Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3333203d3e20323030323430.roa
File: 323430313a633432303a383030303a3a2f33332d3333203d3e20323030323430.roa (raw, json)
Hash identifier: tPO6BHUO4cobJP47hv0rV2ePzge/yhKvrIq63nVaI2Y=
Subject key identifier: DA:59:01:4F:EA:03:86:BD:E9:F4:E2:EA:BF:68:C4:15:81:4D:E0:37
Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Certificate serial: 45F9F492F67BAC410F05CD8F6206B92C451FBD58
Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3333203d3e20323030323430.roa
Signing time: Mon 20 Jan 2025 13:32:49 +0000
ROA not before: Mon 20 Jan 2025 13:27:49 +0000
ROA not after: Mon 19 Jan 2026 13:32:49 +0000
asID: 200240
IP address blocks: 2401:c420:8000::/33 maxlen: 33
Validation: Failed, certificate revoked on Tue 17 Jun 2025 07:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f9:f4:92:f6:7b:ac:41:0f:05:cd:8f:62:06:b9:2c:45:1f:bd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA
Validity
Not Before: Jan 20 13:27:49 2025 GMT
Not After : Jan 19 13:32:49 2026 GMT
Subject: CN=DA59014FEA0386BDE9F4E2EABF68C415814DE037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:6b:ba:06:99:58:50:0f:55:0a:7a:18:cd:
eb:17:04:25:aa:e9:4b:85:fd:f2:88:9d:86:f1:9e:
88:c7:fc:29:bd:86:ae:c6:df:d3:60:51:db:97:f6:
85:14:3b:86:1c:41:3b:75:4e:4d:72:80:e2:34:c6:
cc:1f:13:ac:3a:b0:5d:7b:02:98:58:91:6c:a3:dc:
60:28:40:67:fc:b6:40:42:4c:56:5a:cc:b9:a7:98:
45:40:41:ad:d7:3e:56:09:b6:84:af:e8:4c:fc:87:
03:3c:bd:60:13:8b:16:13:57:72:e3:6a:cb:a4:22:
4a:17:5a:70:e7:ce:e2:19:0d:00:61:ff:c8:f3:4b:
66:73:fd:94:0c:dc:b6:ec:5f:27:a9:b8:c2:c2:c2:
eb:90:47:25:1a:ae:04:02:f9:e2:e6:0b:3f:dd:6a:
6f:65:aa:99:6b:0d:a1:48:db:3f:57:fe:3d:5b:e5:
b8:6f:c4:c7:ad:76:1b:63:9e:1e:2e:44:f7:08:f0:
46:b0:6c:ef:fd:cc:5b:69:48:3b:c6:90:04:40:d0:
cd:6c:91:fa:cb:6a:d3:e7:fd:9a:d9:01:1a:b6:a7:
c6:8f:16:19:d5:73:96:bd:84:5b:4b:02:74:0d:72:
55:07:75:7e:81:7e:d6:6f:ad:97:77:10:00:8b:b2:
6c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:59:01:4F:EA:03:86:BD:E9:F4:E2:EA:BF:68:C4:15:81:4D:E0:37
X509v3 Authority Key Identifier:
keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/323430313a633432303a383030303a3a2f33332d3333203d3e20323030323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:c420:8000::/33
Signature Algorithm: sha256WithRSAEncryption
13:80:d1:bf:8f:1f:33:17:ba:d7:e3:c5:2b:91:8f:cc:4f:fc:
37:f8:bf:6e:4e:50:71:88:e4:fe:61:1a:be:6d:d4:aa:92:53:
93:3e:f1:b6:2c:26:07:8f:54:02:6d:e8:71:10:a3:00:da:cb:
07:b9:e9:da:ab:81:c1:b5:22:c6:bc:c3:16:a4:ea:7a:c6:b0:
21:ef:f9:a5:fc:df:27:e5:e4:1f:ff:da:f5:75:07:e0:3f:28:
7e:de:7f:4b:70:8e:03:b1:7e:a3:cc:88:02:4c:fd:91:b1:3e:
c4:dc:e7:69:5d:fc:87:4f:d0:35:5c:a0:07:ba:5e:b7:40:31:
d3:8b:4f:6f:b0:12:21:04:a7:91:8e:f9:6a:24:6e:34:37:d7:
03:90:69:60:6a:d1:4b:5f:58:ec:7a:27:9b:1c:0c:06:de:58:
a6:fb:21:f4:e2:a4:83:22:cb:0f:1c:f7:ca:57:15:2a:72:1c:
e4:ed:08:96:e9:43:be:08:8f:76:3a:64:84:ad:96:8b:1d:69:
8c:74:c4:1a:b9:4b:64:f7:01:b2:85:26:72:4e:f7:53:33:cf:
d7:03:0d:86:a8:00:7e:29:95:37:7e:d5:6d:cf:ee:8c:30:78:
c5:26:17:96:dd:bc:0d:65:0a:22:a7:58:c4:ed:a0:a5:a7:3c:
16:80:2c:c3
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIURfn0kvZ7rEEPBc2PYga5LEUfvVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2
MEY3OEZDQTAeFw0yNTAxMjAxMzI3NDlaFw0yNjAxMTkxMzMyNDlaMDMxMTAvBgNV
BAMTKERBNTkwMTRGRUEwMzg2QkRFOUY0RTJFQUJGNjhDNDE1ODE0REUwMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNmu6BplYUA9VCnoYzesXBCWq
6UuF/fKInYbxnojH/Cm9hq7G39NgUduX9oUUO4YcQTt1Tk1ygOI0xswfE6w6sF17
AphYkWyj3GAoQGf8tkBCTFZazLmnmEVAQa3XPlYJtoSv6Ez8hwM8vWATixYTV3Lj
asukIkoXWnDnzuIZDQBh/8jzS2Zz/ZQM3LbsXyepuMLCwuuQRyUargQC+eLmCz/d
am9lqplrDaFI2z9X/j1b5bhvxMetdhtjnh4uRPcI8EawbO/9zFtpSDvGkARA0M1s
kfrLatPn/ZrZARq2p8aPFhnVc5a9hFtLAnQNclUHdX6BftZvrZd3EACLsmxbAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQU2lkBT+oDhr3p9OLqv2jEFYFN4DcwHwYDVR0j
BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG
RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3
OEZDQS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjg1OGY2LWRlMjAtNDEyMS1i
Y2VhLTkwNzZlZGNjYzA5Ny8wLzMyMzQzMDMxM2E2MzM0MzIzMDNhMzgzMDMwMzAz
YTNhMmYzMzMzMmQzMzMzMjAzZDNlMjAzMjMwMzAzMjM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgck
AcQggDANBgkqhkiG9w0BAQsFAAOCAQEAE4DRv48fMxe61+PFK5GPzE/8N/i/bk5Q
cYjk/mEavm3UqpJTkz7xtiwmB49UAm3ocRCjANrLB7np2quBwbUixrzDFqTqesaw
Ie/5pfzfJ+XkH//a9XUH4D8oft5/S3COA7F+o8yIAkz9kbE+xNznaV38h0/QNVyg
B7pet0Ax04tPb7ASIQSnkY75aiRuNDfXA5BpYGrRS19Y7HonmxwMBt5Ypvsh9OKk
gyLLDxz3ylcVKnIc5O0IlulDvgiPdjpkhK2Wix1pjHTEGrlLZPcBsoUmck73UzPP
1wMNhqgAfimVN37Vbc/ujDB4xSYXlt28DWUKIqdYxO2gpac8FoAsww==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:31:35 2025 by rpki-client