Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6233303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6233303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: EHbndRXXSWg7kHOR0tao7ipBpWiiENkEyYqYkWkI1eE=
Subject key identifier: 2A:8C:02:F3:EA:72:10:73:76:9B:5A:F9:26:72:A6:5A:DB:5A:15:8B
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 48CE17B7454F0895A49DB8ED6D45A8B855D51023
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6233303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:55:58 +0000
ROA not before: Tue 03 Dec 2024 20:50:58 +0000
ROA not after: Tue 02 Dec 2025 20:55:58 +0000
asID: 4761
IP address blocks: 2400:8b00:b30::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ce:17:b7:45:4f:08:95:a4:9d:b8:ed:6d:45:a8:b8:55:d5:10:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:50:58 2024 GMT
Not After : Dec 2 20:55:58 2025 GMT
Subject: CN=2A8C02F3EA721073769B5AF92672A65ADB5A158B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:d8:da:38:db:d1:e6:43:4c:57:6f:9c:7f:
a5:a2:3b:32:f7:7e:9a:c2:99:00:d9:43:a0:f9:6e:
e2:ce:31:4d:a0:f4:c0:a5:b9:ba:b9:b4:74:25:75:
42:9e:d6:5d:8c:60:bd:59:d2:98:27:5d:08:b9:5e:
f3:07:7d:cf:4d:09:d4:40:e5:45:9c:a1:7e:9d:ce:
41:80:36:a0:f2:0a:c9:97:b7:2a:c0:09:f9:41:33:
33:35:7a:f2:2f:d8:be:52:82:4f:4e:10:de:f5:e0:
d7:ac:5b:bc:18:59:54:f0:1e:82:1d:09:a6:eb:13:
59:87:6e:0f:32:bc:01:2a:b9:65:3b:5f:3c:dc:b6:
64:91:51:b1:41:79:a7:e4:a8:96:49:64:82:47:af:
2d:13:b7:0d:8e:38:47:89:88:de:4c:73:fb:1c:53:
ad:fe:aa:78:7c:af:ed:c4:ff:b8:02:5c:39:00:e1:
f0:cb:66:cb:c3:72:80:af:1f:92:f0:c3:07:4b:6a:
5c:47:23:a3:c1:ea:2b:3b:f2:d4:0e:61:67:b9:5d:
d4:ac:ec:2d:f2:d4:a6:b3:b3:6e:66:5c:44:95:3c:
63:ea:ce:c9:d7:f2:56:1f:ed:a5:e9:1b:0c:36:b6:
2a:bc:f9:c4:7a:32:45:e2:b5:64:22:b0:bb:3e:1f:
80:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8C:02:F3:EA:72:10:73:76:9B:5A:F9:26:72:A6:5A:DB:5A:15:8B
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6233303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:b30::/44
Signature Algorithm: sha256WithRSAEncryption
5b:58:05:d0:07:a8:b9:44:b3:12:9d:7a:16:35:fe:b4:a3:0a:
01:fc:7d:4f:73:67:75:61:23:b7:60:3f:f6:12:91:97:59:89:
eb:75:7f:ba:a8:39:cc:9c:ca:bb:53:28:13:4d:86:78:e8:1c:
0b:96:4b:37:3a:f2:33:f1:d7:9d:18:21:72:a3:af:48:16:16:
ad:2f:1a:09:e0:47:e7:75:d9:f8:83:23:ba:27:15:1f:c0:ae:
32:4a:2c:5f:98:7d:96:de:bf:c9:63:e0:6a:d0:5f:4b:0b:47:
73:59:95:ae:29:c5:9c:f1:88:41:84:e8:7c:5c:5a:b6:a4:8f:
d6:86:af:56:f3:bc:5d:f1:18:19:4c:21:b1:8a:11:1a:bc:98:
3f:96:65:9a:e6:9b:46:bc:31:10:2b:1e:02:54:f9:93:3a:1b:
bb:66:16:63:90:3d:77:9e:94:23:e0:b6:02:f6:1e:66:f8:33:
ba:d9:97:c6:a9:37:55:b8:bd:27:d5:5e:f4:14:86:00:fc:b4:
3b:53:6a:61:3e:78:66:d3:7d:8f:18:52:50:cf:57:e2:b8:51:
e2:5e:1e:2b:e2:ef:02:9d:4a:46:22:ca:92:b8:a4:64:40:20:
5b:85:34:b4:9e:0c:75:dc:5b:60:88:cb:e1:a8:44:d4:78:d1:
6a:c7:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:46 2025 by rpki-client