Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3962303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3962303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: xt/cXIYX0fc00PH9YJa+I9didE5jm+knflUhQtF7rsg=
Subject key identifier: 88:73:05:CC:B2:E8:35:40:E5:10:87:AA:86:A5:14:10:E6:7C:2C:F4
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 44E40788DF24135D3394822D0DDE116F6C0727CF
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3962303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:49:53 +0000
ROA not before: Tue 03 Dec 2024 20:44:53 +0000
ROA not after: Tue 02 Dec 2025 20:49:53 +0000
asID: 4761
IP address blocks: 2400:8b00:9b0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e4:07:88:df:24:13:5d:33:94:82:2d:0d:de:11:6f:6c:07:27:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:44:53 2024 GMT
Not After : Dec 2 20:49:53 2025 GMT
Subject: CN=887305CCB2E83540E51087AA86A51410E67C2CF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4d:2e:0e:70:14:4a:12:4b:c4:8e:4c:3f:c2:
a9:2f:ca:34:9c:f6:3a:81:0e:ba:91:5e:30:b8:fe:
04:6c:ba:20:a1:bd:c7:98:b5:a0:36:54:db:d2:6b:
c4:c4:45:bc:0d:f5:ad:de:44:a0:a1:a6:10:7c:86:
18:09:4b:ca:8f:e5:85:19:26:df:51:a6:40:56:0b:
2c:e2:7d:2a:cc:7b:f8:a7:e7:de:06:ea:9a:68:01:
05:de:03:92:d4:3d:9e:18:eb:1d:35:8e:a4:e4:6f:
70:9f:2b:35:67:8b:2b:10:76:87:f7:d8:e5:3c:a4:
5e:78:fc:25:05:b0:ff:e3:26:9e:ed:6c:29:7f:95:
93:d4:c2:4a:e8:3e:5e:6c:47:7f:d8:11:79:40:07:
a1:6f:7f:3f:69:d4:59:d2:26:87:a2:b1:a2:e4:aa:
42:cb:4f:d9:8b:f1:08:20:de:9b:38:28:82:c5:97:
39:07:fb:e9:7f:b2:57:57:8b:b2:90:9b:1f:0d:6d:
bc:5b:b4:eb:f2:68:28:f7:5e:b1:5f:33:70:ea:09:
ad:51:08:12:93:b1:af:81:7a:40:55:e1:ee:66:55:
63:a1:e2:63:91:c7:c6:e4:2c:1c:c8:ab:57:a2:bc:
ff:d8:e0:ba:a5:0b:ec:ff:32:44:7b:27:e0:44:34:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:73:05:CC:B2:E8:35:40:E5:10:87:AA:86:A5:14:10:E6:7C:2C:F4
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3962303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:9b0::/44
Signature Algorithm: sha256WithRSAEncryption
98:48:02:7f:50:e8:80:69:7d:d1:7c:75:a8:d8:ca:91:99:48:
f3:e0:98:71:af:08:72:e5:d0:1c:4e:65:72:5d:2b:97:c9:e9:
7a:03:5a:cd:47:76:62:23:13:99:47:26:e9:40:67:c9:f1:2b:
81:69:f3:65:11:95:49:d6:3c:c8:87:c7:06:f2:01:ef:87:ed:
68:38:59:3e:0e:0c:82:a5:25:07:8a:d9:46:0b:f6:5a:6a:5c:
5a:71:d7:29:14:55:70:7b:b1:f7:17:99:ce:52:52:bd:18:9b:
06:5a:d7:44:95:aa:b9:57:7a:59:58:6a:64:25:9b:da:94:5a:
09:36:f3:89:7f:fd:c8:4b:4d:eb:1c:bc:b7:ac:51:b5:3b:b5:
c9:f5:85:ba:a1:ef:9f:6b:0e:dc:0f:47:08:0e:90:52:6f:de:
d4:64:f1:12:46:da:e9:81:5b:6b:cf:92:9a:bd:8b:96:ae:04:
bc:e5:62:95:f5:60:c7:a1:68:e4:d3:31:a5:9e:b7:aa:a8:8e:
36:24:f6:30:11:22:36:14:d5:87:d0:ac:a8:ac:97:90:53:ea:
0f:c7:f3:e3:56:92:78:12:28:40:25:ee:39:ae:45:77:bc:76:
e0:e7:58:f9:5e:b4:18:7e:ac:db:9e:02:6b:fa:f7:e0:c8:e5:
16:f9:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:00 2025 by rpki-client