Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3833303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a3833303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: A1KlY4Mhmb22nyd1YUqParYTkHuNt3G+rQreEC+E08c=
Subject key identifier: 5C:B3:7C:CD:FD:38:B1:7D:12:2A:B8:4C:0E:B4:87:9C:E3:32:AA:E0
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 6DDB38E4369CE3770B0890D7866C3D0BD0A04E11
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3833303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:47:07 +0000
ROA not before: Tue 03 Dec 2024 20:42:07 +0000
ROA not after: Tue 02 Dec 2025 20:47:07 +0000
asID: 45727
IP address blocks: 2400:8b00:830::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:db:38:e4:36:9c:e3:77:0b:08:90:d7:86:6c:3d:0b:d0:a0:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:42:07 2024 GMT
Not After : Dec 2 20:47:07 2025 GMT
Subject: CN=5CB37CCDFD38B17D122AB84C0EB4879CE332AAE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:8d:cf:16:74:0e:2d:81:61:c6:e1:30:9e:
31:b7:23:a9:98:8d:ee:aa:2c:f1:34:8f:61:a1:cd:
7c:8d:05:a5:3c:4f:b1:cd:ba:6f:9c:5b:c1:fa:3e:
4e:78:dc:25:37:24:89:ed:43:df:3a:a7:e5:8e:61:
77:f7:81:a0:fb:d9:29:92:21:1b:97:5f:50:9c:87:
30:6d:ad:66:9e:da:1b:cf:68:3e:1a:c2:b0:e4:d6:
be:a2:8d:ff:6c:5f:2b:e2:1e:d8:f0:54:02:b4:70:
c4:6b:be:39:c4:f0:19:a8:7a:2c:92:b5:38:f1:73:
13:34:8a:b6:72:cf:85:04:ee:68:f5:bc:7a:ea:6c:
56:fb:d3:b2:b0:54:e2:f4:fd:c1:07:69:a1:97:cc:
ee:47:d6:33:3c:f2:2f:57:fb:d4:07:59:ab:79:a5:
95:62:72:0d:e9:ca:ea:27:21:bb:15:bf:80:e0:b0:
c2:52:e9:23:a3:06:1e:61:57:39:b7:23:f2:0c:8b:
29:ac:d6:72:40:ac:4f:25:c1:a3:0d:cc:eb:99:fb:
3e:69:be:1d:03:0c:f6:e1:83:69:01:99:dc:fd:22:
d0:31:75:45:d7:30:e9:9c:85:33:f3:fe:54:8c:54:
cf:44:5c:bc:df:e2:79:be:1d:f0:d4:a4:c6:30:40:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B3:7C:CD:FD:38:B1:7D:12:2A:B8:4C:0E:B4:87:9C:E3:32:AA:E0
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3833303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:830::/44
Signature Algorithm: sha256WithRSAEncryption
69:67:c1:e2:e1:97:00:02:e4:1d:72:ae:09:bb:cc:5a:4d:3e:
b1:31:4d:15:ae:80:0d:2c:70:fa:c2:a2:54:a4:8f:91:7a:fa:
d4:5f:83:e8:d7:10:5c:a7:f8:50:b8:cd:7c:00:a1:4c:27:52:
3e:5d:96:99:a0:5a:f2:b6:f6:f6:1f:22:b9:9c:73:3d:f6:7f:
da:76:26:e4:d0:0d:61:89:1c:f3:4e:25:c8:a0:0b:f5:7d:06:
87:9a:af:3f:a0:23:11:39:62:c1:00:c7:2d:1f:a9:c2:79:7a:
ad:82:35:28:a0:62:05:0d:68:e3:ca:72:20:f0:94:af:b3:3e:
dc:f4:2a:5e:3b:3d:33:de:85:2f:e2:68:24:9b:3c:59:4d:51:
fa:0c:8a:00:b0:e1:65:58:ea:2a:46:a5:ba:b2:55:d3:97:ab:
fa:db:3f:87:8e:5e:fc:68:3d:f8:2b:2e:51:bb:7c:ff:8b:bf:
90:f4:14:fe:da:14:b2:e5:23:8c:d8:a4:a3:7a:36:db:12:c7:
20:bf:35:fc:e2:af:62:fb:1f:41:6e:03:29:f6:72:47:fb:95:
dd:4e:9e:58:21:9b:56:5f:e1:7e:32:b5:58:4b:24:ce:80:30:
1f:80:4a:38:f6:99:47:0f:14:80:01:6c:05:53:b2:9b:e5:aa:
e3:ac:32:b1
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbds45Dac43cLCJDXhmw9C9CgThEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMyMDQyMDdaFw0yNTEyMDIyMDQ3MDdaMDMxMTAvBgNV
BAMTKDVDQjM3Q0NERkQzOEIxN0QxMjJBQjg0QzBFQjQ4NzlDRTMzMkFBRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGI3PFnQOLYFhxuEwnjG3I6mY
je6qLPE0j2GhzXyNBaU8T7HNum+cW8H6Pk543CU3JIntQ986p+WOYXf3gaD72SmS
IRuXX1CchzBtrWae2hvPaD4awrDk1r6ijf9sXyviHtjwVAK0cMRrvjnE8BmoeiyS
tTjxcxM0irZyz4UE7mj1vHrqbFb707KwVOL0/cEHaaGXzO5H1jM88i9X+9QHWat5
pZVicg3pyuonIbsVv4DgsMJS6SOjBh5hVzm3I/IMiyms1nJArE8lwaMNzOuZ+z5p
vh0DDPbhg2kBmdz9ItAxdUXXMOmchTPz/lSMVM9EXLzf4nm+HfDUpMYwQJHjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUXLN8zf04sX0SKrhMDrSHnOMyquAwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMyMzQzMDMwM2EzODYyMzAzMDNhMzgzMzMwM2Ez
YTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNTM3MzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCQAiwAI
MDANBgkqhkiG9w0BAQsFAAOCAQEAaWfB4uGXAALkHXKuCbvMWk0+sTFNFa6ADSxw
+sKiVKSPkXr61F+D6NcQXKf4ULjNfAChTCdSPl2WmaBa8rb29h8iuZxzPfZ/2nYm
5NANYYkc804lyKAL9X0Gh5qvP6AjETliwQDHLR+pwnl6rYI1KKBiBQ1o48pyIPCU
r7M+3PQqXjs9M96FL+JoJJs8WU1R+gyKALDhZVjqKkalurJV05er+ts/h45e/Gg9
+CsuUbt8/4u/kPQU/toUsuUjjNiko3o22xLHIL81/OKvYvsfQW4DKfZyR/uV3U6e
WCGbVl/hfjK1WEskzoAwH4BKOPaZRw8UgAFsBVOym+Wq46wysQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 13:09:44 2025 by rpki-client