Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6232303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6232303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: QYDD/9zN8BXMw19TCiRXXaNv/7In0+I08x8T53C3gAA=
Subject key identifier: 97:00:A0:D2:4B:E7:B3:67:99:A2:6C:0C:BB:4E:68:28:F0:DF:66:DF
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 5BF2CB39B5AE8204E7E40308E5EEC0BCFA073014
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6232303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:55:51 +0000
ROA not before: Tue 03 Dec 2024 20:50:51 +0000
ROA not after: Tue 02 Dec 2025 20:55:51 +0000
asID: 4761
IP address blocks: 2400:8b00:b20::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:f2:cb:39:b5:ae:82:04:e7:e4:03:08:e5:ee:c0:bc:fa:07:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:50:51 2024 GMT
Not After : Dec 2 20:55:51 2025 GMT
Subject: CN=9700A0D24BE7B36799A26C0CBB4E6828F0DF66DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7c:92:6f:85:a5:dd:ad:8b:4d:bf:5a:aa:87:
d8:50:d4:d4:40:bb:a9:8b:65:82:72:b3:40:48:9b:
a6:48:9d:d5:36:35:4d:c9:83:28:fb:89:5c:b6:33:
f3:8b:c1:af:21:81:70:b0:cf:c9:ff:83:1a:5b:1d:
e7:a1:93:9c:7c:51:ea:c1:d4:50:36:7b:65:0a:e7:
9c:eb:8d:36:d3:cc:9d:f3:58:3b:54:46:fd:be:44:
f0:17:60:11:f4:55:4d:5d:dd:c3:69:ef:6e:b4:0c:
d4:3b:1a:33:52:a4:3e:0b:2e:e2:f1:4b:77:f0:88:
8b:29:a3:83:80:d9:2d:a1:85:5a:34:b9:bc:bf:2a:
fe:07:10:8f:aa:17:e7:aa:65:a1:df:5b:40:72:6f:
96:bf:6a:75:d9:12:e6:48:79:7e:9e:2c:11:ea:14:
bd:fe:19:b7:ab:0f:c9:24:a8:eb:be:86:a5:c3:ff:
49:5a:1d:39:0b:01:c8:d6:46:1b:92:79:cb:2f:22:
12:8f:29:14:47:65:21:74:04:05:1b:9b:f9:9d:85:
8d:f6:45:2a:a8:3e:e5:34:c1:ea:86:c3:65:f3:c8:
c0:5e:93:31:42:af:a6:90:dd:7b:c6:fd:69:b1:82:
51:bc:f6:b6:51:4c:bd:69:eb:33:77:36:e9:51:d7:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:00:A0:D2:4B:E7:B3:67:99:A2:6C:0C:BB:4E:68:28:F0:DF:66:DF
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6232303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:b20::/44
Signature Algorithm: sha256WithRSAEncryption
20:69:95:9c:03:7a:e5:b5:47:e6:93:09:04:d5:59:56:ba:37:
67:53:e3:29:0e:8f:d4:a5:4a:dd:49:7c:d4:09:c6:fd:3e:03:
95:8e:83:54:26:8e:a3:f6:27:5a:91:23:56:ec:c1:96:81:9a:
d3:25:07:14:f6:0e:83:10:02:4b:5e:95:97:37:d6:46:2e:43:
d8:b1:c7:cc:32:a1:5c:e7:73:cc:2b:c9:22:0a:5e:45:2a:61:
6a:8b:4a:89:70:ca:96:21:d7:c9:63:8a:a4:0c:c4:aa:5b:94:
6c:43:97:47:de:4a:db:cb:02:76:a6:e0:8a:c3:20:97:18:d6:
7c:cf:19:8c:1d:3e:b2:03:2a:81:e6:31:a4:dd:dd:bd:d0:c6:
f2:ea:c0:4d:2d:d2:99:df:6b:6e:9b:c7:6e:c6:50:6d:82:49:
79:62:72:b0:34:75:af:88:41:98:e6:fe:23:5d:eb:a2:e0:1e:
29:4b:3a:46:56:f4:5e:05:73:51:1d:76:ea:e3:c7:87:06:b1:
2f:c3:1f:d3:50:42:4b:fe:ce:bf:9e:56:03:67:4c:22:ca:8d:
c7:63:74:91:c5:8d:49:04:77:73:4f:90:4a:fc:f9:29:72:94:
50:e7:37:f2:a2:7d:14:84:1b:a9:98:9c:50:12:14:eb:0d:2c:
ee:65:c8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:03:11 2025 by rpki-client