Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3830303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a3830303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: vHpEmYVPs9vql7bVQR0XTf1qjp5QCfEzcTHXlgGMBS4=
Subject key identifier: B6:7A:3E:64:C8:78:E7:45:4E:1B:3D:C8:C8:71:EC:0B:9A:53:6C:10
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 1923AF67D34BD7642E4B9E65741141C4E61A58FB
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3830303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:46:41 +0000
ROA not before: Tue 03 Dec 2024 20:41:41 +0000
ROA not after: Tue 02 Dec 2025 20:46:41 +0000
asID: 45727
IP address blocks: 2400:8b00:800::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:23:af:67:d3:4b:d7:64:2e:4b:9e:65:74:11:41:c4:e6:1a:58:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:41:41 2024 GMT
Not After : Dec 2 20:46:41 2025 GMT
Subject: CN=B67A3E64C878E7454E1B3DC8C871EC0B9A536C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:88:83:7f:84:39:12:b1:65:42:ad:37:c1:
45:fe:91:fb:27:50:ed:c4:77:65:9f:b4:6a:ce:67:
8c:ab:5f:d6:86:35:b5:6b:0b:69:ba:5f:d9:99:9d:
4f:e7:6f:41:57:02:42:e5:10:72:c8:78:35:ed:5f:
cf:f1:4b:69:03:84:b9:93:a6:cd:e3:4b:0a:1f:b9:
a6:a4:c2:a1:71:df:44:19:32:0c:8f:6b:fa:6f:fb:
23:0d:62:33:d6:2b:08:2b:14:72:0e:2d:ad:11:d6:
ea:16:c3:d5:dc:65:89:4d:7f:37:47:ec:e3:22:2c:
3c:a3:48:a8:49:6c:f8:e1:4a:57:3c:9c:4c:ef:9c:
87:8f:b5:c9:4e:50:88:b5:5a:21:ef:a4:76:df:cf:
69:47:e3:e2:9e:c2:d3:01:bc:9a:8a:a7:35:5f:76:
b7:2f:84:f7:ef:2f:a9:23:5b:f7:dd:ee:c5:87:e8:
5e:53:a9:95:b0:c9:d3:85:7f:ec:9e:f1:a3:76:de:
22:53:4d:10:e7:2d:87:71:06:a6:80:70:4d:26:6d:
9a:3d:3a:77:48:54:6a:2e:4e:ae:30:c2:61:e5:3d:
73:ba:6c:7e:f6:ec:a5:24:fb:38:ae:30:1f:6b:70:
1d:be:53:0d:9e:ea:60:93:da:71:4c:3f:26:08:c8:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7A:3E:64:C8:78:E7:45:4E:1B:3D:C8:C8:71:EC:0B:9A:53:6C:10
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3830303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:800::/44
Signature Algorithm: sha256WithRSAEncryption
49:2e:40:89:53:da:6b:b7:13:78:46:06:b0:7e:ac:c5:ca:f5:
82:ad:99:e1:0c:71:bb:ec:f3:bb:a2:9f:7f:07:c0:b4:14:10:
55:5b:24:42:46:0d:c7:dc:3c:b3:e1:67:f1:2e:c4:b6:68:4b:
00:48:06:cf:fe:83:da:52:59:87:c1:a9:23:f5:5e:8a:bb:c7:
f6:16:93:1d:5a:a8:4e:3b:66:0d:79:0d:f2:d7:0a:cb:10:dc:
2a:df:c9:bf:69:f2:b0:38:a6:8e:6d:16:3a:82:4f:6e:f4:46:
10:fc:6c:8b:00:8a:af:8d:99:ee:b1:a3:92:b3:92:e5:cd:ab:
d7:33:54:83:f8:48:5e:e9:a0:4d:f8:9c:4d:35:0b:5d:4b:6d:
78:ef:1b:58:f7:9e:0d:50:e3:a6:22:13:17:07:5b:ef:7f:8b:
e6:a9:d1:91:0a:73:cb:2f:1c:fd:bd:57:d9:bb:31:da:a2:c2:
b8:7d:5b:d3:30:80:3a:73:ab:16:5d:fa:77:c4:48:96:17:8a:
88:ed:a6:be:a0:96:1c:4f:88:18:0d:14:c4:86:63:b3:f5:a1:
56:52:e4:e2:99:70:c1:27:d2:e1:44:c0:04:dd:ae:74:4d:35:
1d:b7:95:26:84:b4:6a:cc:86:c8:3c:8f:cd:ef:98:e5:8f:cc:
0c:83:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:56:01 2025 by rpki-client