Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6230303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6230303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: f8fQeFgRjSrtf/qnC0Vh78/xJcAFSKGCWm8yYfLOKt0=
Subject key identifier: 02:4D:03:6A:A9:8C:5E:D6:53:65:C2:64:AE:F1:56:62:3D:09:5D:25
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 31C45AA524C33C4F936ABE2338BC45B31011E25B
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6230303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:55:27 +0000
ROA not before: Tue 03 Dec 2024 20:50:27 +0000
ROA not after: Tue 02 Dec 2025 20:55:27 +0000
asID: 4761
IP address blocks: 2400:8b00:b00::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c4:5a:a5:24:c3:3c:4f:93:6a:be:23:38:bc:45:b3:10:11:e2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:50:27 2024 GMT
Not After : Dec 2 20:55:27 2025 GMT
Subject: CN=024D036AA98C5ED65365C264AEF156623D095D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2b:3e:0a:36:55:7c:0b:e6:83:5d:e5:83:56:
d1:8c:f3:d9:43:de:6c:9f:0d:6d:51:8a:d9:34:80:
d4:a9:a5:b3:75:f7:29:b7:9a:36:a8:58:e1:6a:73:
45:51:6e:fd:e5:92:46:61:f0:4b:79:af:ab:3c:b5:
78:78:6c:da:fb:54:40:d0:5b:76:ad:ff:8b:00:22:
1c:ee:56:a5:c5:9e:cf:b5:2d:f7:f9:5c:7b:45:28:
b5:2a:81:f7:15:da:67:c6:6d:69:c5:c6:0c:95:cc:
5e:0a:b2:d6:d3:a3:b6:e4:f6:ca:05:36:6c:29:88:
66:5a:f7:72:95:a3:45:f8:cf:87:2e:b6:ec:94:6c:
a3:00:aa:50:1e:5f:58:00:2d:a7:98:8d:5c:9f:fd:
26:7f:28:31:78:23:01:83:11:54:dc:8a:5e:0f:51:
21:36:dd:df:11:c5:74:0f:2e:30:b9:54:9f:1f:02:
ee:33:20:01:44:98:2f:5f:81:cd:fa:f3:b0:b2:35:
ff:2d:84:ba:70:c8:88:d8:4e:a0:40:65:a7:63:ca:
49:22:7b:be:8d:cd:2b:31:93:dd:cf:d0:3a:e3:84:
06:d0:ee:6c:1e:a4:ac:6a:25:4c:86:9a:b1:56:5e:
b9:f4:32:7c:8a:f9:14:2c:2a:7b:60:a8:2f:a8:c2:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4D:03:6A:A9:8C:5E:D6:53:65:C2:64:AE:F1:56:62:3D:09:5D:25
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6230303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:b00::/44
Signature Algorithm: sha256WithRSAEncryption
04:71:57:1c:07:09:e9:67:69:d5:39:12:53:e6:5f:5c:18:a7:
e0:08:7a:44:bf:36:4e:69:22:21:5e:55:c5:41:03:44:46:ea:
64:6c:97:67:da:fc:fb:56:15:90:f8:3c:00:4f:10:78:92:ca:
d5:96:3f:9d:25:df:68:35:e2:f1:e9:be:94:f0:3c:71:c9:8a:
42:89:8f:a8:25:cf:db:8a:f7:ff:b8:38:25:76:74:14:c8:f5:
18:e2:3d:3b:97:ac:b3:40:c6:ae:47:dc:13:ec:4b:ce:db:0c:
f6:f3:64:a0:ce:3c:83:0a:00:33:63:f3:f5:a3:27:a9:03:e1:
30:f4:1c:a2:95:2a:e4:df:9f:4d:41:17:74:5b:51:f7:18:e7:
0d:fd:e0:3a:73:3d:00:34:36:09:64:45:00:7e:87:94:d8:99:
83:b6:c4:35:6a:8d:24:b2:8e:69:1f:33:d0:a2:2c:7c:f8:03:
d8:1b:e0:0c:b6:82:e1:17:2e:bb:dc:a9:b9:dd:00:ac:11:35:
f7:67:a0:19:ea:bc:b2:aa:d7:9a:92:7f:e9:f4:91:0c:fe:7b:
12:55:a5:99:e5:25:ac:57:e1:d4:8e:63:f0:b2:d3:33:82:66:
a7:86:69:cd:0c:a5:9d:c3:a8:51:ee:74:75:f3:26:6f:63:de:
61:8d:eb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:01 2025 by rpki-client