Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6131303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6131303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: NFariktvNjyR8XyZ8Wv6WjthOVGpkdyyA8iqYyetlag=
Subject key identifier: 01:56:7F:38:D3:1F:BC:99:2C:02:0B:21:2B:32:87:B5:59:38:FB:B4
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 64D0EE7A6FB2CA4AB88394C91817610A4A031CE7
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6131303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:52:07 +0000
ROA not before: Tue 03 Dec 2024 20:47:07 +0000
ROA not after: Tue 02 Dec 2025 20:52:07 +0000
asID: 4761
IP address blocks: 2400:8b00:a10::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d0:ee:7a:6f:b2:ca:4a:b8:83:94:c9:18:17:61:0a:4a:03:1c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:47:07 2024 GMT
Not After : Dec 2 20:52:07 2025 GMT
Subject: CN=01567F38D31FBC992C020B212B3287B55938FBB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:74:df:e7:6d:0b:f5:8f:be:14:31:c2:78:
1e:03:af:39:55:51:7f:a2:ea:1b:36:cb:24:2b:dd:
4a:dd:14:95:f8:81:af:10:76:fa:62:13:ea:b5:07:
23:70:42:b5:86:0c:af:e8:c3:d3:95:b5:d9:8e:07:
92:e4:73:d0:1e:07:12:3a:6c:1b:29:cc:15:71:47:
48:07:17:5e:5b:9b:2e:57:ab:a2:e5:29:e5:f1:e6:
12:a3:e5:8e:40:02:57:2a:5f:a0:a4:36:88:e1:47:
74:c2:00:a2:d0:2d:2f:bf:40:d6:67:e9:90:ee:01:
3e:ab:d6:d6:cb:e4:69:61:4f:18:0b:df:55:0b:16:
de:0a:dc:f9:68:e0:73:04:26:33:54:31:e3:07:ce:
40:d6:e4:b0:d0:63:67:8a:06:9e:c2:fe:e7:a3:98:
6f:67:dc:37:70:7b:1e:1e:6a:9a:91:8d:0e:18:da:
f1:76:f2:25:f3:ff:3b:88:be:fe:bf:87:c2:34:84:
7b:4b:1c:27:20:fb:5b:69:dd:fa:ad:d4:39:9d:5b:
32:29:36:e5:7a:d1:1a:34:4a:58:db:99:74:01:f2:
d7:30:89:98:7e:77:eb:f2:7a:e8:8f:4e:de:4f:d1:
ed:4c:65:a3:7c:99:e7:d1:9b:8a:36:dc:c3:e1:0f:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:56:7F:38:D3:1F:BC:99:2C:02:0B:21:2B:32:87:B5:59:38:FB:B4
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6131303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:a10::/44
Signature Algorithm: sha256WithRSAEncryption
05:78:52:b0:d8:75:43:e4:30:37:5f:17:61:66:9c:4f:71:03:
2e:89:0c:86:d4:e5:0c:14:31:d6:f8:f7:5f:17:2e:be:4e:2a:
91:36:90:03:23:0b:26:e8:6d:a4:75:9e:24:87:dc:7f:de:b6:
82:fa:e4:27:7a:4f:79:14:1d:81:67:36:2f:70:08:e7:53:a6:
8c:ef:a6:9c:23:ae:97:93:93:31:51:ec:8d:1a:1a:4c:c7:ba:
96:36:b1:95:eb:3d:ca:7c:aa:44:bb:42:ca:ee:b5:d6:55:10:
a5:11:26:84:f7:92:63:e5:92:cf:3d:31:89:3a:c0:63:42:fd:
c3:4b:95:88:af:38:27:78:ff:4d:f4:41:1f:90:6b:28:9a:a8:
67:97:c5:9f:ec:a0:9c:6f:98:13:38:61:4a:5e:ff:bd:31:53:
b4:07:9c:16:b0:4b:25:01:96:8c:c9:9e:5b:2e:9b:18:b4:ae:
21:be:19:4b:78:f6:17:2d:37:ae:0f:80:f4:25:d8:8a:03:02:
ec:06:1f:68:2f:cd:09:43:c9:22:ee:2c:f6:2c:56:e5:78:a8:
67:f7:bb:96:73:13:7d:29:eb:a1:a0:2d:ca:e2:70:e0:a1:d5:
6f:56:38:a9:97:fe:b3:23:71:f5:93:52:d0:9d:03:5e:fa:e4:
74:ce:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:19:28 2025 by rpki-client