Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3532303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a3532303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: 5z778yGXXT0PuEb+VdZN8iBDt+ktSseRvQZbAY9HSm4=
Subject key identifier: 4B:13:EF:85:F4:29:CF:E9:4B:EE:DC:BC:40:3A:B3:64:C2:66:B2:62
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 23595707A47AEEC2D9CE41EAD2CA418A405ACB1A
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3532303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:41:18 +0000
ROA not before: Tue 03 Dec 2024 20:36:18 +0000
ROA not after: Tue 02 Dec 2025 20:41:18 +0000
asID: 45727
IP address blocks: 2400:8b00:520::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:59:57:07:a4:7a:ee:c2:d9:ce:41:ea:d2:ca:41:8a:40:5a:cb:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:36:18 2024 GMT
Not After : Dec 2 20:41:18 2025 GMT
Subject: CN=4B13EF85F429CFE94BEEDCBC403AB364C266B262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:99:fd:6e:e6:57:25:40:0b:c5:4f:40:08:
4a:52:02:e8:74:6e:77:d1:fb:cb:6b:77:4d:87:d7:
c7:9e:d2:29:65:16:b0:2a:bf:ae:ea:f1:c1:09:f8:
33:d6:d5:bf:ac:f2:fc:76:b5:ca:f5:2e:f3:cb:81:
9c:fe:8a:a1:a7:ba:6f:bf:8a:41:9f:72:74:7a:97:
4a:6d:d2:9d:39:01:17:08:35:36:2c:3b:0d:47:93:
13:71:16:f7:5b:95:f2:e6:08:9b:a0:b4:13:44:58:
41:e2:41:12:70:5c:28:96:22:ee:f1:36:f5:b1:fd:
cc:7d:b8:39:27:5b:93:c0:9f:d7:d1:ff:3e:88:a9:
41:43:70:af:bf:9c:de:48:1d:be:c0:36:22:ec:ec:
77:a4:c6:39:51:ed:6c:a3:53:0e:05:2d:8b:17:37:
48:53:72:01:0a:60:14:d5:12:23:8e:dc:80:66:ff:
40:82:30:c7:33:5a:aa:7b:d2:ff:e4:8a:02:ff:83:
d6:f6:a1:46:dd:34:9a:27:ea:7b:91:62:47:f1:c5:
3d:88:ef:58:63:d2:c5:bf:ed:4c:cb:72:20:5e:d0:
bb:8c:28:cc:68:28:25:34:56:1a:83:5d:1e:a5:cd:
ae:3d:a1:fb:62:26:3f:90:41:74:a3:48:3d:14:f3:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:13:EF:85:F4:29:CF:E9:4B:EE:DC:BC:40:3A:B3:64:C2:66:B2:62
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3532303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:520::/44
Signature Algorithm: sha256WithRSAEncryption
53:c4:07:57:ea:03:8b:a4:8d:83:b5:60:ab:91:e2:ec:ab:56:
97:c0:f6:f3:cf:08:e4:ae:9e:52:6c:d9:32:a8:73:36:42:bf:
33:05:a0:be:2b:c0:2e:aa:a2:03:95:20:c4:54:70:e0:22:2a:
5d:f9:20:0b:c1:9e:a7:97:aa:15:6e:83:05:81:c3:2d:79:88:
6d:28:7c:89:d0:22:ce:1f:ec:eb:5a:3c:6a:66:6c:b6:cf:06:
47:04:54:13:fe:0e:d9:a6:8d:7a:5a:0e:cb:14:6a:b5:21:83:
4b:ca:e1:54:f1:54:7d:64:81:5f:7e:0a:ea:c1:53:0d:c3:45:
bd:0f:54:5c:65:05:21:e8:63:81:b6:2e:0b:65:f5:bf:22:8a:
e8:e1:88:3f:1c:43:46:a8:ff:0c:c5:dc:31:19:ed:8f:02:61:
a9:6b:12:56:ea:70:6a:c3:32:e8:36:4c:bf:d6:fc:be:e1:7a:
ab:c4:f8:9c:56:dd:bc:b1:fa:83:b4:bd:fd:60:df:f0:2c:07:
b0:88:76:1d:ac:50:da:60:40:a5:3f:2a:0d:4d:bd:98:b7:d8:
9e:d3:e6:91:df:74:6c:d3:b7:12:0e:ec:7c:6b:33:92:54:95:
59:7f:b0:42:bd:ac:3a:e5:d4:41:c9:19:e1:08:3d:72:5b:b1:
b6:d7:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:31:01 2025 by rpki-client