Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3131303a3a2f34342d3434203d3e203435373237.roa
File:                     323430303a386230303a3131303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier:          RlN8GoeGhjEPRJFndgEz2LUbLt03XIuNzCZVuHwaneY=
Subject key identifier:   70:DC:B8:09:C8:37:AF:AD:F2:1C:BE:A6:D5:78:D4:14:47:52:E0:24
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       600DA0E5B8A95576B0BEA2E6D1A004CA5B9C0256
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3131303a3a2f34342d3434203d3e203435373237.roa
Signing time:             Tue 03 Dec 2024 20:34:39 +0000
ROA not before:           Tue 03 Dec 2024 20:29:39 +0000
ROA not after:            Tue 02 Dec 2025 20:34:39 +0000
asID:                     45727
IP address blocks:        2400:8b00:110::/44 maxlen: 44
Validation:               Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0d:a0:e5:b8:a9:55:76:b0:be:a2:e6:d1:a0:04:ca:5b:9c:02:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:29:39 2024 GMT
            Not After : Dec  2 20:34:39 2025 GMT
        Subject: CN=70DCB809C837AFADF21CBEA6D578D4144752E024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:96:17:43:57:91:f9:7d:db:71:ea:d7:d5:
                    e7:dc:79:d5:92:7d:35:ba:40:2f:c1:20:f1:da:b1:
                    97:36:29:a7:90:cb:ee:88:e0:e5:ea:36:86:a4:1e:
                    23:df:92:e1:27:8f:c0:be:3d:2b:75:ac:c2:64:80:
                    98:cc:79:18:ec:f6:e6:b0:a2:99:1c:11:86:2a:81:
                    ce:67:f3:a8:16:dd:ee:1a:b7:fc:35:a0:0a:47:54:
                    3c:26:32:bc:e0:c2:57:b6:bd:e3:02:fd:62:97:05:
                    f8:04:2b:3f:07:23:f7:53:18:27:db:c5:3b:d7:df:
                    9e:de:34:86:80:38:43:5a:30:9e:e0:f0:e2:f8:ae:
                    76:f3:16:b7:f8:b9:e3:b6:1a:e1:e9:09:20:d3:19:
                    92:24:33:aa:21:45:16:d2:86:be:9e:da:26:47:b3:
                    97:5f:8b:27:c9:81:b5:cb:56:d7:84:c3:0e:75:37:
                    e6:75:21:4d:6c:2d:e1:66:f3:f6:97:25:fe:05:53:
                    6f:34:f7:11:a1:86:2b:5a:54:83:d2:df:ca:c1:7c:
                    32:20:82:e7:68:c5:99:11:17:f4:58:84:cd:98:b3:
                    95:47:ce:b2:31:d7:a5:77:d0:0a:6e:40:9b:4d:8b:
                    d8:4a:4f:b8:2d:12:82:9f:7b:a6:6b:8e:42:25:be:
                    da:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DC:B8:09:C8:37:AF:AD:F2:1C:BE:A6:D5:78:D4:14:47:52:E0:24
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3131303a3a2f34342d3434203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:a0:f9:81:f7:36:b2:08:45:cf:54:e7:6f:2d:70:b2:1b:
         44:4d:8e:3c:3b:e5:97:6b:55:5d:16:b9:4c:99:36:9e:37:42:
         3a:20:e5:30:4c:e6:0f:99:33:c2:27:2b:ea:0c:e0:c4:a8:0b:
         96:58:9e:4d:9b:db:1b:6b:fc:45:1b:7a:e8:14:4a:ae:16:1c:
         12:51:ff:d6:8b:da:d2:c3:15:48:25:65:b9:24:af:9e:0d:cb:
         9e:da:71:ce:ec:de:2b:95:51:a3:04:e8:fa:b0:08:f0:b0:c7:
         b4:65:f3:c1:3f:3a:9b:b8:45:34:d4:a2:ce:8a:6e:eb:45:f3:
         fe:b7:3c:31:00:98:5e:25:e3:b7:6c:6a:8a:46:75:d2:03:e8:
         5f:b2:7e:72:a7:f0:e6:37:8f:07:0b:b0:af:9f:ff:a9:27:b2:
         63:93:12:b6:fa:f0:41:24:d4:32:08:18:ba:eb:af:0e:15:83:
         f1:1a:39:7d:ec:31:57:40:c4:46:f5:3c:4c:68:6d:fc:01:b6:
         25:cc:12:94:76:ed:29:87:f0:ba:3c:51:31:2f:9a:6b:de:7f:
         eb:2d:97:f4:1d:7b:6c:bb:be:0d:60:00:dd:15:7c:03:e4:37:
         4d:45:43:ea:23:85:50:10:88:de:69:15:02:44:f6:7b:de:12:
         b8:7e:84:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:32:18 2025 by rpki-client