Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6338303a3a2f34342d3434203d3e2034373631.roa
File:                     323430303a386230303a6338303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier:          icRtDiFCQE12q8IK0FueQxX1zuvN63+tvhCclkZQ130=
Subject key identifier:   5A:E1:4F:05:58:43:AC:A1:26:F7:29:E5:60:64:49:F7:84:25:91:E5
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       0723CE6CBD356C483DB5DD239DA23BDFED2BD6FF
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6338303a3a2f34342d3434203d3e2034373631.roa
Signing time:             Tue 03 Dec 2024 20:58:16 +0000
ROA not before:           Tue 03 Dec 2024 20:53:16 +0000
ROA not after:            Tue 02 Dec 2025 20:58:16 +0000
asID:                     4761
IP address blocks:        2400:8b00:c80::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:23:ce:6c:bd:35:6c:48:3d:b5:dd:23:9d:a2:3b:df:ed:2b:d6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:53:16 2024 GMT
            Not After : Dec  2 20:58:16 2025 GMT
        Subject: CN=5AE14F055843ACA126F729E5606449F7842591E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:90:75:7c:a4:d2:fd:69:18:96:f4:f9:13:
                    f2:66:b6:a9:28:24:c0:b5:7f:c2:77:d5:6b:7e:8f:
                    57:7d:8a:a4:18:2e:4b:f2:7b:27:3b:eb:e3:0e:f6:
                    64:52:a9:5a:81:ba:db:fe:59:9c:ff:d8:17:1b:95:
                    ce:4c:d8:20:13:c1:b8:31:b8:4a:d9:5a:e2:28:fa:
                    3c:0c:70:b8:2c:38:60:f3:5d:82:76:8c:25:ab:1e:
                    39:12:0d:42:60:47:c5:5e:88:f5:ef:2c:d5:da:3c:
                    94:fd:d9:2b:d1:32:80:3d:ec:ca:c0:0c:c8:5d:a3:
                    82:f1:7f:8f:79:9a:63:ef:2b:ff:7b:23:1d:6b:4c:
                    e2:1b:b9:e1:42:bf:93:c3:44:20:07:d0:6e:82:fa:
                    54:e5:f0:f5:12:7a:08:f7:af:a4:7f:ca:60:e9:60:
                    04:6a:1d:df:b9:f2:4a:9b:f5:61:0c:e0:12:fb:78:
                    80:92:2e:6a:fb:31:2c:40:ca:01:5d:9f:86:82:ab:
                    fd:c3:43:46:73:0e:a9:35:59:df:1a:85:a4:59:d8:
                    2c:d3:6b:1c:5a:77:3f:f8:28:b9:13:93:30:2f:36:
                    9b:33:72:66:5d:44:53:bd:35:5a:43:af:f9:ce:f6:
                    7d:f4:65:e4:6d:fe:82:be:4c:b1:a3:57:99:ef:fc:
                    23:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:4F:05:58:43:AC:A1:26:F7:29:E5:60:64:49:F7:84:25:91:E5
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6338303a3a2f34342d3434203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:c80::/44

    Signature Algorithm: sha256WithRSAEncryption
         22:f1:85:e9:b4:e1:52:9f:5b:48:d6:5e:66:c9:05:5c:33:09:
         78:a1:e5:3a:e4:f1:e1:9d:c2:ca:13:cd:55:ea:ac:64:a6:bb:
         36:9c:08:78:5b:a3:bc:f0:d2:e8:3b:58:49:ed:bd:f9:65:34:
         1e:25:79:56:48:83:6d:5b:71:bc:9f:1f:20:d9:68:41:d9:cb:
         0b:98:fa:18:be:51:b9:c1:12:c5:0d:32:47:d5:7e:79:09:f4:
         2f:e6:07:9c:9d:b4:d5:e9:54:1a:d6:6a:10:8d:28:ea:b3:37:
         5d:d3:2b:5a:c7:2e:d9:02:1c:6a:ef:d7:56:5e:db:92:3a:2f:
         5d:a6:0a:53:fa:b1:7e:a9:da:95:75:be:09:3b:24:6d:a4:2e:
         c9:8e:6b:ac:a0:88:db:b4:07:02:8c:ec:0b:00:66:9a:ef:d3:
         36:8b:77:2f:79:1c:0c:f8:62:ac:77:c4:11:b9:42:06:31:a8:
         6b:a3:dc:0b:33:0e:73:e1:6c:3c:48:20:28:84:ce:27:64:36:
         50:79:31:78:e4:ee:ac:05:da:f5:24:3c:b8:ec:15:75:27:b8:
         87:d8:65:49:69:6c:ee:57:5a:62:52:14:df:6a:ca:66:b7:52:
         e7:84:ea:5c:20:01:42:53:6e:90:23:12:0c:85:7e:b8:9b:b3:
         67:42:fe:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:08:34 2025 by rpki-client