Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3333303a3a2f34342d3434203d3e2034373631.roa
File:                     323430303a386230303a3333303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier:          o6yAxtRx77YUYphzlGqJGYRSUxJ+D6/gIZXuLCUxfvQ=
Subject key identifier:   3B:17:27:AD:B4:A7:66:92:6D:EE:1F:B3:9C:E0:FA:82:CB:21:9D:5E
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       0F162F26A88DD522E20B952924C27E940FEF8603
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3333303a3a2f34342d3434203d3e2034373631.roa
Signing time:             Tue 03 Dec 2024 20:38:42 +0000
ROA not before:           Tue 03 Dec 2024 20:33:42 +0000
ROA not after:            Tue 02 Dec 2025 20:38:42 +0000
asID:                     4761
IP address blocks:        2400:8b00:330::/44 maxlen: 44
Validation:               Failed, certificate revoked on Tue 17 Jun 2025 18:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:16:2f:26:a8:8d:d5:22:e2:0b:95:29:24:c2:7e:94:0f:ef:86:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:33:42 2024 GMT
            Not After : Dec  2 20:38:42 2025 GMT
        Subject: CN=3B1727ADB4A766926DEE1FB39CE0FA82CB219D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:77:66:02:d0:40:7f:8b:33:d5:1d:d7:f5:
                    c1:78:23:af:43:da:b1:6e:79:37:06:a8:73:4b:3e:
                    f0:07:fa:3d:86:86:b6:b2:f2:54:fd:78:b2:21:dc:
                    ef:36:2b:7d:6f:d2:08:ba:30:d9:f9:71:95:cb:41:
                    cc:47:d2:59:07:b3:b4:27:88:7e:ef:18:4c:a7:b9:
                    95:bf:7c:7d:a5:5f:61:6d:84:65:ed:37:ca:0b:a7:
                    64:38:ca:8d:52:37:b6:32:d8:35:be:92:45:8a:ba:
                    a7:5c:66:d8:e7:bd:0d:76:ad:8a:07:d8:e3:1b:0a:
                    f2:d6:54:31:e4:46:e1:1f:2e:08:02:21:1f:93:0d:
                    35:14:ab:4a:d7:4c:4f:d6:00:4f:a4:31:41:a4:01:
                    88:54:70:70:98:0e:34:09:9d:40:33:f8:e4:b2:3a:
                    be:97:5b:22:47:82:54:50:67:43:9e:66:d0:66:4c:
                    79:4d:c2:da:4f:ad:3f:1d:c3:9f:81:20:cd:92:37:
                    ac:a2:21:93:09:c7:30:a9:04:64:c2:e6:24:c3:e5:
                    9f:ba:dc:33:6d:93:42:a6:44:86:b0:b4:1c:a3:47:
                    ad:79:10:ec:6a:55:20:9d:35:0d:ef:99:ca:b8:80:
                    a3:44:4a:1f:fe:49:02:b2:36:92:ed:8f:fa:d4:37:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:17:27:AD:B4:A7:66:92:6D:EE:1F:B3:9C:E0:FA:82:CB:21:9D:5E
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3333303a3a2f34342d3434203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:330::/44

    Signature Algorithm: sha256WithRSAEncryption
         7c:61:65:80:6b:d7:46:e8:eb:2d:a0:9e:d9:5c:01:a6:16:c3:
         83:88:bb:b5:5b:54:02:a3:f5:72:4b:dc:01:be:cc:0d:3f:8b:
         78:cd:7b:98:c7:1e:cd:3e:09:22:af:8a:69:f6:fe:67:54:1d:
         7f:ef:ff:47:85:82:21:89:82:fd:91:5a:de:92:2f:dd:c8:9a:
         59:6e:19:ef:07:c4:a4:ee:83:bd:6c:fb:86:17:73:da:05:58:
         ae:09:70:f7:1d:ed:6e:c7:e0:71:55:3e:67:be:8d:25:47:66:
         95:1b:9f:2a:49:47:97:72:11:e7:77:3f:11:ba:21:f0:85:81:
         38:7d:02:3b:20:50:9d:dc:3d:7f:07:eb:4c:17:28:f7:44:11:
         4a:24:4c:33:28:37:95:4a:59:5f:49:d7:d2:14:57:98:d9:ea:
         72:cb:91:40:da:dd:2d:e5:d0:54:c6:d2:28:fe:76:fc:88:a3:
         72:db:51:d3:5e:8a:3e:4f:0c:34:72:68:04:0f:9d:dc:84:29:
         7e:16:49:5d:e2:99:8b:ff:55:a8:ed:99:14:6f:26:33:d0:6c:
         56:e5:56:81:e0:98:d5:0f:d3:3d:4d:57:31:b6:78:27:06:49:
         0c:86:be:71:4e:81:0a:3f:95:80:63:37:86:17:92:b8:a0:e0:
         e5:c6:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:21 2025 by rpki-client