Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3938303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3938303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: yYZsxWa3R8SypZKYylGI/FheBV9PqdMLcwuAv2sDbiI=
Subject key identifier: DE:68:D5:34:BB:75:5D:9F:0B:09:12:F2:AC:48:05:0C:95:FD:2A:AC
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2BF53EFF49822AA4DF8AD6DB58875C05CA40ED69
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3938303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:47:59 +0000
ROA not before: Tue 03 Dec 2024 20:42:59 +0000
ROA not after: Tue 02 Dec 2025 20:47:59 +0000
asID: 4761
IP address blocks: 2400:8b00:980::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f5:3e:ff:49:82:2a:a4:df:8a:d6:db:58:87:5c:05:ca:40:ed:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:42:59 2024 GMT
Not After : Dec 2 20:47:59 2025 GMT
Subject: CN=DE68D534BB755D9F0B0912F2AC48050C95FD2AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:a9:ea:f4:c8:1c:31:59:12:6a:ed:65:a9:
ba:ab:d9:7d:bf:b5:df:50:65:6d:22:25:c7:0b:92:
6f:38:db:55:56:90:b1:c5:9c:53:d4:31:27:c9:12:
ac:1c:c8:72:66:b0:95:ac:b6:f3:e6:b1:78:79:6b:
ca:95:eb:98:04:67:ef:cc:bf:26:8d:ee:ce:8d:c8:
30:ac:00:a9:a4:6a:9e:d0:cf:1b:9c:07:45:3d:5a:
78:ac:1a:62:14:23:fa:3e:08:60:8f:f3:64:75:b3:
ee:41:3e:08:7e:80:42:ae:92:4a:db:9e:3e:25:b2:
9e:70:02:2c:df:c3:89:bd:d2:55:12:08:b6:18:b3:
d8:a7:5c:ea:6a:e6:c5:3a:13:0b:12:ec:2d:20:ce:
18:3e:f1:7b:b0:51:ed:ca:f0:0a:2d:cd:ca:c1:c4:
2d:84:0c:96:30:3e:fa:4f:bc:05:c8:83:91:27:23:
86:39:c1:8b:4c:6d:76:86:e5:f6:0e:53:6e:56:fd:
11:e4:c1:17:ad:f8:6e:89:88:9a:46:1e:9c:e2:7a:
fa:4d:d1:ee:fe:01:f4:2e:78:e8:ac:c1:82:db:2b:
31:de:12:fd:56:3c:dc:bb:d1:e6:bb:51:05:72:28:
0d:82:d8:95:5f:05:30:0e:63:80:67:8d:ba:d7:9c:
fd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:D5:34:BB:75:5D:9F:0B:09:12:F2:AC:48:05:0C:95:FD:2A:AC
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3938303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:980::/44
Signature Algorithm: sha256WithRSAEncryption
69:1b:f6:92:ac:9c:2f:33:45:d4:57:6f:50:be:55:39:36:55:
2c:29:6d:b0:c4:e8:a5:fd:08:6c:3d:38:40:a8:af:ac:9c:61:
1b:bd:22:c3:ca:d9:22:aa:cf:de:28:2e:42:20:a0:3e:f0:db:
0d:ad:51:18:f4:44:e9:c0:7c:b9:da:6f:33:46:12:55:9d:d9:
00:95:28:51:34:70:f6:10:a9:dc:bd:96:12:a6:11:aa:e7:c1:
5c:47:99:bb:11:40:54:6e:79:84:ba:19:18:ef:4e:1d:6f:03:
60:96:c1:0b:17:ff:6c:f0:90:e0:cf:82:6c:98:d6:9a:dd:83:
5a:1f:2a:73:2b:6a:5b:be:6e:c0:86:2f:ef:30:f3:f9:7e:06:
fb:98:10:e2:75:13:6a:a9:68:11:e2:ab:b2:52:31:8d:79:23:
5e:4f:36:6c:7d:12:75:27:0a:78:99:e5:b7:49:9a:e2:d7:68:
a8:aa:7b:70:4f:6d:06:6e:06:83:48:7f:eb:de:f5:29:dc:23:
9f:db:e4:48:03:72:5e:ff:b5:9e:82:bc:32:56:e9:f0:1b:dc:
4d:59:25:e6:37:ba:2b:b6:33:50:58:15:12:d1:0e:fb:9c:b5:
d5:57:60:49:19:9c:70:96:bb:42:95:94:8c:f8:5c:ff:65:b7:
17:4e:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:22:42 2025 by rpki-client