Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3531303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a3531303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: idlTYIpuxhc5Z0ewIqIXyCmdgFeJ9Se/0HmpCz+WoLQ=
Subject key identifier: 1A:4C:6D:2C:92:52:9E:AD:E3:B1:89:27:2A:61:D3:B8:9C:04:66:CE
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 6C1573EDF8D09E3F514C2FC85D4A8C626A020B4C
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3531303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:40:59 +0000
ROA not before: Tue 03 Dec 2024 20:35:59 +0000
ROA not after: Tue 02 Dec 2025 20:40:59 +0000
asID: 45727
IP address blocks: 2400:8b00:510::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:15:73:ed:f8:d0:9e:3f:51:4c:2f:c8:5d:4a:8c:62:6a:02:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:35:59 2024 GMT
Not After : Dec 2 20:40:59 2025 GMT
Subject: CN=1A4C6D2C92529EADE3B189272A61D3B89C0466CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:a3:e7:0a:31:e7:97:69:5c:d2:f2:b3:44:
eb:bb:88:74:57:cb:a9:41:8d:46:64:3a:b4:da:54:
2e:a8:a4:2f:f4:4f:f1:71:48:3f:ae:60:c5:a2:3b:
4e:49:f3:07:13:d1:6e:a7:6f:94:63:18:ea:9b:0b:
2e:09:32:e6:28:d9:5a:e9:56:0c:80:cb:c8:a7:a2:
4f:84:55:5e:78:05:f6:2f:f9:87:4d:3e:f3:b8:e0:
29:46:76:65:65:a9:d4:40:07:92:7f:b9:aa:60:a0:
fb:43:f6:15:1a:d9:31:64:a0:2d:ee:f8:dd:36:e3:
be:3b:c1:de:22:99:3f:e4:3f:a5:d2:82:e5:d7:98:
02:c9:80:ee:02:fe:7e:64:66:1d:34:b2:d0:d7:98:
3e:bc:5a:3b:51:09:e4:52:99:0f:b9:0b:77:91:88:
aa:b0:cb:78:18:72:a7:cf:dc:c9:d5:28:f7:7f:45:
6d:06:c8:9c:f9:96:ab:99:b2:a2:93:d6:9e:2a:9c:
d3:7a:d3:90:9d:4f:94:63:07:20:37:3d:74:5d:db:
b5:d6:f5:a5:6c:cf:72:20:26:5e:7c:1d:62:a1:fe:
13:f0:26:4a:7e:98:67:9b:38:80:c7:b2:1b:db:6b:
1d:b2:c1:26:b8:6f:a5:6a:7d:c9:d1:2d:ef:1d:30:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:6D:2C:92:52:9E:AD:E3:B1:89:27:2A:61:D3:B8:9C:04:66:CE
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3531303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:510::/44
Signature Algorithm: sha256WithRSAEncryption
81:e8:d2:8a:7a:6a:af:4f:19:82:c1:2f:f9:45:75:82:b8:7a:
31:f2:62:51:90:57:d8:76:d4:b5:fd:9e:e7:0b:10:d0:6e:8d:
bb:75:8e:07:eb:a2:55:cb:a9:31:17:d2:27:b3:21:6a:63:bf:
ef:83:14:c3:07:82:21:4f:d0:eb:32:de:9c:83:c7:7a:ee:7d:
cb:3d:b6:9a:d9:6d:83:69:00:ed:d1:0f:64:c5:d5:79:cf:62:
31:12:49:5f:8d:ab:40:10:04:70:9b:5b:30:e6:56:65:ff:c5:
36:4e:c7:11:67:7b:95:91:91:71:59:99:24:25:68:51:e0:03:
60:57:59:2a:40:11:06:f4:f3:b0:79:29:ee:0a:85:df:d9:f6:
0c:db:22:2f:5a:58:cb:26:39:eb:35:99:c5:50:f2:d6:14:6a:
cb:28:49:5a:eb:9d:36:b2:5a:7e:ea:bc:47:64:98:78:85:97:
32:c1:e2:24:b8:fb:5f:3f:87:52:67:5b:1c:d4:20:85:4a:0c:
94:98:30:08:e2:bd:aa:a6:f4:82:f6:d9:27:bc:d5:0b:7b:03:
20:2c:8c:fa:92:f8:42:eb:5b:96:9e:aa:fb:27:45:69:2a:9a:
a1:0b:fc:54:3d:7c:72:b2:e6:5c:b8:1e:62:6f:bc:1d:95:0a:
47:ba:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:42:35 2025 by rpki-client