Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3961303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a3961303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: afLOYbeDf5Mi+FhjdyT/UvlRqfy4Ww0YDKq5+1mTg3w=
Subject key identifier: 7F:76:7F:6F:08:77:73:FD:7D:76:05:68:12:68:03:2E:BB:37:34:FB
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 3D75716EAD5ED023308C87615E123AB41E0A1BCD
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3961303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:49:44 +0000
ROA not before: Tue 03 Dec 2024 20:44:44 +0000
ROA not after: Tue 02 Dec 2025 20:49:44 +0000
asID: 4761
IP address blocks: 2400:8b00:9a0::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:75:71:6e:ad:5e:d0:23:30:8c:87:61:5e:12:3a:b4:1e:0a:1b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:44:44 2024 GMT
Not After : Dec 2 20:49:44 2025 GMT
Subject: CN=7F767F6F087773FD7D7605681268032EBB3734FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:f5:9c:99:db:b6:9e:88:bb:3d:1e:e0:de:
50:6e:4d:37:30:43:c7:ad:73:30:60:ca:a2:91:f0:
d4:95:3a:4f:f5:43:ab:33:27:36:02:8e:fc:cb:2c:
c2:68:61:70:af:72:e5:77:56:c0:8a:cc:01:32:79:
35:ff:88:30:0d:ae:94:54:78:f8:2f:af:8b:83:b3:
88:93:cc:0b:02:8a:ee:a2:16:2f:dd:c7:b8:e6:0a:
c0:b2:58:bf:5c:04:ab:70:ea:29:fc:7c:a1:54:ce:
79:e9:c5:d8:ab:90:14:20:7d:36:07:fe:25:e6:7c:
46:b9:a7:b6:05:7f:6c:7a:f9:75:55:d3:0d:be:c9:
e7:20:95:8a:a2:50:c4:68:33:55:06:03:30:3b:4c:
01:a8:ae:c3:90:81:ef:fe:7e:9f:05:cc:cd:4c:c8:
56:66:e8:24:dc:53:9a:78:d2:ba:f2:6d:5c:de:be:
0e:76:2c:c2:4a:8e:fc:8e:6e:84:2f:67:9b:64:50:
73:c3:0d:dc:f8:5c:ec:37:9d:8f:00:95:d9:2a:18:
8b:ec:ac:b6:c2:0f:9c:d0:6b:93:1c:4b:a0:a7:81:
48:12:79:e8:aa:6d:b8:95:a0:83:9e:43:e9:b6:8f:
42:2b:14:ad:7d:00:e5:25:dc:8e:84:80:01:19:0b:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:7F:6F:08:77:73:FD:7D:76:05:68:12:68:03:2E:BB:37:34:FB
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a3961303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:9a0::/44
Signature Algorithm: sha256WithRSAEncryption
a1:68:2b:de:23:cd:19:93:6f:b9:c9:e0:81:f8:70:7d:b5:14:
48:fe:9e:fe:d6:8b:33:23:a0:34:0e:4f:7e:8e:84:2a:0c:52:
0f:97:0d:78:b4:b4:01:a6:ce:81:69:fd:42:63:6f:35:33:9b:
44:90:c6:9e:fe:68:42:36:24:09:a6:83:d7:8f:32:21:e9:aa:
44:25:9c:c8:50:45:43:99:de:73:d4:dd:93:c1:32:3c:f0:7e:
f8:af:15:8d:8b:0c:44:a5:28:13:1d:e2:24:57:46:50:cc:5e:
ea:d6:80:5b:80:c9:52:b4:ac:37:ef:31:22:85:8a:61:fe:92:
0b:3b:5f:69:b3:8b:e4:0f:bf:ab:e6:35:d8:c2:0d:d4:c7:ad:
bf:47:94:48:de:43:42:56:90:8a:c2:50:7f:f0:c5:d0:e5:53:
88:a9:19:74:4c:6c:90:d3:34:bb:ba:62:9b:5e:01:a9:4b:e7:
44:d5:17:f1:12:1a:2a:a2:12:e1:f0:d1:3f:7c:9b:8c:c4:95:
8f:3f:3c:ef:e0:aa:f0:99:93:9b:df:b1:7d:ab:6b:56:34:79:
51:51:c0:75:32:a6:b3:f3:dc:54:5f:ee:a1:e3:60:6b:d3:cc:
9f:0a:7f:70:08:4b:ec:09:d5:dd:d7:92:2c:d8:33:78:af:c7:
6e:23:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:19 2025 by rpki-client