Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3631303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3631303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: Pfc3lg5EVMuQ9ZnDXcOJvIJGtMdGsfv8c6vKjIlEW/U=
Subject key identifier: 7D:F4:CE:9D:96:68:42:85:01:AC:D6:00:B5:16:7A:8A:C5:1A:2F:4A
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2DF007B0FBDACB6AB66BBAA0AA0F1214F06132A0
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3631303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:42:58 +0000
ROA not before: Tue 03 Dec 2024 20:37:58 +0000
ROA not after: Tue 02 Dec 2025 20:42:58 +0000
asID: 4761
IP address blocks: 2400:8b00:610::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f0:07:b0:fb:da:cb:6a:b6:6b:ba:a0:aa:0f:12:14:f0:61:32:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:37:58 2024 GMT
Not After : Dec 2 20:42:58 2025 GMT
Subject: CN=7DF4CE9D9668428501ACD600B5167A8AC51A2F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:81:d9:0a:c6:25:97:e1:6e:40:58:10:c0:
d8:8f:76:9c:89:d7:3c:fa:2b:1e:98:4c:df:84:28:
14:e1:17:7d:4c:6a:71:39:a3:bf:c8:b6:d6:dd:3b:
c9:3c:0c:95:cf:4c:a3:aa:73:3e:2e:28:d1:fc:99:
c8:0b:66:ac:0e:d5:dd:58:29:46:57:a4:ef:8f:4c:
43:ae:a9:13:ed:21:29:d6:00:a9:05:35:d7:c6:2c:
86:3d:4d:f6:3a:0f:7d:26:52:27:40:48:70:44:27:
73:c6:70:3c:a3:c0:59:76:e6:3d:c6:78:5c:7f:4a:
19:63:40:7e:8c:9b:85:5f:dc:fd:e8:74:65:90:26:
27:8e:92:41:7e:d2:bb:a0:38:b1:16:ea:55:df:69:
0a:24:50:ac:b9:6f:89:83:71:e4:86:26:25:a5:77:
b5:cc:47:2f:5e:4e:0f:d0:94:0c:3d:48:c4:4f:40:
82:fb:37:a7:1a:33:65:f2:1f:d6:a5:4a:02:c2:1e:
22:a3:72:55:80:67:54:cf:32:6d:75:3e:88:be:51:
de:7e:b1:47:20:77:4c:05:a8:ab:50:b0:ae:b0:0c:
2d:e6:02:86:49:dd:40:c1:96:ed:37:f5:42:84:b4:
41:64:3c:39:0b:a4:12:6f:e9:87:f0:77:ce:2c:6d:
d8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F4:CE:9D:96:68:42:85:01:AC:D6:00:B5:16:7A:8A:C5:1A:2F:4A
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3631303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:610::/44
Signature Algorithm: sha256WithRSAEncryption
aa:91:b4:a3:db:4f:15:43:4b:aa:2c:04:ba:70:67:1e:4a:91:
65:11:a7:31:e3:33:59:cc:7b:a7:dd:5f:c8:be:64:03:81:61:
78:a7:95:69:00:b0:57:d5:81:61:a5:40:7b:3e:00:3a:92:55:
30:0e:86:f7:c5:88:1b:87:c1:e4:f5:d7:3c:46:65:c9:db:b3:
cd:e0:91:24:7c:4f:80:47:52:eb:9f:02:83:b8:4c:4a:4c:04:
cf:30:fb:cb:dc:39:0f:27:60:a1:60:c3:9e:d7:4c:85:62:7b:
d2:da:9e:70:07:e5:f9:99:73:c9:dd:fb:85:4b:f0:66:48:b2:
f9:5a:d7:43:d5:96:0c:b0:a2:86:bb:d1:96:29:0d:25:21:aa:
47:39:de:ba:24:8a:5f:d9:ab:a8:e1:58:97:6e:ad:63:b6:5e:
48:ed:f7:7b:2d:5d:f9:cb:a7:95:85:4a:6e:46:7b:0a:31:f5:
e3:2f:e4:77:32:9f:ad:cd:1a:84:14:19:7c:5a:68:89:34:f3:
5d:a2:85:74:eb:23:be:1a:d8:ad:ae:a5:76:7e:74:29:c0:d9:
b6:f1:ce:8d:28:52:2b:5d:dc:a1:47:7b:f4:8b:88:15:27:02:
71:ba:27:0a:6f:9e:36:2d:af:53:55:33:fb:b7:9a:64:16:21:
9c:ca:fd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:14 2025 by rpki-client