Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6139303a3a2f34342d3434203d3e203435373237.roa
File: 323430303a386230303a6139303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier: OTWA8/li18BXviuIH5aNidyrhCkzv5X4tkEMZzqiEts=
Subject key identifier: 82:00:B8:BA:F1:37:3C:FC:FA:9B:E1:BB:FE:EA:5A:6D:04:50:85:FA
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 6FF687F99C2396B20F7C547864A4675A6988F7B9
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6139303a3a2f34342d3434203d3e203435373237.roa
Signing time: Tue 03 Dec 2024 20:54:05 +0000
ROA not before: Tue 03 Dec 2024 20:49:05 +0000
ROA not after: Tue 02 Dec 2025 20:54:05 +0000
asID: 45727
IP address blocks: 2400:8b00:a90::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f6:87:f9:9c:23:96:b2:0f:7c:54:78:64:a4:67:5a:69:88:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:49:05 2024 GMT
Not After : Dec 2 20:54:05 2025 GMT
Subject: CN=8200B8BAF1373CFCFA9BE1BBFEEA5A6D045085FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:cf:92:22:1e:aa:d2:35:66:55:6b:43:ce:
eb:67:b4:c2:d8:2d:1f:8e:78:c1:69:dd:c1:47:72:
bf:41:0b:3d:6c:bc:79:d4:2e:1a:d4:84:86:e9:6e:
c4:a1:ee:dc:e3:59:e9:e5:b0:b3:07:9a:88:da:9e:
cc:96:2d:56:4a:b9:9a:97:44:33:8c:27:93:a8:e7:
d1:6d:1e:3a:c2:39:2b:a4:b0:a9:a6:34:e9:e7:2a:
df:53:57:b0:00:5f:8f:b6:75:fa:f7:4e:31:63:79:
59:b8:92:73:bb:fd:01:5b:60:77:b4:b3:5e:36:dc:
e2:3c:75:95:c4:2d:80:d5:36:95:6c:3f:78:2f:0c:
47:e9:3f:54:ab:a2:1e:d7:fd:0a:2d:58:07:3f:1f:
c9:2c:4b:ca:e4:91:88:0c:9e:c7:6c:60:31:04:6a:
cb:29:c7:01:61:c7:54:72:65:36:4c:d2:6b:ce:01:
c3:53:56:34:96:1d:49:be:91:fb:9f:28:9d:32:f3:
eb:fe:99:5e:bd:a4:f5:dc:03:b0:bb:43:ef:df:c3:
69:19:ce:11:63:9d:a4:9b:56:6e:76:fa:b1:c9:c3:
e1:a7:a2:fd:b4:36:89:e5:c2:72:cd:dc:79:a0:54:
ab:a4:b8:26:cb:0e:d9:b5:67:b2:50:67:cd:1c:fa:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:00:B8:BA:F1:37:3C:FC:FA:9B:E1:BB:FE:EA:5A:6D:04:50:85:FA
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6139303a3a2f34342d3434203d3e203435373237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:a90::/44
Signature Algorithm: sha256WithRSAEncryption
65:be:64:c2:27:b2:fe:25:8d:4b:f6:17:59:b6:fa:4f:ed:62:
8d:f6:99:f1:16:cf:f8:bf:20:28:c9:3c:fd:50:ef:26:11:6a:
70:27:f7:b2:19:b2:74:4d:da:67:c2:82:f7:34:e7:78:95:d7:
5b:74:5e:e6:e4:b5:75:cb:3c:29:bf:16:57:85:9c:22:86:70:
6b:85:3f:17:73:be:76:c4:86:a5:80:44:55:b8:6c:f9:a3:04:
1f:7e:82:9d:97:77:8b:63:ec:47:4f:76:b4:80:b2:a1:30:13:
94:90:ad:b5:53:9d:bb:1b:f9:b4:65:dd:24:10:0a:e4:78:a4:
6c:83:ab:94:36:a6:4c:e2:02:1b:db:a3:21:92:ad:a2:e0:ce:
63:05:59:1e:87:32:f0:9d:85:b0:f0:a9:0c:61:68:3b:ff:81:
67:af:69:d0:e6:02:5d:52:92:0f:64:35:e9:a2:91:e5:ea:57:
80:32:22:62:f1:3e:ba:a1:38:38:97:4c:e2:33:ba:c1:d1:4c:
3b:15:dd:45:90:49:8d:4e:8b:97:2d:f6:f0:fc:37:13:1f:87:
e7:7e:fb:cc:b4:a5:e6:85:23:b0:e1:ea:d9:d9:10:e2:12:61:
25:8b:7c:de:54:79:32:82:86:e7:e1:a2:f2:1b:3a:be:7b:8d:
f8:ae:0c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:59:16 2025 by rpki-client