Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6162303a3a2f34342d3434203d3e203435373237.roa
File:                     323430303a386230303a6162303a3a2f34342d3434203d3e203435373237.roa (raw, json)
Hash identifier:          cEb/PDbQVMK2DvNbu/zFDZUT5ww01+pyVQKylpMYang=
Subject key identifier:   EE:8A:A4:6F:87:7B:18:68:C7:67:7D:DE:D4:35:08:79:16:22:84:32
Certificate issuer:       /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial:       0D5C11676BB0DAE58F194ADC286584582C58F1A6
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6162303a3a2f34342d3434203d3e203435373237.roa
Signing time:             Tue 03 Dec 2024 20:54:23 +0000
ROA not before:           Tue 03 Dec 2024 20:49:23 +0000
ROA not after:            Tue 02 Dec 2025 20:54:23 +0000
asID:                     45727
IP address blocks:        2400:8b00:ab0::/44 maxlen: 44
Validation:               Failed, certificate revoked on Sun 15 Jun 2025 13:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5c:11:67:6b:b0:da:e5:8f:19:4a:dc:28:65:84:58:2c:58:f1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
        Validity
            Not Before: Dec  3 20:49:23 2024 GMT
            Not After : Dec  2 20:54:23 2025 GMT
        Subject: CN=EE8AA46F877B1868C7677DDED435087916228432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c9:83:8c:2b:f5:66:a5:a5:aa:35:ad:f5:46:
                    81:9b:50:24:52:d9:07:49:ca:c4:86:78:c0:15:4f:
                    52:7a:86:1a:84:16:7e:0c:45:0d:24:c0:f5:b7:b9:
                    ba:c8:5a:64:e3:08:2d:2e:0a:cb:10:7c:54:50:be:
                    33:db:58:0b:49:7c:01:61:73:63:7b:6d:59:8a:05:
                    e1:28:ca:fd:99:e2:1a:5c:1d:89:c1:f4:07:42:c8:
                    bf:d3:97:ab:6a:23:4b:08:22:bf:99:cd:80:ba:b7:
                    e6:ac:49:4a:7c:4e:63:57:b5:2e:ce:a0:75:8c:2b:
                    c6:18:4d:cf:67:a6:06:b0:06:cd:4d:37:6a:3a:44:
                    38:6d:a7:21:65:a7:0e:a0:ac:8f:07:7d:e9:36:de:
                    dc:29:95:9d:17:a4:c1:bc:12:78:5a:e4:0d:f1:98:
                    40:09:5c:e4:49:7a:86:7c:d4:ca:95:90:77:1b:cf:
                    80:c8:66:97:a2:a8:a9:6e:a3:60:27:ef:e6:99:36:
                    b6:1c:09:95:b3:c7:93:c0:cf:3d:40:66:bb:9b:2e:
                    5e:4c:32:0d:84:3c:33:17:72:09:6a:92:01:29:14:
                    62:09:06:27:71:98:7c:d8:d5:3f:93:d1:55:f4:40:
                    cd:c0:68:48:73:58:22:43:b6:ac:7a:fc:2e:42:ce:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8A:A4:6F:87:7B:18:68:C7:67:7D:DE:D4:35:08:79:16:22:84:32
            X509v3 Authority Key Identifier:
                keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6162303a3a2f34342d3434203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8b00:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:73:17:14:52:76:ed:00:40:51:dc:3c:40:9c:df:46:01:ac:
         0e:8b:9a:5a:24:8a:2f:f6:1f:ab:7a:ff:17:4d:84:81:09:1e:
         ab:e4:79:d0:4d:76:2b:4f:73:20:97:88:b2:84:2c:da:12:63:
         42:57:7a:e9:dc:0c:08:75:35:d5:22:ab:b4:41:75:cb:93:63:
         58:3d:50:f8:34:a4:23:68:3b:dc:21:85:0b:72:e7:56:e6:b0:
         f4:f6:ed:3a:f3:bc:4b:7b:0c:15:01:d1:fc:51:49:2b:15:09:
         1a:36:c3:62:63:99:44:8d:63:ac:80:c0:8d:81:9b:53:13:14:
         52:98:12:ed:e7:84:0b:ee:97:62:a2:a2:cd:c4:cf:a0:74:d9:
         ee:b1:97:3b:55:19:d7:a2:18:5c:8f:5c:19:f7:f1:19:07:a7:
         c7:e5:ee:53:3c:7b:96:2a:27:7b:86:87:52:2b:df:e7:60:ec:
         3d:fc:6a:1c:a7:de:b5:83:29:6e:95:80:16:a0:cd:40:27:21:
         86:d6:c7:47:99:31:96:d3:62:91:86:d9:4e:04:48:ec:4d:e6:
         99:f8:1c:75:77:94:28:5f:2b:27:47:32:9c:7d:73:92:67:d5:
         2b:bb:d0:3c:39:cb:8e:e9:c0:31:da:c5:0c:56:ca:1e:17:81:
         62:bc:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 05:47:22 2025 by rpki-client