Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6332303a3a2f34342d3434203d3e2034373631.roa
File:                     323430303a386230303a6332303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier:          IuXYbpdaGcnyxr0rlRAdOCYr/IGDLhnrZQ9BrL3mEpw=
Subject key identifier:   23:0A:6B:99:64:C6:BF:32:73:EF:22:80:2E:0C:C0:D7:33:18:9F:C3
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       5A2B57D09B8E18A9E8348923088466E0E6C4F561
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6332303a3a2f34342d3434203d3e2034373631.roa
Signing time:             Tue 03 Dec 2024 20:57:52 +0000
ROA not before:           Tue 03 Dec 2024 20:52:52 +0000
ROA not after:            Tue 02 Dec 2025 20:57:52 +0000
asID:                     4761
IP address blocks:        2400:8b00:c20::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2b:57:d0:9b:8e:18:a9:e8:34:89:23:08:84:66:e0:e6:c4:f5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:52:52 2024 GMT
            Not After : Dec  2 20:57:52 2025 GMT
        Subject: CN=230A6B9964C6BF3273EF22802E0CC0D733189FC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f0:e2:4c:aa:95:64:9c:9b:74:d8:bb:ef:eb:
                    e5:16:87:49:95:7c:82:06:43:5b:0b:bb:a1:b4:fd:
                    3c:60:51:82:e8:ad:4c:5f:b6:30:b5:cb:48:c0:9d:
                    36:eb:12:8d:ed:5e:d2:9c:fc:5d:62:a9:59:eb:e5:
                    c1:21:77:80:2a:d9:82:6e:de:ec:2f:94:5f:40:66:
                    d1:ef:75:6f:be:7e:61:90:c8:70:10:7f:f9:68:79:
                    2a:4e:c6:20:e8:ad:a5:fc:f6:d5:96:4f:8d:19:c3:
                    45:f3:57:cf:e6:60:7b:9c:af:99:4e:c2:81:d4:50:
                    37:96:3a:23:4c:2f:da:51:06:54:8e:af:0f:47:dd:
                    a2:e6:bc:31:09:30:0c:a7:76:e1:78:31:20:5b:0c:
                    1c:91:f2:80:7e:47:17:ea:28:d6:4b:10:ea:e7:b7:
                    ec:a8:eb:ae:76:e9:74:5e:6b:52:70:2c:14:c1:79:
                    78:4d:e2:8b:0d:22:2a:dc:9d:d4:ef:87:1b:a8:32:
                    32:85:f7:e4:34:e3:b5:71:77:1d:03:65:b5:f9:07:
                    bd:e7:1b:e5:e9:51:aa:9f:7b:d7:c9:8a:2e:64:69:
                    46:3c:11:ec:ce:fd:41:39:61:3b:0d:0a:96:4e:a7:
                    61:a6:fc:a1:4c:17:78:51:dd:7c:a9:15:cb:2e:6a:
                    40:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0A:6B:99:64:C6:BF:32:73:EF:22:80:2E:0C:C0:D7:33:18:9F:C3
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6332303a3a2f34342d3434203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:c20::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:01:fc:2b:12:c2:dc:86:22:90:c1:04:c0:f2:55:fd:b8:4e:
         10:bb:4c:23:8f:d4:4d:c7:54:d0:61:10:eb:16:eb:58:dd:3d:
         62:97:b9:5e:93:07:de:9a:a7:aa:4d:69:9f:aa:4c:54:8c:c1:
         f1:58:1b:15:90:8f:c9:4e:91:68:b4:d6:bf:28:5d:b6:ad:1b:
         89:e0:74:7d:a2:7b:db:32:b3:0b:13:02:f0:37:6a:b2:03:98:
         c7:d3:21:ce:6e:0f:c4:1a:c1:5b:7c:56:bf:61:02:43:71:3f:
         bd:3a:24:ef:15:d7:bd:8e:d6:49:a4:12:9f:13:81:49:69:82:
         c5:a5:18:7f:ce:06:97:fb:32:c4:3f:d0:e8:ec:69:e0:36:05:
         da:19:5a:e7:6e:6d:48:90:8f:c7:be:e3:8f:c2:18:bf:ca:bb:
         5c:df:f8:04:93:34:25:9b:fe:63:57:b8:0c:4f:71:2d:ca:ab:
         70:2a:5f:38:cd:f9:04:09:d2:01:77:cf:40:e1:7a:28:39:79:
         6b:3e:d7:b4:d0:8b:61:33:de:c8:54:14:14:d8:90:e3:d7:75:
         13:11:64:47:36:19:f4:ac:32:38:bc:01:17:fb:fb:36:8c:6c:
         a8:47:90:d9:2d:4e:8c:3a:48:c4:a6:4b:12:5b:dc:21:70:d7:
         16:84:18:25
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUWitX0JuOGKnoNIkjCIRm4ObE9WEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMyMDUyNTJaFw0yNTEyMDIyMDU3NTJaMDMxMTAvBgNV
BAMTKDIzMEE2Qjk5NjRDNkJGMzI3M0VGMjI4MDJFMENDMEQ3MzMxODlGQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz8OJMqpVknJt02Lvv6+UWh0mV
fIIGQ1sLu6G0/TxgUYLorUxftjC1y0jAnTbrEo3tXtKc/F1iqVnr5cEhd4Aq2YJu
3uwvlF9AZtHvdW++fmGQyHAQf/loeSpOxiDoraX89tWWT40Zw0XzV8/mYHucr5lO
woHUUDeWOiNML9pRBlSOrw9H3aLmvDEJMAynduF4MSBbDByR8oB+RxfqKNZLEOrn
t+yo66526XRea1JwLBTBeXhN4osNIircndTvhxuoMjKF9+Q047Vxdx0DZbX5B73n
G+XpUaqfe9fJii5kaUY8EezO/UE5YTsNCpZOp2Gm/KFMF3hR3XypFcsuakCfAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUIwprmWTGvzJz7yKALgzA1zMYn8MwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMyMzQzMDMwM2EzODYyMzAzMDNhNjMzMjMwM2Ez
YTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAIsADCAw
DQYJKoZIhvcNAQELBQADggEBAHEB/CsSwtyGIpDBBMDyVf24ThC7TCOP1E3HVNBh
EOsW61jdPWKXuV6TB96ap6pNaZ+qTFSMwfFYGxWQj8lOkWi01r8oXbatG4ngdH2i
e9syswsTAvA3arIDmMfTIc5uD8QawVt8Vr9hAkNxP706JO8V172O1kmkEp8TgUlp
gsWlGH/OBpf7MsQ/0OjsaeA2BdoZWudubUiQj8e+44/CGL/Ku1zf+ASTNCWb/mNX
uAxPcS3Kq3AqXzjN+QQJ0gF3z0Dheig5eWs+17TQi2Ez3shUFBTYkOPXdRMRZEc2
GfSsMji8ARf7+zaMbKhHkNktTow6SMSmSxJb3CFw1xaEGCU=
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:52:46 2025 by rpki-client