Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6161303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a6161303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: GMgPvE39tcMC4w5xvem2G3fWz+92IoVyHWRvUT6PkzU=
Subject key identifier: B2:9E:BB:B7:A3:A8:AD:94:D5:F5:2B:AC:73:CF:3A:2F:1B:30:E1:A1
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 4C367C3FDC526AAC137428CDAFE0981ACC618B8A
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6161303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:54:14 +0000
ROA not before: Tue 03 Dec 2024 20:49:14 +0000
ROA not after: Tue 02 Dec 2025 20:54:14 +0000
asID: 45727
IP address blocks: 2400:8b00:aa0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:36:7c:3f:dc:52:6a:ac:13:74:28:cd:af:e0:98:1a:cc:61:8b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:49:14 2024 GMT
Not After : Dec 2 20:54:14 2025 GMT
Subject: CN=B29EBBB7A3A8AD94D5F52BAC73CF3A2F1B30E1A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:91:88:62:1c:df:b4:ac:cf:a2:30:96:bf:
80:6a:43:68:df:43:44:86:4e:0d:a2:b6:e9:14:ac:
e8:bf:e5:00:bb:38:4f:78:68:ed:9f:c4:a7:33:f4:
81:95:b5:8c:68:9e:97:75:79:07:ad:4e:9a:e7:a1:
38:e5:f7:c4:62:ad:b4:ec:46:e4:7c:20:13:56:12:
06:c3:5b:ae:09:59:21:62:17:17:ac:07:ce:98:c3:
3f:f7:7a:ee:dd:a7:74:ba:db:ce:45:07:fd:75:d2:
ac:e1:bd:33:ea:46:d9:4b:90:ba:19:2f:b1:73:1e:
2f:34:c3:1d:23:7e:f9:7f:86:cc:48:31:a6:27:0a:
f8:c8:b6:68:da:c7:92:24:27:8e:32:34:05:71:d6:
9f:c1:8e:ac:f1:a7:34:eb:ca:a5:92:1a:13:ca:5a:
89:f6:81:9d:2f:97:3d:4e:06:3d:c9:c0:53:a3:31:
8f:81:67:73:a8:b6:a5:9e:94:dc:f4:27:d4:c4:0d:
f8:b1:d7:96:bb:a5:5f:2a:54:35:0a:3b:2d:f7:0c:
25:94:a6:d5:4a:1e:a2:a8:c4:cd:72:77:23:2d:fe:
70:7c:c7:70:b6:33:90:4f:46:d1:c4:48:e0:9f:83:
70:0b:4f:46:ab:4f:0f:fc:a8:59:47:8b:3c:48:1b:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9E:BB:B7:A3:A8:AD:94:D5:F5:2B:AC:73:CF:3A:2F:1B:30:E1:A1
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6161303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:aa0::/44
Signature Algorithm: sha256WithRSAEncryption
84:a3:78:bb:25:1b:39:da:3f:fc:69:52:0f:95:70:76:56:ad:
da:0f:47:8b:7b:b0:f7:7f:81:d8:ed:0f:9a:ad:d2:02:b8:1e:
72:1a:27:24:c4:e6:5e:ae:47:92:6f:04:e0:b3:8d:c6:e2:e3:
0a:3a:54:ba:f3:61:5b:8c:ea:c9:a3:a7:74:3e:cf:36:b6:19:
b0:2e:e6:28:34:b6:8b:e8:a5:0e:99:b2:2a:dc:c7:d6:e2:34:
76:46:1d:bb:70:c7:2d:c9:cd:7d:38:59:2c:b2:10:40:a0:c4:
9b:16:86:03:bb:bf:51:ce:b1:c0:aa:ee:8f:30:3f:db:51:73:
e7:3a:57:14:0d:d6:0a:28:48:8a:3a:f1:dd:46:67:94:1f:8f:
5f:1e:79:b0:64:98:80:86:9c:8a:b3:3c:10:09:45:db:38:79:
55:a7:90:3a:3c:a7:2e:6e:54:0b:76:ed:bb:3c:4a:ae:34:7a:
96:17:07:0d:55:2c:04:15:c5:2f:72:a9:5c:f1:31:94:15:bb:
15:f7:19:b3:f8:01:27:1e:38:73:4f:83:7e:55:ae:85:af:b6:
95:f8:19:5a:cd:b9:fa:97:02:54:7e:69:6e:c9:39:1b:fb:b5:
9f:0c:ca:b6:12:31:9f:c6:31:89:55:5d:2f:90:86:24:b2:de:
49:9f:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:55:00 2025 by rpki-client