Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3831303a3a2f34342d3434203d3e203435373237.roa
File:                     323430303a386230303a3831303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier:          yfV2jzKQd9paSOrgQdZZN6+9XFc9qBpde54dKGeUAKU=
Subject key identifier:   83:F7:AD:E6:21:E3:A3:0D:C5:6B:34:A5:46:76:0F:D1:1D:AC:59:25
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       7696F9863EABFD15D6D11DCFEAB94A4CF6885EA6
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3831303a3a2f34342d3434203d3e203435373237.roa
Signing time:             Tue 03 Dec 2024 20:46:50 +0000
ROA not before:           Tue 03 Dec 2024 20:41:50 +0000
ROA not after:            Tue 02 Dec 2025 20:46:50 +0000
asID:                     45727
IP address blocks:        2400:8b00:810::/44 maxlen: 44
Validation:               Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:96:f9:86:3e:ab:fd:15:d6:d1:1d:cf:ea:b9:4a:4c:f6:88:5e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:41:50 2024 GMT
            Not After : Dec  2 20:46:50 2025 GMT
        Subject: CN=83F7ADE621E3A30DC56B34A546760FD11DAC5925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:51:fe:e2:ee:04:d1:4c:62:f1:f1:17:44:
                    a5:95:0c:6e:aa:07:d9:4b:53:f6:73:65:c0:2d:49:
                    13:22:d2:5d:9f:ae:9c:17:87:e8:f5:d7:04:3b:e9:
                    b9:ab:70:9f:f0:f9:46:1e:d9:9a:76:64:51:d7:42:
                    d0:c0:fe:8d:8a:8b:71:fb:94:9f:b5:24:f7:c8:72:
                    24:b0:ab:a6:7a:50:d8:e6:85:f7:18:1d:89:42:61:
                    b5:0e:43:42:e7:8e:12:20:6d:95:d6:83:2c:2c:d0:
                    b0:fb:d4:3c:d4:13:65:7a:38:9f:7e:57:f0:f1:34:
                    0d:9a:e6:a3:82:10:42:61:01:40:34:bc:b8:69:96:
                    a2:6e:31:40:7f:61:5f:9d:62:eb:4f:d1:a5:4a:27:
                    a6:d9:07:2b:9e:db:6e:c2:28:11:a3:e2:7c:91:dd:
                    0c:77:21:01:9d:b8:58:73:99:ba:af:e6:1c:29:5b:
                    b3:87:f1:f8:2f:68:44:3a:5d:a9:b4:83:a3:bf:5b:
                    f3:45:f8:a1:3a:8a:78:55:85:24:41:2f:d8:cd:13:
                    00:bc:e6:6a:f3:b6:0d:9d:c0:23:e2:e6:a1:d4:c9:
                    3f:d2:bc:7b:5c:dd:e4:cc:5f:80:03:e3:9b:86:00:
                    cb:61:4f:2e:d7:95:cb:6e:98:03:d2:9d:a0:de:49:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F7:AD:E6:21:E3:A3:0D:C5:6B:34:A5:46:76:0F:D1:1D:AC:59:25
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3831303a3a2f34342d3434203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:810::/44

    Signature Algorithm: sha256WithRSAEncryption
         a5:85:63:bc:78:cf:0a:e8:25:e0:3e:52:f8:85:04:c0:56:9c:
         9e:ac:5e:dc:b4:31:44:4f:d6:b0:3e:f5:c5:b4:b7:b9:83:c7:
         49:13:23:a5:30:de:90:9b:52:c9:db:0e:4c:1f:86:d0:40:67:
         b5:3c:f6:0b:a0:22:fd:ff:67:63:ab:da:90:a8:15:f6:42:a7:
         2e:d4:fd:e1:e3:f1:40:6e:d1:98:fb:0c:ae:33:5a:b6:fe:fd:
         82:0e:7e:81:71:7e:a4:2a:8f:ba:74:ee:df:47:f8:b0:4a:c0:
         c5:8d:3d:5e:9a:6f:fd:90:86:69:3c:55:15:29:ca:a5:90:8f:
         94:95:58:9a:86:d1:9a:6e:be:72:8e:5b:90:60:77:7d:1a:a3:
         f3:20:ed:3a:5e:a1:71:66:fb:3b:00:ae:d2:f8:a5:82:95:b8:
         56:31:de:61:bc:4d:62:5f:b7:22:48:44:4d:8e:76:3d:d0:fa:
         7d:00:fe:86:b3:fb:db:e3:20:d3:e7:77:10:05:32:5a:0e:e8:
         25:d4:37:17:83:5f:48:90:ff:cc:5b:29:19:0b:04:6a:d8:4b:
         3b:0f:76:63:e0:69:b1:e9:9c:70:9e:61:4d:b7:a0:72:af:ec:
         41:3b:5f:c0:45:ef:87:2d:82:1c:f5:19:31:7d:b4:0d:2a:ac:
         6e:02:fd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:26:39 2025 by rpki-client