Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6239303a3a2f34342d3434203d3e2034373631.roa
File: 323430303a386230303a6239303a3a2f34342d3434203d3e2034373631.roa (raw, json)
Hash identifier: IviygyWP8e9Ji5lsE+LfwX41ilOsVZznOAmKoSvCfv8=
Subject key identifier: 00:B5:9F:D8:6B:C5:01:3D:18:3F:96:BD:78:98:6E:D7:90:A7:B3:D6
Certificate issuer: /CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Certificate serial: 38FBD401F3B50D77E0AAF102EB2342F8E92EEEC3
Authority key identifier: E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6239303a3a2f34342d3434203d3e2034373631.roa
Signing time: Tue 03 Dec 2024 20:56:17 +0000
ROA not before: Tue 03 Dec 2024 20:51:17 +0000
ROA not after: Tue 02 Dec 2025 20:56:17 +0000
asID: 4761
IP address blocks: 2400:8b00:b90::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 17 Jun 2025 18:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fb:d4:01:f3:b5:0d:77:e0:aa:f1:02:eb:23:42:f8:e9:2e:ee:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4309A93EFBD137B291B121E7944EB2E9055348B
Validity
Not Before: Dec 3 20:51:17 2024 GMT
Not After : Dec 2 20:56:17 2025 GMT
Subject: CN=00B59FD86BC5013D183F96BD78986ED790A7B3D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:a4:6a:6e:bb:9b:cc:7b:2d:ac:6f:cd:7f:
ed:49:03:ea:95:06:bd:e2:ba:47:84:6f:2d:48:77:
b8:6d:40:4d:07:56:44:89:26:1d:f9:ca:e9:27:29:
d9:59:a3:f7:77:0c:d9:e5:c6:09:65:62:73:79:da:
7c:f6:2b:c7:f7:dd:c9:5f:8a:20:d8:d5:35:13:b5:
86:5c:7e:82:e1:2a:69:81:72:1d:03:db:e8:ff:dc:
aa:a8:5d:99:eb:9e:7a:35:97:be:36:e9:86:1c:15:
0d:e2:03:b4:f5:72:f9:30:0a:94:00:7f:f8:cb:fc:
c4:9a:1e:14:ec:80:a7:40:09:ec:31:8c:df:a2:8c:
62:f3:95:c7:e6:8d:d9:08:d3:9a:37:31:f9:63:7d:
76:fb:ce:82:f0:45:2a:96:fe:56:fc:90:56:c6:fc:
79:6e:be:b7:58:79:1c:f8:7e:33:94:8e:87:10:14:
6d:c2:1b:26:f9:3d:53:3b:fc:27:3f:09:4f:df:9f:
87:ae:03:08:39:20:49:0a:bd:65:71:6d:3e:b9:53:
0e:8a:c3:3e:1d:9e:91:d9:34:19:8b:5b:fe:2f:d3:
d8:76:f3:44:41:9a:c7:72:cd:3d:89:e6:58:7a:60:
36:a7:06:83:61:a8:89:91:0e:6c:72:cd:38:10:1a:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B5:9F:D8:6B:C5:01:3D:18:3F:96:BD:78:98:6E:D7:90:A7:B3:D6
X509v3 Authority Key Identifier:
keyid:E4:30:9A:93:EF:BD:13:7B:29:1B:12:1E:79:44:EB:2E:90:55:34:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/E4309A93EFBD137B291B121E7944EB2E9055348B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4309A93EFBD137B291B121E7944EB2E9055348B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eec6eef9-713c-4e6b-b2bc-4c0452890345/0/323430303a386230303a6239303a3a2f34342d3434203d3e2034373631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:8b00:b90::/44
