Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6361303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6361303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: Be7i3yoiaJCVNgd/YmaPUOV5lDI9TSk3hB8fWuwDWzI=
Subject key identifier: 0B:4C:CC:F9:BB:83:13:97:8C:80:E7:17:BD:C1:CE:D2:5A:1F:D1:B8
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 52169233EE01F49F64F64CFBCCCF1A1DE5537D2C
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6361303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:58:38 +0000
ROA not before: Tue 03 Dec 2024 20:53:38 +0000
ROA not after: Tue 02 Dec 2025 20:58:38 +0000
asID: 4761
IP address blocks: 2400:8b00:ca0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 06 Jun 2025 03:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:16:92:33:ee:01:f4:9f:64:f6:4c:fb:cc:cf:1a:1d:e5:53:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:53:38 2024 GMT
Not After : Dec 2 20:58:38 2025 GMT
Subject: CN=0B4CCCF9BB8313978C80E717BDC1CED25A1FD1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:2e:5d:14:cf:0a:a3:29:d4:3a:c9:bd:36:
3b:30:4e:65:89:90:8e:0d:3e:03:15:37:fe:2f:50:
28:80:43:d2:51:f8:ee:dc:8e:45:57:8b:ec:12:34:
c3:30:2b:9d:04:bb:b2:56:6a:45:d7:b5:29:e5:62:
ec:19:9f:7e:57:97:0c:a9:28:b2:2e:48:30:af:84:
57:92:fc:2c:ad:4f:38:87:c7:e1:7d:4c:81:a5:30:
3a:f3:4b:a5:a6:8c:3a:6d:f9:da:c5:3b:04:53:c5:
99:53:84:8d:e6:5f:b8:70:1e:fb:e7:fa:40:76:9f:
a1:1f:44:ca:aa:26:11:bd:84:73:0f:5f:d3:79:2e:
f1:7b:2e:26:5a:29:3b:67:f7:d2:d5:e7:0b:4d:4a:
1e:45:ca:48:01:77:e9:83:4e:1b:bf:0c:78:e2:ff:
90:ac:47:63:83:29:89:cb:9e:6e:f4:9c:3c:5f:36:
0f:20:ed:92:c4:59:26:77:22:cc:e4:b5:cb:91:38:
57:83:76:87:29:44:89:6f:ea:3a:8a:87:fe:84:f2:
c5:4a:9a:c0:0c:16:ce:6c:80:32:d0:56:fe:d5:47:
8f:4a:20:17:98:5b:c8:48:44:34:df:ea:16:ad:e4:
d7:98:8f:fd:c0:b0:fe:f4:cc:f9:24:b1:56:66:b6:
9a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:CC:F9:BB:83:13:97:8C:80:E7:17:BD:C1:CE:D2:5A:1F:D1:B8
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6361303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:ca0::/44
Signature Algorithm: sha256WithRSAEncryption
19:94:37:d5:0c:60:fa:d0:57:3b:71:ae:f4:32:16:1c:df:13:
f5:6d:60:82:c5:db:f6:a8:b6:a2:7f:c1:7e:d5:c8:b7:96:d3:
19:79:e3:2b:2b:77:d5:88:ab:0f:20:93:30:f0:f4:ba:76:64:
20:00:a6:22:03:af:1b:05:fe:1f:8b:dc:04:8f:95:02:48:9b:
5c:e3:4c:86:7b:ec:7f:55:d4:21:55:f5:55:7f:c9:cd:8a:1e:
1f:19:ae:35:7d:32:d0:65:e8:c6:3d:5c:7c:1a:63:13:07:b2:
63:c0:c7:33:6a:fe:d6:ee:1b:eb:3e:f3:fa:b7:ac:d5:c2:f6:
44:50:1f:ec:30:d9:11:11:70:db:30:33:b8:28:bc:6b:ae:3c:
01:49:0e:60:35:55:1d:e3:7f:88:e4:ec:95:2d:fe:7b:eb:ca:
37:b9:8a:9d:df:45:bf:5a:f0:86:4c:65:63:8d:73:89:83:95:
1e:14:7b:09:27:83:80:d3:60:88:01:b2:fd:2b:35:69:3f:d6:
40:72:bd:f3:64:66:63:63:d5:a2:99:b2:81:11:fb:cd:55:c4:
fb:80:8f:65:af:b0:6b:df:d4:1b:b5:fc:e0:92:b1:b3:91:8d:
5a:b7:8f:c5:51:b8:0e:97:a7:d3:e8:4b:02:51:0a:6f:f0:97:
80:75:7f:4c
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUUhaSM+4B9J9k9kz7zM8aHeVTfSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMyMDUzMzhaFw0yNTEyMDIyMDU4MzhaMDMxMTAvBgNV
BAMTKDBCNENDQ0Y5QkI4MzEzOTc4QzgwRTcxN0JEQzFDRUQyNUExRkQxQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvii5dFM8KoynUOsm9NjswTmWJ
kI4NPgMVN/4vUCiAQ9JR+O7cjkVXi+wSNMMwK50Eu7JWakXXtSnlYuwZn35Xlwyp
KLIuSDCvhFeS/CytTziHx+F9TIGlMDrzS6WmjDpt+drFOwRTxZlThI3mX7hwHvvn
+kB2n6EfRMqqJhG9hHMPX9N5LvF7LiZaKTtn99LV5wtNSh5FykgBd+mDThu/DHji
/5CsR2ODKYnLnm70nDxfNg8g7ZLEWSZ3IszktcuROFeDdocpRIlv6jqKh/6E8sVK
msAMFs5sgDLQVv7VR49KIBeYW8hIRDTf6hat5NeYj/3AsP70zPkksVZmtpojAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUC0zM+buDE5eMgOcXvcHO0lof0bgwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMyMzQzMDMwM2EzODYyMzAzMDNhNjM2MTMwM2Ez
YTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAIsADKAw
DQYJKoZIhvcNAQELBQADggEBABmUN9UMYPrQVztxrvQyFhzfE/VtYILF2/aotqJ/
wX7VyLeW0xl54ysrd9WIqw8gkzDw9Lp2ZCAApiIDrxsF/h+L3ASPlQJIm1zjTIZ7
7H9V1CFV9VV/yc2KHh8ZrjV9MtBl6MY9XHwaYxMHsmPAxzNq/tbuG+s+8/q3rNXC
9kRQH+ww2RERcNswM7govGuuPAFJDmA1VR3jf4jk7JUt/nvryje5ip3fRb9a8IZM
ZWONc4mDlR4Uewkng4DTYIgBsv0rNWk/1kByvfNkZmNj1aKZsoER+81VxPuAj2Wv
sGvf1Bu1/OCSsbORjVq3j8VRuA6Xp9PoSwJRCm/wl4B1f0w=
-----END CERTIFICATE-----
Generated at Sat Jun 7 05:51:47 2025 by rpki-client