Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6132303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6132303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: XR/Oh3Ylyu1lGZADMTXcaHah0Ekk2tgSTmA8XvI6Er0=
Subject key identifier: ED:21:56:52:68:34:80:80:B8:6F:8D:7A:FE:DF:E3:5F:1D:17:72:4A
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 337F1D308B71360FFD426D06BAFBD2E3E39459E6
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6132303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:52:17 +0000
ROA not before: Tue 03 Dec 2024 20:47:17 +0000
ROA not after: Tue 02 Dec 2025 20:52:17 +0000
asID: 4761
IP address blocks: 2400:8b00:a20::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:7f:1d:30:8b:71:36:0f:fd:42:6d:06:ba:fb:d2:e3:e3:94:59:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:47:17 2024 GMT
Not After : Dec 2 20:52:17 2025 GMT
Subject: CN=ED21565268348080B86F8D7AFEDFE35F1D17724A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:e9:51:53:1c:2b:1f:43:f2:ed:5f:d8:88:
28:db:12:ec:57:2e:6f:e0:d6:0d:f6:26:fd:d5:96:
da:a0:48:b4:b9:54:a6:b4:be:0f:d9:8d:0c:88:a3:
e9:42:a7:6c:d1:31:40:5f:f4:36:26:1a:32:63:fd:
53:b1:39:75:d9:c9:b5:f9:c8:b2:81:74:c8:3e:83:
00:40:d9:77:70:98:45:06:65:b4:5e:3a:4e:61:c1:
1e:6d:c8:96:fd:28:73:2f:5b:c4:86:59:fe:d5:5b:
91:08:e1:81:de:8f:82:7c:be:11:ce:95:88:5e:6b:
d5:cb:c6:10:1c:6f:4a:56:f7:37:b3:e8:aa:83:8f:
00:f0:05:cd:30:96:17:86:c0:a4:9d:87:fc:5b:27:
c0:9a:34:7e:1e:d3:00:48:b6:09:b9:e2:d1:0e:9a:
d2:61:40:f1:76:4f:e7:6a:19:6d:94:fa:bb:0b:1d:
3a:1a:0c:ea:a7:85:70:56:4a:0a:c1:97:ba:e2:98:
29:2d:26:5f:92:93:99:00:28:c9:68:a1:84:bd:d4:
86:ab:88:98:3d:86:b2:e8:17:65:1e:3d:5f:87:5a:
15:4e:27:69:9c:57:ae:37:a4:1f:85:29:2c:23:66:
4b:a0:e7:82:40:59:72:59:60:4e:59:9b:62:19:6d:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:21:56:52:68:34:80:80:B8:6F:8D:7A:FE:DF:E3:5F:1D:17:72:4A
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6132303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:a20::/44
Signature Algorithm: sha256WithRSAEncryption
20:dd:c0:84:81:02:19:d9:bf:86:4d:30:ea:5e:d0:d1:1f:d1:
96:19:68:59:c6:a7:38:ec:57:a6:e0:b3:99:34:7b:1b:af:ff:
e8:ff:31:46:6f:f9:72:58:a3:a9:31:45:42:f4:fc:41:39:d4:
59:cd:a3:3e:4f:aa:45:41:70:cc:d3:f6:be:30:70:9d:59:50:
63:7c:9c:68:d1:04:a1:c5:22:41:61:c7:cb:b6:f3:6c:59:3c:
98:cc:a0:60:1e:7b:a3:b9:1d:8b:94:2e:77:17:62:05:b0:77:
5c:0e:d9:65:f3:18:b2:f9:d2:9e:a5:a9:55:3b:93:a1:92:58:
4c:7f:c6:68:2c:c4:2c:e2:41:e3:3d:f8:e1:ab:4d:5c:5a:f7:
e7:cc:64:d5:9d:98:35:0e:91:cb:fc:dd:12:1b:29:30:f3:41:
a3:e4:45:d5:a7:a6:a6:ee:58:5f:4e:a7:00:b0:00:b1:2d:db:
9e:11:8a:98:d9:62:7b:c0:5d:3d:a2:25:1b:50:51:c6:ce:4f:
b8:48:0c:0f:07:03:44:1c:fd:26:ce:5b:b5:cb:dc:cb:4d:fb:
c1:bd:f5:8d:aa:cf:d0:e3:af:cd:26:c9:e3:ce:6c:fb:98:bb:
bc:0c:d0:46:0d:76:b5:ca:79:81:1b:29:bb:cd:d6:ed:5d:eb:
e7:35:8d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:30 2025 by rpki-client