:66:d0:66:05:09:a4:9d:d0:84:c8:1f:b3:75:34:28:44:
79:e3:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:42 2025 by rpki-client