Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6238303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6238303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: j4BtS9oOoqhT9fMFY8nuIyQLnJiHE+JjdHfjBNOuTFY=
Subject key identifier: 89:50:CE:86:0D:74:0E:8F:1C:9B:61:10:70:D1:3B:8F:82:3F:AD:CD
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 2CB10A69363955DB7FF1307F850D1D9307AC9628
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6238303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:56:06 +0000
ROA not before: Tue 03 Dec 2024 20:51:06 +0000
ROA not after: Tue 02 Dec 2025 20:56:06 +0000
asID: 4761
IP address blocks: 2400:8b00:b80::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b1:0a:69:36:39:55:db:7f:f1:30:7f:85:0d:1d:93:07:ac:96:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:51:06 2024 GMT
Not After : Dec 2 20:56:06 2025 GMT
Subject: CN=8950CE860D740E8F1C9B611070D13B8F823FADCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:74:f9:a4:cc:fd:ef:9b:99:d5:b7:1f:f3:
bf:16:1a:d5:fe:43:f8:5b:37:21:a1:c0:60:da:5d:
4b:90:01:67:a7:31:3c:77:da:1d:f7:62:96:4d:68:
d7:95:c9:f9:68:48:be:5e:2a:bc:03:f9:ad:ac:75:
2e:2e:98:81:c5:22:2d:2c:6c:5b:b1:b2:3f:8f:66:
66:6a:7f:18:ea:c8:12:3c:7e:10:eb:97:33:dd:1b:
d0:dd:e7:a7:b8:e7:ed:df:45:c9:63:e9:73:c6:6a:
82:d9:08:5e:f5:96:c8:1b:a0:9a:30:34:6b:04:ff:
5b:4d:90:90:ab:8a:b4:1c:56:90:a8:60:e1:2a:1e:
e2:75:93:e2:cd:d5:1f:06:cf:ba:3e:48:3c:93:38:
cb:80:8f:4b:99:36:d7:72:30:1b:58:bb:f9:c5:09:
b1:a4:63:eb:d4:d1:c6:68:25:32:fe:d5:33:32:bd:
6b:45:f3:ba:b3:6d:88:96:e1:d3:15:73:5e:07:11:
1d:62:7d:5a:84:b1:f6:cc:f8:a7:b4:6d:df:71:97:
6d:7c:fb:cf:e7:5b:2d:7a:66:62:ff:de:64:b4:3f:
32:5b:35:bb:05:7f:ed:40:2c:88:78:f0:52:6f:d6:
c0:8d:2e:ec:c1:70:62:60:28:49:8d:b3:0d:a8:4d:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:50:CE:86:0D:74:0E:8F:1C:9B:61:10:70:D1:3B:8F:82:3F:AD:CD
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6238303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:b80::/44
Signature Algorithm: sha256WithRSAEncryption
1d:ff:0f:fc:ab:4c:3f:b1:b5:60:21:53:ff:44:4d:c1:a3:09:
de:5d:c9:bc:fb:0f:aa:d1:c9:d7:67:07:90:71:b3:94:17:f5:
a3:ab:ed:99:86:f7:03:e9:ab:af:eb:b1:44:1e:d9:e5:55:8b:
64:9b:fc:2c:89:25:38:ba:6b:d6:2f:1e:a7:f5:12:03:d9:ba:
30:60:93:b3:c4:ed:2b:26:f5:a4:bd:70:33:04:0b:e7:fb:8d:
1e:73:26:12:0e:c8:8b:aa:27:79:8d:c1:cf:45:97:50:b5:d7:
74:97:24:3f:54:ff:c0:da:2f:e4:96:41:e2:89:0c:c6:33:66:
74:8f:50:97:c6:6f:c6:a2:db:12:98:23:ef:75:ab:b3:40:3b:
ed:5b:b6:12:8a:76:d8:ec:c0:9e:d7:7e:7a:aa:3d:f7:c5:c7:
43:26:8d:b8:56:a1:65:61:b9:61:e0:e0:fa:40:bf:92:8d:12:
90:e9:7c:bb:2c:e6:2f:ba:91:31:a0:f7:e4:b0:9d:70:e1:c0:
ce:83:ca:8e:d4:74:91:24:8a:3f:d5:dc:b6:26:b2:e3:b6:c9:
b0:fe:ca:0e:d4:63:e4:6c:a1:a6:f5:92:f6:75:41:35:c1:bb:
63:2d:27:e1:72:88:83:22:63:22:dc:00:9f:c6:ff:32:0b:94:
7b:a4:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:58:55 2025 by rpki-client