Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3233303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a3233303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: 1mUWjSsMvW5Z2luvsITLj36qJQzmiqKt1RrENuIsCBs=
Subject key identifier: 49:51:EB:A2:32:25:F5:26:38:52:B8:80:77:18:66:70:F0:2C:E5:DA
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 378DA7ED33281732D70BDD33A3F1431A12A95772
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3233303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:37:12 +0000
ROA not before: Tue 03 Dec 2024 20:32:12 +0000
ROA not after: Tue 02 Dec 2025 20:37:12 +0000
asID: 45727
IP address blocks: 2400:8b00:230::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8d:a7:ed:33:28:17:32:d7:0b:dd:33:a3:f1:43:1a:12:a9:57:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:32:12 2024 GMT
Not After : Dec 2 20:37:12 2025 GMT
Subject: CN=4951EBA23225F5263852B88077186670F02CE5DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:39:13:b4:ae:bc:27:f0:b4:d7:db:58:24:
14:75:e6:62:a2:1c:e2:33:8a:2a:45:d5:09:33:b3:
cd:e8:9e:1c:97:c1:91:88:21:97:c9:a1:d6:41:0d:
ca:45:34:ef:37:a5:8b:d5:da:b1:e3:1a:be:ea:87:
40:e6:fb:35:d6:6b:53:2a:de:3b:75:aa:b9:59:4b:
f5:67:9a:1e:a0:7f:6b:9e:73:e4:9c:14:70:0d:50:
80:31:98:3e:e2:e9:d5:77:f1:32:01:6b:79:7d:d8:
18:80:6c:d9:d4:13:eb:fb:8c:40:de:39:90:f3:22:
90:2a:1d:78:41:7e:09:8a:75:07:f6:cf:37:e2:d7:
d6:cf:0c:81:0d:7f:b9:43:52:85:ac:c0:2e:80:8c:
63:14:56:24:33:b4:10:a6:89:9d:bd:b7:f7:89:8f:
31:ec:87:0a:3a:98:b9:ad:89:2b:71:4b:28:cf:88:
0e:79:2f:b2:3d:d0:5c:5b:29:37:e6:1f:2f:68:0a:
93:29:c4:7d:2f:21:cd:df:54:2b:a0:21:62:bd:bd:
5d:fb:c7:75:a1:43:0b:9b:9f:23:69:4f:05:da:8e:
e5:af:67:71:fa:4e:43:d1:42:3c:6b:9c:7f:ee:06:
c3:b3:b8:34:b0:af:49:8e:fe:3d:fe:dd:93:42:3c:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:EB:A2:32:25:F5:26:38:52:B8:80:77:18:66:70:F0:2C:E5:DA
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3233303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:230::/44
Signature Algorithm: sha256WithRSAEncryption
87:19:95:ac:53:e5:8e:2c:86:5d:3e:7a:93:4b:cb:bd:e9:22:
2e:d1:64:be:fe:3b:17:8b:60:c3:bc:93:97:de:25:60:b1:c3:
f6:12:88:e1:02:f5:a5:0c:77:16:cc:e6:db:95:d3:d4:0d:9e:
42:99:1b:d2:bd:f1:0f:7c:57:69:5b:dd:5a:d9:1c:f5:5c:dc:
b8:ef:4f:3f:7b:d7:d4:de:05:af:c3:7d:6b:2b:b0:ba:78:19:
d6:69:30:82:e1:ae:d7:6d:e1:90:69:9d:36:1b:46:a4:12:a6:
e0:82:69:01:7e:6e:6c:cd:a6:42:f1:5e:88:78:96:b8:b8:d5:
cb:76:eb:84:31:99:5a:ac:3b:c6:67:e1:6b:b1:8b:2c:d8:b2:
2f:5b:be:97:53:6f:7e:04:3c:e9:af:a3:3a:be:79:a8:45:99:
2f:4e:99:97:94:d5:cc:dc:6b:10:e6:b4:56:4d:37:e9:13:40:
76:c9:c7:02:bf:b0:ab:51:21:d6:b7:e7:9f:d4:17:0b:a0:cf:
6a:65:8b:02:6a:9f:10:12:9c:bd:64:f0:f1:3c:71:c5:1f:ae:
2e:5b:0d:62:df:e5:3b:ad:84:8f:90:f2:e0:50:4e:a8:5b:26:
49:4e:37:d0:fc:7f:d8:8b:5b:d5:fd:29:0a:39:71:54:1c:ef:
e1:30:f7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:41:21 2025 by rpki-client