Signature Algorithm: sha256WithRSAEncryption
9a:08:62:83:e0:35:b0:2e:66:fb:38:8a:31:9d:20:48:39:ce:
35:16:7d:69:3b:34:49:22:7b:83:c7:df:f9:b7:bd:cd:39:8d:
91:9c:0b:6d:44:72:22:c4:d9:2e:1d:2a:c0:b0:ac:6b:c2:73:
7f:f7:f2:3d:7f:c2:68:a9:b9:b5:07:75:24:71:4a:04:e7:34:
a2:fd:5c:71:8b:ff:18:ea:4f:b0:85:18:b9:91:94:b8:17:a1:
53:0b:f1:c8:e3:f5:bd:70:fc:d8:2f:fd:dd:0b:65:70:e6:93:
c9:29:b6:7b:5c:e2:b6:75:55:26:38:f6:52:62:d5:6c:a2:70:
3c:da:21:d8:30:36:07:fa:f8:3c:73:6e:70:c7:16:63:fc:d4:
b7:53:4c:8d:2c:47:2c:aa:3a:0f:1d:20:cb:ea:68:d6:4b:a7:
00:85:51:82:1e:b0:db:b0:30:4b:ff:9a:c9:09:2c:f1:17:83:
7d:13:7f:0e:c7:59:01:ec:ba:e1:1d:01:9f:c0:22:ab:23:df:
f3:7b:78:27:bd:83:99:cc:a1:f1:aa:32:39:33:95:4b:51:8a:
6d:cb:50:5d:99:4e:b9:93:9f:fc:70:cc:18:51:a8:4a:42:9a:
3f:0b:e1:bf:46:59:9a:a1:c8:99:16:93:7d:2f:cf:e1:12:44:
30:d4:60:f2
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUOPvUAfO1DXfgqvEC6yNC+Oku7sMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5
MDU1MzQ4QjAeFw0yNDEyMDMyMDUxMTdaFw0yNTEyMDIyMDU2MTdaMDMxMTAvBgNV
BAMTKDAwQjU5RkQ4NkJDNTAxM0QxODNGOTZCRDc4OTg2RUQ3OTBBN0IzRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9p6RqbrubzHstrG/Nf+1JA+qV
Br3iukeEby1Id7htQE0HVkSJJh35yuknKdlZo/d3DNnlxgllYnN52nz2K8f33clf
iiDY1TUTtYZcfoLhKmmBch0D2+j/3KqoXZnrnno1l7426YYcFQ3iA7T1cvkwCpQA
f/jL/MSaHhTsgKdACewxjN+ijGLzlcfmjdkI05o3MfljfXb7zoLwRSqW/lb8kFbG
/HluvrdYeRz4fjOUjocQFG3CGyb5PVM7/Cc/CU/fn4euAwg5IEkKvWVxbT65Uw6K
wz4dnpHZNBmLW/4v09h280RBmsdyzT2J5lh6YDanBoNhqImRDmxyzTgQGu3/AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUALWf2GvFAT0YP5a9eJhu15Cns9YwHwYDVR0j
BBgwFoAU5DCak++9E3spGxIeeUTrLpBVNIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWM2ZWVmOS03MTNjLTRlNmItYjJiYy00YzA0NTI4OTAzNDUvMC9FNDMwOUE5M0VG
QkQxMzdCMjkxQjEyMUU3OTQ0RUIyRTkwNTUzNDhCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTQzMDlBOTNFRkJEMTM3QjI5MUIxMjFFNzk0NEVCMkU5MDU1
MzQ4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYzZlZWY5LTcxM2MtNGU2Yi1i
MmJjLTRjMDQ1Mjg5MDM0NS8wLzMyMzQzMDMwM2EzODYyMzAzMDNhNjIzOTMwM2Ez
YTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNzM2MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAIsAC5Aw
DQYJKoZIhvcNAQELBQADggEBAJoIYoPgNbAuZvs4ijGdIEg5zjUWfWk7NEkie4PH
3/m3vc05jZGcC21EciLE2S4dKsCwrGvCc3/38j1/wmipubUHdSRxSgTnNKL9XHGL
/xjqT7CFGLmRlLgXoVML8cjj9b1w/Ngv/d0LZXDmk8kptntc4rZ1VSY49lJi1Wyi
cDzaIdgwNgf6+DxzbnDHFmP81LdTTI0sRyyqOg8dIMvqaNZLpwCFUYIesNuwMEv/
mskJLPEXg30Tfw7HWQHsuuEdAZ/AIqsj3/N7eCe9g5nMofGqMjkzlUtRim3LUF2Z
TrmTn/xwzBhRqEpCmj8L4b9GWZqhyJkWk30vz+ESRDDUYPI=
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:20:22 2025 by rpki-client