Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3731303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3731303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: AFZEpzFs8MR+RxVbFQu7Uujtt5wE+au4f5p52KXZFfE=
Subject key identifier: 5B:CD:B7:9E:57:A0:0A:91:E8:27:C1:FA:F4:1F:E9:A0:16:B8:FC:41
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 57DE78701D666529BED9352B5CA2ADBDD9358B32
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3731303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:44:26 +0000
ROA not before: Tue 03 Dec 2024 20:39:26 +0000
ROA not after: Tue 02 Dec 2025 20:44:26 +0000
asID: 4761
IP address blocks: 2400:8b00:710::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:de:78:70:1d:66:65:29:be:d9:35:2b:5c:a2:ad:bd:d9:35:8b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:39:26 2024 GMT
Not After : Dec 2 20:44:26 2025 GMT
Subject: CN=5BCDB79E57A00A91E827C1FAF41FE9A016B8FC41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:37:4f:ef:27:9c:39:18:b1:a5:7b:30:f1:
c5:d5:6d:f3:cb:83:ee:ef:16:c4:90:c4:7f:79:54:
89:8c:8f:b1:de:98:04:81:88:8f:a7:a0:38:c7:d7:
aa:aa:c1:30:47:5f:54:a2:cb:de:e2:b8:e1:5a:d0:
e0:2f:9f:16:ef:9b:58:43:4e:bd:0e:32:aa:67:57:
51:bf:7b:28:aa:17:f7:1b:9e:eb:0d:67:85:50:79:
65:34:5e:13:bf:cf:b9:bc:79:2c:3f:fa:36:f1:d2:
72:50:c2:16:61:18:29:65:fc:c6:ea:09:1e:2e:1f:
3d:d8:1c:84:cb:86:4d:db:90:af:93:2d:5b:7f:2d:
32:bb:ea:72:5c:a5:4d:6b:49:41:f9:21:36:63:4f:
de:98:79:ab:6c:ea:73:e1:f5:c5:8f:46:31:4d:fb:
75:03:a5:d2:24:7f:f6:db:6c:47:ea:6d:66:b5:08:
0b:b9:ba:7d:ed:6b:f6:44:9b:74:60:f1:98:dc:b5:
a7:16:a0:17:e5:f2:74:14:a3:3f:45:13:51:59:a7:
d4:e9:4f:42:ae:62:da:40:27:cd:99:9f:0d:75:ee:
48:9a:73:10:e2:2b:47:43:e3:04:19:fc:a9:e2:6f:
8a:65:ea:94:2c:74:dd:84:4e:4b:b0:e8:fb:98:a8:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CD:B7:9E:57:A0:0A:91:E8:27:C1:FA:F4:1F:E9:A0:16:B8:FC:41
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3731303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:710::/44
Signature Algorithm: sha256WithRSAEncryption
31:13:18:fc:b8:d6:45:da:93:d1:da:19:c3:c9:7b:8b:41:45:
07:2b:72:84:fa:06:86:61:ff:39:55:ef:93:5a:47:af:fc:19:
f5:71:43:59:da:04:d4:df:d6:b7:e5:22:fc:eb:59:bc:20:86:
b0:2f:38:2f:fb:86:ee:66:48:d6:7c:00:d7:cf:19:31:43:06:
35:59:b7:23:c2:5d:ea:46:3b:c6:a1:1b:53:34:dd:12:08:7a:
33:ac:d0:5c:1b:10:69:d3:8a:9d:6f:00:35:33:ac:f3:36:2c:
3a:87:02:33:fa:7b:5d:a3:70:f0:72:81:ef:58:d7:41:82:0f:
f6:92:3b:c3:9a:38:48:22:25:c1:40:3d:99:27:e4:7e:24:a6:
4c:03:92:79:d9:6e:ae:04:37:82:10:72:16:07:99:89:38:89:
f5:c6:79:1d:11:6f:01:40:db:38:b8:f5:bf:52:25:44:36:3c:
72:0d:e0:ab:6c:89:a6:c0:67:2e:e5:76:c5:0c:07:65:da:36:
cf:3c:cc:be:ce:04:77:32:ba:8e:00:b5:d2:7b:70:e2:01:9d:
8a:dc:4c:54:df:53:0f:a0:41:52:a8:a1:02:6d:ed:be:35:82:
f1:34:9b:17:83:7d:62:12:7b:0d:7a:55:1c:45:63:d6:f0:85:
0f:e8:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:51:39 2025 by rpki-client