Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6262303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6262303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: EaJToc3xHjtuJ+22Ss4pLleGXAHcLJHknNxWYquoCNs=
Subject key identifier: C1:09:4D:CE:78:4E:33:89:4A:68:87:02:08:B6:3A:E2:68:86:6E:BE
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 66597C91E4429C503B8A857219D701391D848DC2
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6262303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:56:47 +0000
ROA not before: Tue 03 Dec 2024 20:51:47 +0000
ROA not after: Tue 02 Dec 2025 20:56:47 +0000
asID: 4761
IP address blocks: 2400:8b00:bb0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:59:7c:91:e4:42:9c:50:3b:8a:85:72:19:d7:01:39:1d:84:8d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:51:47 2024 GMT
Not After : Dec 2 20:56:47 2025 GMT
Subject: CN=C1094DCE784E33894A68870208B63AE268866EBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:dd:55:73:82:53:d0:33:5d:e5:8f:58:84:
81:76:77:e2:07:6b:63:da:9b:0f:18:cd:d9:07:ba:
b5:78:26:96:f2:19:fe:40:fe:af:6d:ca:55:4d:b7:
f0:5f:99:98:ce:ed:ed:c7:cb:ff:21:24:e9:d0:2b:
37:34:07:dc:06:b2:e0:cb:99:84:c6:bc:55:18:18:
e5:00:b6:d2:3e:34:97:dc:f7:5e:79:a7:e5:17:66:
10:9f:f7:bf:e5:08:2e:80:e0:f7:fa:81:68:30:f2:
c5:fe:16:79:57:9e:41:23:4a:b9:ee:0f:76:a7:c2:
f1:38:46:4e:68:11:7f:ee:63:69:47:4e:12:0c:4f:
43:dd:35:79:19:6e:bd:74:bc:05:58:eb:e3:90:e2:
dc:bb:f2:7d:8b:07:b6:b8:a2:be:14:31:39:28:60:
97:7c:67:6d:4f:e6:f0:7b:f1:8a:e8:58:44:e5:12:
f0:cf:54:5c:60:74:2d:f2:07:0d:f5:12:88:17:1d:
60:43:c8:ca:db:d2:46:01:4e:52:31:d2:21:0a:0d:
2b:cd:1b:75:03:28:08:c8:fb:b9:8d:c9:27:82:1c:
83:f2:0e:03:42:dc:4b:6f:a6:5f:00:85:88:ec:80:
7e:d8:35:d9:d4:55:08:61:92:5e:b4:28:5a:a1:46:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:09:4D:CE:78:4E:33:89:4A:68:87:02:08:B6:3A:E2:68:86:6E:BE
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6262303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:bb0::/44
Signature Algorithm: sha256WithRSAEncryption
13:09:ff:77:de:e6:4f:dc:0e:65:fa:07:f3:53:64:e8:3a:5a:
61:6d:14:7c:0d:de:61:ae:e6:38:78:18:d7:d2:68:ca:b1:71:
82:6b:ae:db:bc:15:94:cd:93:c9:16:44:8b:0e:32:f9:74:e6:
74:e5:00:50:9d:23:a4:aa:45:4b:b9:80:18:f3:36:2f:e2:d9:
64:ff:85:80:98:d2:22:bb:00:8c:0d:72:52:26:ab:2a:7b:9e:
23:4a:81:f5:9c:45:b0:d5:dd:95:6a:41:fd:15:0a:cd:4c:af:
07:2e:59:fe:1a:de:39:d1:18:77:50:d5:56:4b:51:3d:39:4c:
b1:d6:40:a1:f0:62:51:0b:6d:76:a2:bf:85:91:d7:70:65:32:
b3:1e:3f:46:e3:4a:26:5a:38:18:5d:5b:5d:d0:7e:e9:97:e0:
8b:38:5a:f7:4e:5a:ab:d7:4b:c2:9c:b8:26:15:d1:50:2a:55:
ff:be:11:f0:9c:e6:22:d2:d6:8f:df:a1:fa:ee:63:ae:07:15:
03:12:fe:70:bd:68:c3:70:0b:9d:37:90:12:ae:65:67:76:64:
91:a8:81:22:ef:6c:3c:f1:d7:c7:9a:27:d7:a3:b9:b0:0e:6c:
33:01:77:d3:73:d6:36:3f:f5:3b:12:e0:0c:8b:a7:7d:d5:ce:
4d:23:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:27 2025 by rpki-client