Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6133303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6133303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: WI7UuNyDZ3oahJWTQpIoQBD+HC3XqNyJCCeuLsRb2Pw=
Subject key identifier: 95:A8:4D:DA:96:1E:07:C2:01:06:25:DD:CC:6E:93:11:67:B2:EB:22
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 30FE94FBC7F2C4EB2C81E4085AEFA9842BB1EC7A
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6133303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:52:51 +0000
ROA not before: Tue 03 Dec 2024 20:47:51 +0000
ROA not after: Tue 02 Dec 2025 20:52:51 +0000
asID: 4761
IP address blocks: 2400:8b00:a30::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fe:94:fb:c7:f2:c4:eb:2c:81:e4:08:5a:ef:a9:84:2b:b1:ec:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:47:51 2024 GMT
Not After : Dec 2 20:52:51 2025 GMT
Subject: CN=95A84DDA961E07C2010625DDCC6E931167B2EB22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:b4:6f:b4:82:2c:ec:3a:0b:77:16:71:57:
3c:b7:48:4e:13:6d:53:77:06:58:20:3e:02:db:86:
4e:b3:b4:e1:dc:7d:9e:00:3e:06:ba:f2:6b:8f:54:
5c:68:02:de:7f:9c:ed:6d:28:ae:5d:21:84:1c:3d:
6c:9b:9f:49:cb:79:74:f0:f8:2c:43:01:bb:eb:e9:
82:2d:0c:7f:d9:45:fa:c3:75:39:93:f1:1b:32:3d:
4e:50:76:af:dd:da:0c:73:59:3e:04:e3:9c:99:4d:
62:49:a7:65:38:5a:91:99:50:de:14:bd:d2:eb:79:
58:46:7e:86:f3:b0:9c:fd:26:25:e9:2d:33:b9:8e:
b1:c1:be:f1:8f:99:54:0f:d7:11:c8:27:2c:81:8c:
db:6a:f3:96:96:b2:b5:06:14:c3:db:78:f6:00:35:
43:dc:f2:19:8c:c1:c6:ea:d3:d0:0d:13:1e:f2:d8:
2a:e4:f5:70:03:b0:7d:cb:5c:e2:9b:7a:3c:a9:f8:
0b:79:23:59:ef:69:b3:9f:db:19:5e:aa:4f:4a:50:
b0:97:46:be:c3:cc:7d:25:83:e2:c6:41:98:f1:16:
d5:64:70:3a:32:d4:81:1c:df:f8:b0:d0:7c:67:22:
54:24:08:12:e4:fd:48:71:41:d3:f7:ab:dc:73:01:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A8:4D:DA:96:1E:07:C2:01:06:25:DD:CC:6E:93:11:67:B2:EB:22
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6133303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:a30::/44
Signature Algorithm: sha256WithRSAEncryption
47:7a:1e:61:e4:3f:e1:27:b0:1b:3e:25:4e:22:9f:62:50:50:
73:fe:78:d4:71:a3:77:ed:b3:84:d4:4d:b8:1f:bb:26:cd:ff:
99:0d:6e:31:f5:74:0a:fd:b4:08:b8:e0:79:cc:1e:d4:1f:dc:
75:55:e9:9c:c2:f9:c2:a8:df:65:27:7d:89:f2:fb:63:8f:c0:
b3:7c:b3:ab:c9:ff:2f:d4:12:bd:b1:7a:7c:e4:0e:ae:1f:f1:
89:05:27:b7:be:bc:37:df:89:27:19:ff:8c:d0:02:38:73:bf:
98:51:10:39:f4:5a:45:44:7b:52:d6:a6:f3:69:34:cd:df:cd:
80:24:b7:0f:3a:d5:5e:12:58:95:a9:9e:2c:1c:9b:00:5d:7e:
b8:df:eb:0e:fe:4f:df:7f:60:30:12:df:24:a2:35:93:c7:e8:
31:52:9b:c2:a0:83:ed:a3:e1:9d:03:ea:56:fc:de:1e:9e:1e:
8e:0c:94:ed:b5:97:0c:fd:71:95:3d:e1:f8:73:ca:4e:9c:b1:
c5:57:dd:b6:76:f4:69:0f:ba:40:89:27:e5:67:7c:8b:06:f6:
c6:be:f7:4e:b7:de:ad:3d:3d:d3:c3:fa:b9:bd:c9:70:71:6e:
df:35:99:af:57:3a:96:2f:14:db:2f:4c:4f:c7:18:f2:69:f9:
3c:a9:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:53:35 2025 by rpki-client