Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6130303a3a2f34342d3434203d3e2034373631.roa
File:                     323430303a386230303a6130303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier:          xUDKUyL2ayr/VT49IvyLXsA3+ODaPfEbN5SoU31zJCg=
Subject key identifier:   8B:B4:75:41:DC:53:49:A1:AF:95:0F:70:F2:80:06:7A:4E:F2:E8:53
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       57293298E0805C5548BDA7E456F169DCF947C29D
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6130303a3a2f34342d3434203d3e2034373631.roa
Signing time:             Tue 03 Dec 2024 20:50:26 +0000
ROA not before:           Tue 03 Dec 2024 20:45:26 +0000
ROA not after:            Tue 02 Dec 2025 20:50:26 +0000
asID:                     4761
IP address blocks:        2400:8b00:a00::/44 maxlen: 44
Validation:               Failed, certificate revoked on Tue 17 Jun 2025 18:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:29:32:98:e0:80:5c:55:48:bd:a7:e4:56:f1:69:dc:f9:47:c2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:45:26 2024 GMT
            Not After : Dec  2 20:50:26 2025 GMT
        Subject: CN=8BB47541DC5349A1AF950F70F280067A4EF2E853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:65:83:b5:14:52:cb:77:ad:15:28:4f:a4:31:
                    31:48:14:6c:10:b5:08:da:31:7c:1c:fa:41:7f:4e:
                    e7:6e:92:4d:b3:42:f1:33:1f:d3:ab:1c:d0:58:0e:
                    fe:eb:af:07:81:a1:ab:e9:ef:d4:34:19:63:8f:ab:
                    aa:85:45:00:72:e0:e8:1f:05:d7:2b:0e:94:c3:b1:
                    8a:da:21:f4:d2:e0:a1:08:f2:5a:74:e5:74:a9:8b:
                    82:f2:54:0d:d2:3d:3e:3e:98:b8:87:23:87:c1:c8:
                    c4:d6:24:1f:77:9a:dd:ee:32:b7:1b:34:f8:ea:bd:
                    68:eb:78:d4:3e:1a:e3:ba:01:fa:04:63:e7:ae:1c:
                    da:42:0a:da:65:e5:68:60:8a:46:25:89:1b:9c:71:
                    3b:13:5d:6a:bb:f6:ce:58:28:7d:c1:9e:fd:86:51:
                    72:56:fb:df:72:6f:1f:bc:3c:0b:4b:9d:89:16:27:
                    f4:a0:07:cb:bc:7f:21:06:6f:9f:63:bb:f1:4e:11:
                    6c:4a:79:72:9e:d0:de:af:87:69:19:ef:b3:b7:f0:
                    08:4b:43:a6:96:73:80:75:a1:7b:66:73:2d:2f:5e:
                    ab:78:1e:1d:25:9b:72:d6:99:6c:ea:f4:c1:41:e1:
                    2b:d7:39:90:e8:03:42:42:6f:50:ae:fd:d7:ff:c1:
                    ba:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B4:75:41:DC:53:49:A1:AF:95:0F:70:F2:80:06:7A:4E:F2:E8:53
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6130303a3a2f34342d3434203d3e2034373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:e7:82:04:dc:3a:5e:4c:ae:fd:b9:9e:8e:8d:55:3d:16:da:
         6c:f4:4f:0e:b8:ae:a4:ef:a9:b4:da:f9:7d:4a:90:44:9b:b5:
         59:5e:ce:1b:69:79:72:24:af:59:c8:07:ef:1e:56:d9:df:59:
         ed:4a:be:05:50:dc:a2:b3:08:08:e0:b1:20:fa:6f:f0:9a:26:
         c8:dd:44:6c:cf:fc:29:93:cb:7e:91:72:b9:ec:10:3c:3f:4e:
         83:d9:2e:46:46:a7:7b:19:04:93:5c:7d:96:44:97:b7:b0:13:
         32:06:e8:a1:f9:af:e3:77:6d:36:06:f7:04:5f:4b:95:78:16:
         86:c4:46:70:d9:2c:28:c8:92:79:00:85:41:62:b3:fa:30:c6:
         5e:f9:c0:a6:73:41:03:0f:dc:ac:ae:74:ea:ee:0c:d3:ce:79:
         82:0d:fa:a4:62:61:eb:97:8c:7b:42:e1:3d:db:71:e6:de:82:
         33:2b:fd:19:5e:57:fe:02:da:7e:ef:4f:af:79:f7:4b:ab:69:
         b6:c2:a2:e5:84:fa:99:42:47:aa:f9:4f:a7:4f:c6:23:82:02:
         1c:eb:7d:06:76:66:52:d5:ca:33:b4:84:0c:fe:4c:6a:ce:2c:
         ef:bf:78:27:7e:68:66:3e:0b:ae:29:6b:71:c1:e8:2a:ac:7f:
         16:a4:9c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:15 2025 by rpki-client