Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6331303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6331303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: PSEXAuU6hFSLpSIcOrXcuDCZAFT9rZUNcj6DhZvaKBI=
Subject key identifier: 08:11:A0:46:45:5F:A0:8D:18:4F:1D:F8:56:D3:57:8C:C1:3D:93:65
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 71F5A46B5678AE387BC26DAE0E46CFC5613F3EA5
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6331303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:57:45 +0000
ROA not before: Tue 03 Dec 2024 20:52:45 +0000
ROA not after: Tue 02 Dec 2025 20:57:45 +0000
asID: 4761
IP address blocks: 2400:8b00:c10::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f5:a4:6b:56:78:ae:38:7b:c2:6d:ae:0e:46:cf:c5:61:3f:3e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:52:45 2024 GMT
Not After : Dec 2 20:57:45 2025 GMT
Subject: CN=0811A046455FA08D184F1DF856D3578CC13D9365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:7e:f0:b6:f3:e6:3c:ff:2c:62:3a:15:0b:
59:27:5b:91:0e:3e:ab:98:7c:5c:fa:f1:c4:9f:09:
b0:08:f1:9d:f8:04:19:14:cf:bc:ab:bb:e7:5b:a1:
1d:06:5e:97:61:f3:7a:cb:10:b6:90:57:27:f8:1d:
58:41:78:2d:f1:82:e7:c4:4c:6c:64:ce:14:48:de:
a3:90:18:4c:c0:44:1e:93:8d:89:db:72:d1:cc:fd:
9b:01:6c:bf:31:4f:c3:79:76:b3:b1:0e:a7:7b:ea:
23:39:ca:cc:99:ef:00:77:4a:80:ee:52:fd:0a:77:
95:92:68:c9:75:a8:1b:3b:ab:d6:7d:0f:3c:0b:47:
10:0b:2d:f8:62:c1:59:c1:cf:af:61:14:1a:52:4c:
fa:3d:49:81:d9:37:d2:f2:24:14:e2:18:e6:ea:05:
bd:0d:b1:1a:dd:9b:9a:98:f4:7f:c0:9b:a8:b5:b8:
28:24:db:3a:88:b4:6c:7b:f3:e0:be:ef:a3:c4:8a:
d2:4a:22:2f:25:66:c2:ec:bc:65:04:b5:c0:f9:6c:
5a:c9:55:ff:aa:87:14:de:fa:98:83:05:68:c7:da:
ae:4a:13:24:58:da:a8:59:56:c0:46:65:13:32:be:
3c:4f:b8:f3:dd:04:af:68:f3:b2:b1:a1:3a:02:ec:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:11:A0:46:45:5F:A0:8D:18:4F:1D:F8:56:D3:57:8C:C1:3D:93:65
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6331303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:c10::/44
Signature Algorithm: sha256WithRSAEncryption
ab:0a:7c:6d:f5:c3:c9:07:07:61:33:cb:0d:ad:e3:34:09:9c:
77:01:8a:d1:c7:c4:c0:be:9b:d6:c2:a1:9a:3b:65:2a:aa:77:
65:c5:5f:d4:57:4f:e7:5c:6b:7d:26:91:79:ba:44:d6:18:05:
f7:c2:fa:9c:60:76:50:b9:3c:e5:e5:9a:2b:b2:1b:22:9c:de:
b5:ba:82:d2:78:58:e5:12:63:df:1e:58:4f:01:ac:fd:5c:b1:
c8:77:de:72:fc:33:43:c8:f4:cb:20:6d:cd:23:bf:e7:99:0b:
f5:4b:a4:e4:83:87:d5:0c:97:06:d7:54:81:de:cf:3a:a5:04:
0c:14:0d:c0:26:0a:d5:49:cd:d2:50:ef:aa:11:4d:07:80:8a:
46:0b:7b:9a:13:e6:2f:02:08:a5:21:04:e2:db:3f:68:69:2b:
46:a2:00:88:24:a6:e9:c8:ac:76:42:ad:2f:0a:7c:97:2e:1a:
cb:5f:84:09:3a:1c:d4:34:75:cb:ff:03:35:bc:70:c5:31:b5:
6c:f4:f4:92:67:35:96:ff:dc:2a:86:0d:08:35:c9:38:e6:dd:
7b:99:aa:99:f4:69:6f:bd:cb:3c:b5:58:03:4b:e0:0d:d9:e6:
a0:68:a2:15:f0:43:be:65:bb:62:ba:b6:9a:97:1e:de:76:47:
26:fb:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:53:11 2025 by rpki-client